Product Cyber Security Lead

Marlow
2 days ago
Create job alert

Our client, a leading player in the Defence & Security sector, is currently seeking a Product Security Lead to join their team in Marlow on a contract basis.

Key Responsibilities:

  1. Cyber Requirement Implementation

    Interpret and implement US Government-flowed cyber and information-assurance requirements across the product lifecycle.
    Ensure compliance with the following (non-exhaustive) set of standards and contractual flows:
    DoD 8140.01 (cyber workforce qualification)
    NIST SP (Apply online only) (CUI protection)
    DI-IPSC-82249, DISA STIGs, DI-MGMT-82191, DI-MISC-80508

  2. Product and Engineering Assurance

    Define and maintain the programme Cyber Security Plan, including CUI handling, secure development practices and compliance evidence.
    Lead cyber risk assessments, threat modeling and vulnerability assessments for embedded systems, software, firmware and Special Test Equipment (STE).
    Guide teams on secure coding, static/dynamic code analysis, secure configuration, hardening baselines, cryptographic controls and data-at-rest/data-in-transit protection.
    Ensure firmware, embedded applications and STE conform to defined security controls, logging, access control and audit requirements.

  3. Programme Execution

    Own the cyber schedule, deliverables and risks within the programme.
    Drive timely completion of artefacts required for customer acceptance, including SSPs, POA&Ms, incident response plans, configuration baselines and security test evidence.
    Coordinate with US prime/DoD representatives on security clarifications and compliance submission.

  4. Governance and Compliance

    Implement a compliant environment for development, test and integration, aligned to NIST (Apply online only), DFARS, STIGs and applicable ITAR/Export Control constraints.
    Ensure cyber incident reporting processes are in place and tested per DFARS (phone number removed).
    Support internal audit, external customer audit and formal assessment activities.

  5. Technical Leadership

    Provide expert coaching to firmware, software, systems and STE engineers.
    Ensure cyber requirements are correctly decomposed, allocated and verified.
    Act as the technical authority for all product cyber security matters on the programme.

    Job Requirements:

    Essential

    Extensive cyber security experience in defence, aerospace or other mission-critical regulated environments.
    Strong understanding of secure development for embedded systems, firmware, RTOS platforms and bespoke STE.
    Demonstrable experience implementing NIST SP (Apply online only), DoD cyber requirements, and DISA STIGs on hardware/software products.
    Experience producing and maintaining programme-level cyber security documentation and compliance evidence.
    Ability to lead cyber work packages and influence multi-disciplinary engineering teams.
    Eligibility to work with ITAR-controlled and Controlled Unclassified Information (CUI).

    Desirable

    US DoD 8140.01/8570 certification (e.g., CISSP, Security+, CEH).
    Experience working with US primes or on US DoD-funded programmes.
    Knowledge of export control, CUI marking, and classified information handling.
    If you are an experienced Product Security Lead looking for a challenging and rewarding contract role in the Defence & Security sector, apply now to join our client's dynamic team in Marlow

Related Jobs

View all jobs

Product Cyber Security Lead

Operational Technology Risk Manager

Cyber Security Consultants - DV Cleared

Cloud Security Lead

Security Manager

Product Security Champion (contract

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

SOC Analyst Jobs UK 2026: Salaries, Skills & How to Get Hired

Cyber security is one of the UK's fastest-growing career paths — and SOC analyst is where most people begin. It's in high demand, genuinely accessible, and you don't need a degree or years of experience to get started. But knowing what UK employers actually want in 2026 — what they pay, which certs matter, and how to stand out — is a different matter. This guide covers all of it.

How Many Cyber Security Tools Do You Need to Know to Get a Cyber Security Job?

If you are trying to build or move forward in a cyber security career, it can feel like the list of tools you are expected to know never ends. One job advert asks for SIEM platforms, another mentions penetration testing tools, another lists cloud security, threat intelligence platforms, endpoint detection, scripting languages and compliance frameworks. Scroll LinkedIn and it gets worse. Everyone seems to “know” dozens of tools, certifications and platforms. Here is the reality most cyber security hiring managers agree on: they are not hiring you because you know every tool. They are hiring you because you understand risk, can think like an attacker and a defender, follow process, communicate clearly and make good decisions under pressure. Tools matter — but only when they support those outcomes. So how many cyber security tools do you actually need to know to get a job? For most job seekers, the answer is far fewer than you think. This article explains what employers really expect, which tools are essential, which are role-specific and how to focus your learning so you look credible, not overwhelmed.

What Hiring Managers Look for First in Cyber Security Job Applications (UK Guide)

If you want to stand out in the highly competitive world of cyber security job applications, you need to understand what hiring managers look for before they even finish reading a CV. Cyber security hiring managers scan applications quickly and with specific priorities in mind. They assess not just your technical ability, but your judgement, professionalism, clarity, risk awareness and evidence of impact. This guide explains what hiring managers look for first in cyber security applications across roles like Security Analyst, Security Engineer, Penetration Tester, Incident Responder, Security Architect, Governance Risk and Compliance specialists and Cloud Security positions. Use this as a practical, step-by-step checklist to sharpen your CV, LinkedIn profile, cover letter and portfolio before you apply on www.cybersecurityjobs.tech .