Product Security Engineer

Product Security Engineer

Permanent role

Based in Bristol

Offering circa £55,000

Do you have experience in Secure by Design?

Do you have experience in Product Security Engineering?

Do you want to work with an industry-leading company?

If your answers are yes to these, then this could be the role for you!

As the Product Security Engineer, you will be working alongside a market-leading Defence and Aerospace company who are constantly growing and developing. They are always looking to bring on new talents such as yourself and further develop your skills to enable you to grow within the company and industry!

Some of what you will be involved in:

• Conduct risk assessments and identify vulnerabilities in product design, implementing, and deploying
• Implement controls and mitigations to manage identified risk
• Collaborate with development teams to integrate secure coding practices throughout the software development lifecycle
• Perform security code reviews and provide security guidance during product design and development to ensure Secure by Design
• Conduct threat modelling exercises to prioritise potential risks and develop mitigation strategies to reduce risks
• Ensure products meet regulatory standards such as ISO27001, NIST 800-30/37/53, Joint Standards Publications (JSP) such as JSP 440, 604 and Defence Standards (Def stans)
• Produce security documentation like RMADS, Security Assurance Document, Security Management Plan
• Conduct penetration testing, vulnerability assessments and remediation activities

Your skillset may include:

• Understanding and application of risk management frameworks and methodologies (e.g., ISO 27001/2, ISO27005/31000, NIST 800-30, NIST 800-53)
• Working knowledge of Defence Standards (e.g., JSPs, HMG, Def Stan 05-138, Def Stan 05-139)
• Experience with security testing tools, technologies and techniques

If this all sounds like something you will be interested in then simply apply and we can discuss the opportunity further!