Principal Product Security Engineer

BAE Systems
United Kingdom
Workplace: HybridFull timeFunction: CybersecuritySkills: ["Stakeholder management","Risk assessment"]

Lead Secure by Design application of information assurance, cyber security, and physical security across the full engineering lifecycle. Influence security requirements from concept and design through development, verification, acceptance, and in-service support while partnering with the System Design Authority, product teams, and external assessors. Define and maintain security requirements, conduct threat modelling, risk assessments, and vulnerability analysis, and produce security evidence and assurance documentation to support acceptance into service.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
BAE Systems
BAE Systems
12 hours ago

Principal Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Lead Secure by Design application of information assurance, cyber security, and physical security across the full engineering lifecycle. Influence security requirements from concept and design through development, verification, acceptance, and in-service support while partnering with the System Design Authority, product teams, and external assessors. Define and maintain security requirements, conduct threat modelling, risk assessments, and vulnerability analysis, and produce security evidence and assurance documentation to support acceptance into service.
Location: United Kingdom
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Lead the application of information assurance, cyber security, and physical security principles throughout the Secure by Design engineering lifecycle.
  • •Influence security requirements across concept, design, development, verification, acceptance, and in-service support, ensuring alignment with regulatory, customer, and organisational standards.
  • •Conduct threat modelling, security risk assessments, and vulnerability analysis to identify potential attack vectors early in the design lifecycle.
  • •Advise engineering teams on security control selection and implementation, mitigation strategies, and support security assurance objectives.
  • •Define, develop, and maintain security requirements and lead development of security evidence and assurance documentation for Secure by Design acceptance into service.
Travel: Low travel

Pay and Benefits

Salary: GBP 64,000

Key Requirements

  • •Be certified to CISSP, CISM or equivalent.
  • •Have in-depth knowledge of security standards and frameworks, such as NIST series and ISO 27000 series, plus understanding of Defence Standards and processes.
  • •Demonstrate knowledge of security analysis techniques including threat modelling, risk assessment, encryption, and penetration testing.
  • •Bring expert security knowledge gained through substantial work experience in a product development environment.
  • •Have experience with Product Security Assurance tools and technologies (e.g., MoD processes, SbD principles, and security cases such as Security Management Plans and Security Impact Assessments).
Experience:DefenceAerospace
Skills:Stakeholder managementRisk assessment
Certifications:CISSPCISM
Tech Stack:CISSPCISMNISTISO 27000Threat modellingRisk assessmentEncryptionPenetration testingMoD processesSecure by Design (SbD)Security Management PlansSecurity Impact AssessmentsSecurity Cases

Eligibility

Security Clearance:Baseline Personnel Security Standard

Company Brief

BAE Systems
Multinational defence, security and aerospace company designing, manufacturing and supporting military and civilian systems including naval ships, submarines, aircraft, cyber solutions and electronic systems for governments and commercial customers.
Industry: Defense Manufacturing
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1999
WebsiteLinkedIn