Staff Product Security Engineer

Strativ Group; Greater London; On-site; GBP 110,000 - 140,000; Full time

Job summary

Strativ Group in London is seeking a Staff Product Security Engineer to own the development and maturation of security features across our product suite, conduct threat modelling, and work closely with engineering teams to build resilient systems.

This role requires UK citizenship and eligibility for SC clearance. You will develop novel security tooling, perform adversarial testing, and help embed security into embedded and Linux platforms throughout the product portfolio.

Qualifications

• Proficiency in C/C++, Golang, Rust, or Python.
• Experience securing firmware, applications, networks, IoT, or embedded systems.
• Experience delivering production-ready systems on embedded or Linux platforms.
• Structured threat modelling and risk assessment experience.

Responsibilities

• Own the development and maturation of security features across our product suite.
• Conduct architecture reviews, source code analysis, configuration audits, and adversarial testing.
• Build and integrate security tooling across the product portfolio.
• Author System Security Plans, Threat Analysis and Risk Assessments, and compliance documentation.
• Work alongside engineering, manufacturing, and operations teams to embed security into products and processes.
• Identify and remediating weaknesses in designs, implementations, and integrations before they become problems.

Skills

C/C++

Golang

Rust

Python

Security tooling development

Threat modelling

Risk assessment

Job description

Staff Product Security Engineer | London

London, UK | Full-Time | SC Clearance Required | UK Citizens Only

We are a defence technology company working on some of the most technically complex systems being built today - AI platforms, command and control systems, aerospace vehicles, and long range sensors. Keeping them secure isn't an afterthought here. It's a core part of how we build.

We're looking for a Staff Product Security Engineer who wants to get their hands dirty developing novel security tooling, hunting vulnerabilities, conducting adversarial testing, and working directly with engineering teams to build resilience into the products themselves.

What you'll be doing:

• Owning the development and maturation of security features across our product suite
• Conducting architecture reviews, source code analysis, configuration audits, and adversarial testing
• Building and integrating security tooling across the product portfolio
• Authoring System Security Plans, Threat Analysis and Risk Assessments, and compliance documentation
• Working alongside engineering, manufacturing, and operations teams to embed security into both products and processes
• Identifying and remediating weaknesses in designs, implementations, and integrations before they become problems

You'll need:

• Proficiency in one or more of C/C++, Golang, Rust, or Python
• Solid experience assessing and improving security across firmware, applications, networks, IoT, or embedded systems
• Experience building and delivering production-ready systems, particularly on embedded or Linux platforms
• Structured threat modelling and risk assessment experience
• UK citizenship and eligibility for SC clearance as a minimum

Great if you also have:

• Familiarity with the UK MOD Cyber Security Model including DefStans, JSP 440, JSP 453/604, DIPNs and ISNs
• Experience with aviation cyber security standards such as DO-326A/ED-202A
• Knowledge of SORA or CAA/MAA type certification cyber requirements
• Familiarity with RF Emanation Protection or TEMPEST
• Experience with inter-domain gateways, cross domain solutions, or network security devices
• Background in embedded, aerospace, or cyber-physical security architectures
• Sole UK nationality preferred

If you're the kind of engineer who'd rather find the vulnerability than document why someone else missed it - we'd like to hear from you.