Product Security Engineer

Salary: £65,000 - 70,000 per year

Requirements:

• We are seeking an experienced Product Security Engineer with experience planning and implementing Product Security activities, such as NIST SP 800 series.
• We require experience producing project security documentation using Secure by Design principles.
• We require knowledge of Security/Information Assurance standards and guidance, such as CESG Good Practice Guides.
• We require experience conducting security risk assessments using recognised methodologies, such as NCSC.
• We need a strong understanding of security assurance within complex engineering or defence environments.
• You must have excellent written and verbal communication skills.
• You must have strong Microsoft Office skills.
• You must be able to work independently while collaborating effectively within multidisciplinary teams.
• You must be flexible and adaptable, with the ability to respond to changing project demands.
• You must be eligible to obtain UK Security Clearance (SC).
• Desirable: Risk Management.
• Desirable: DevSecOps.
• Desirable: Electromagnetic Compatibility (EMC).
• Desirable: TEMPEST.
• Desirable: familiarity with Defence Security Standards including Def Stan 05-138, Def Stan 05-139, JSP440 and the Security Policy Framework.
• Previous experience within Defence, the Ministry of Defence, Armed Forces or defence contracting is desirable.

Responsibilities:

• We conduct Product Security risk analysis and assessments.
• We develop and maintain Product Security documentation and assurance artefacts.
• We ensure security deliverables comply with customer and contractual requirements.
• We develop and implement Product Security policies and processes.
• We contribute security effort estimates during the bid process.
• We chair internal and external Product Security reviews and working groups.
• We support engineering teams in embedding Secure by Design principles throughout product development.
• We provide additional support across the wider Supportability function as required.

Technologies:

• DevSecOps
• Embedded
• Support
• Security

More:

We are recruiting a Product Security Engineer to join our engineering team in Chertsey, Surrey. This is a hybrid role, requiring a minimum of 2 days per week onsite, with the expectation of up to 5 days onsite depending on the project. The salary is up to £70,000 per annum. We support the delivery of secure, high-assurance products within the defence sector, working on technically challenging projects where security is embedded throughout the product lifecycle using Secure by Design principles. Due to the nature of the work and security clearance requirements, we can only consider applications from UK nationals who have been British citizens from birth and who are eligible to obtain UK Security Clearance (SC).

last updated 32 week of 2026