Principal Engineer - Product Security

Overview

Principal Product Security Engineer — 12 Month Contract. Hybrid, 2-3 days per week on site. Location options:
Frimley, Barrow or Weymouth Based. £85.40 an hour Umbrella Inside IR35. This opportunity is with one of the UK’s leading Defence companies based in Frimley.

• Degree (or equivalent experience) in a relevant STEM subject or Information Security related.
• Holds NCSC CCP SIRA status (or able to achieve).
• Is a member of a professional institute.

• The PSA Principal Engineer will have a good understanding of the applicable regulations, standards, policies and guidance on information risk management, to identify, analyse and evaluate information risks.
• Ability to document and present risk management options to the business and participate in discussions.
• Good understanding of information security principles and ability to advise on the potential impact to Product Systems.
• Knowledge of security related activities required to support the engineering lifecycle with experience of operating in the phase relevant to the role.
• Working knowledge of the cyber security and information assurance marketplace, including products, suppliers and key threats, and understanding of potential future technologies.
• Proven experience of assessing and managing information risk in line with industry good practice.
• Experience of assessing and advising on controls to support Product Safety.
• Proven experience of applying Product Security/Information Security concepts to applicable technologies within the environment (or similar).
• Supports and contributes to information security professional bodies and industry forums.
• Can demonstrate experience of mentoring and/or providing support to others.

• Ability to speak knowledgeably and credibly with customers, users and internal stakeholders to explain causes of information risks, their likelihood and potential operational and business impacts.
• Experience of Product Security Engineering activities in the defence, maritime or closely linked domain.
• Demonstrates continuous improvement, professional development and awareness of current industry good practice.