Product Security Engineer – 6‑month contract

About the role

As the Product Security Engineer / Lead Security Engineer you will own all security aspects of product design, development, verification and maintenance throughout the product lifecycle. The role centres on conducting security risk assessments, defining mitigation plans, deriving security requirements and collaborating directly with product development teams to embed robust security controls.

Key responsibilities

• Produce Security Management Plans, work package descriptions and cost estimates to support product bids and proposals.
• Carry out security risk assessments, mitigation gap analysis and prepare security management documentation for system assurance.
• Define product security requirements and advise development teams on bespoke security control implementations.
• Liaise with internal and external security assurance authorities, including the NCSC, to demonstrate compliance with UK and international frameworks.
• Support penetration testing activities, analyse results and develop remedial action plans.
• Lead security incident management teams during crises in coordination with the Head of Product Security.

Required profile

• Proven experience developing bespoke product‑based security solutions for military or commercial systems.
• Graduate degree in engineering, computing or a related scientific discipline, or equivalent professional study.
• Full membership of an NCSC‑recognised professional security body (e.g., CIISec, ISC2, ISACA).
• Recent hands‑on experience with UK/EU/NATO information‑security standards such as MOD Secure by Design, GovS‑007, HMG IS1/2, ISO 27001 and NIST SP 800‑30/37/53.

Required skills

• ISO 27001
• NIST SP 800‑30, SP 800‑37, SP 800‑53
• UK MOD Secure by Design framework
• GovS‑007 and HMG IS1/2
• Quantum Cryptography and Quantum Key Management
• Model‑Based System Engineering (MBSE)
• Cryptographic technologies and Key Management Systems