Product Security Engineer / Lead Security Engineer

Location: Luton
Contract: 6 months
Rate: Up to circa £93 per hour (Inside IR35)
Clearance: High-level UK Security Clearance required

Overview

We are seeking an experienced Product Security Engineer / Lead Security Engineer to take responsibility for security throughout the full product lifecycle, from design and development through to verification, maintenance and obsolescence.

The role will focus on security risk assessment, security requirements, risk mitigation and assurance, working closely with engineering and product development teams to design and implement appropriate security controls and supporting security documentation.

Key Responsibilities

• Produce Security Management Plans, work package descriptions and cost estimates for bids, proposals and product activities.
• Conduct security risk assessments, mitigation planning and gap analysis, supporting system security assurance.
• Define and manage product security requirements and advise engineering teams on security control implementation.
• Work with internal and external security assurance authorities, including the NCSC, to demonstrate compliance and obtain assurance of security solutions.
• Manage security activities across development, testing and manufacturing environments.
• Advise on platform hardening, lockdown and secure configuration, and support penetration testing activities.
• Analyse penetration test results and develop remedial action plans.
• Manage security throughout the product lifecycle, including vulnerability, patch and obsolescence management.
• Lead security incident response activities during incidents or crisis situations.
• Contribute to and maintain corporate product security policies and processes.
• Deliver product security guidance and training to engineering teams.