Lead Product Security Engineer

Location: Luton (Hybrid working - est 1-2 days per week onsite)

Duration: 12 month initial contract

Rate: £91ph UMB (Inside IR35)

Job Title: Security Engineer - Defence & Government Systems

Overview:

A leading defence technology company is seeking a skilled Security Engineer to develop and manage product security for high-integrity systems. You will oversee security throughout the product lifecycle-from concept to maintenance-ensuring alignment with customer and regulatory requirements.

Key Responsibilities:

Lead the definition, implementation, and governance of product security measures across the entire system lifecycle.
Develop Security Management Plans, risk assessments, and mitigation strategies.
Define and review security requirements for product teams.
Support system accreditation, liaising with security accreditors and assurance teams.
Prepare security documentation including Protection Profiles, Security Targets, and TEMPEST Control Plans.
Assist with platform lockdown, penetration testing, and vulnerability management.
Lead incident response efforts and support product security training.

Skills & Experience:

Background in securing defence or commercial systems.
Degree in engineering, computer science, or related field.
Certified security professional (e.g. CISSP, NCSC Certified Professional).
Familiar with UK/NATO IA standards (ISO 27000, NIST SP800, JSP440, etc.).
Experience with accreditation, security evaluation, and cryptographic systems.
Strong communication, leadership, and collaboration skills.
Eligible for SC clearance (UK-only caveat).

Desirable:

DV clearance
Understanding of quantum cryptography
Familiarity with NATO security policies and advisory boards

Working Environment:

Primarily desk-based with some UK/international travel. Flexible remote working is available, though some on-site presence is required