Principal Product Security Engineer
BAE Systems13 hours ago
Portsmouth, United KingdomStaff+
Responsibilities
- Lead the application of information assurance, cyber security, and physical security principles throughout the Secure by Design engineering lifecycle.
- Define, develop, and maintain product security requirements aligned with regulatory, customer, organisational, and defence standards.
- Conduct threat modelling, security risk assessments, vulnerability analysis, and security assurance activities.
- Advise design engineering and product development teams on security controls, mitigation strategies, and technical security maturity.
- Develop and maintain security evidence and assurance documentation, including security cases, Security Management Plans, Security Impact Assessments, and Risk Assessments.
- Represent projects at Security Working Groups and support formal design reviews, qualification, acceptance, and fitness-for-purpose activities.
Requirements
- CISSP, CISM, or an equivalent professional certification is required.
- In-depth knowledge of security standards and frameworks including the NIST series and ISO 27000 series, along with an understanding of Defence Standards and processes.
- Knowledge of threat modelling, risk assessment, encryption, and penetration testing techniques.
- Expert security knowledge gained through substantial work experience applying security principles in a product development environment.
- Knowledge of tools and technologies supporting Product Security Assurance, including MoD processes, Secure by Design principles, security cases, Security Management Plans, Security Impact Assessments, and Risk Assessments.
- Applicants must achieve Baseline Personnel Security Standard clearance; higher National Security Vetting may be required for some roles.
Benefits
- Hybrid and flexible working arrangements are available, with occasional travel to other BAE Systems sites.
- Professional development is supported through the Product Security capability centre and lifelong learning opportunities.
- The role offers financial and personal wellbeing support, tailored rewards, and a balanced lifestyle.
- BAE Systems promotes an inclusive workplace with a strong shared purpose.
Categories
About BAE Systems
BAE Systems is a public defense and aerospace manufacturer that designs and builds military aircraft, submarines, combat vehicles, electronic systems, and cyber/intelligence solutions for governments and defense agencies worldwide. Headquartered in London and listed on the London Stock Exchange, it was formed in 1999 from the merger of British Aerospace and Marconi Electronic Systems, and operates in more than 40 countries.