Lead Product Security Engineer Bedfordshire

Location:

Luton (3 days per week onsite)

Duration: 6 month initial contract

Rate: £91.70ph UMB (Inside IR35)

We are looking for Lead Product Security Engineers to support our defence client in Luton. The successful candidates will report to the Head of Engineering Projects and be responsible for all security aspects of product design, development, verification, and maintenance through all phases of the product lifecycle.

• Develop and maintain bespoke capability security management systems for Defence and Government customers.
• Undertake security risk assessments and prepare security risk mitigation plans.
• Derive security requirements and work closely with product development teams to design, implement, and maintain appropriate security controls.
• Produce Security Management Plans and work package descriptions.
• Liaise with customer security assurance authorities to ensure product compliance with security policies.
• Advise development teams on suitable platform lockdown and configurations, and support Penetration test activities.
• Manage security incident teams during incidents/crisis situations.
• Deliver product security training to project engineering teams.

• Experience in the development of bespoke product-based security solutions.
• Graduate degree in relevant engineering, computing, or related scientific discipline.
• Membership of an NCSC recognised professional security body (e.g. CIISec, ISC2, ISACA).
• Knowledge of UK/EU/NATO information security standards and frameworks.
• Practical experience of producing technical assurance documentation.
• Knowledge of current cryptographic technologies and key management systems.
• Understanding of Model Based System Engineering (MBSE).
• Excellent verbal and written communication skills.
• Ability to obtain SC clearance with UK-eyes only caveat.

• DV Clearance.
• Experience with Common Criteria security evaluation techniques.
• Knowledge of Quantum Cryptography and Quantum Key management.
• Familiarity with existing threat intelligence sources.
• Understanding of NATO security policy, risk management, and Accreditation.

This is a desk-based role using display screen equipment, working full-time hours often in a demanding environment, with occasional travel throughout the UK and abroad. While there is an option for some remote work, on-site attendance will be required for face-to-face meetings and when handling sensitive material.