Lead product security activities across the full product lifecycle, from concept and design through to deployment, maintenance and retirement.
Conduct security risk assessments, threat analysis, risk mitigation planning and gap analysis activities.
Produce security management plans, security cases, assurance documentation and supporting bid material.
Define and derive product security requirements and work closely with engineering teams to implement appropriate security controls.
Support system accreditation and assurance activities, liaising with internal stakeholders and external security authorities.
Requirements
Experience delivering product security solutions within Defence, Government, Aerospace or highly regulated environments.
Strong understanding of security risk assessment, security assurance and secure system design principles.
Practical knowledge of recognised security standards and frameworks including ISO 27001, NIST, MOD Secure by Design, GovS 007 and JSP security policies.
Experience producing technical security documentation such as Security Cases, Security Operating Procedures, Key Management Plans and Test Security Instructions.
Knowledge of cryptographic technologies, key management systems and secure communications architectures.
Knowledge of NATO security policy, accreditation and risk management frameworks.
Understanding of Model Based Systems Engineering (MBSE) and its application to product security.
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.