Lead Product Security Engineer

3 months ago

Edinburgh, United Kingdom Leonardo Full time

Job Description:

At Leonardo, we have a fantastic opportunity for a Lead Product Security Engineer to join our team within the Customer Support and Service Solutions (CS3) line of business. CS3 operates across the UK, providing innovative and invaluable support solutions to our customers. We help to ensure the availability of front-line capability wherever and whenever required.

We are looking for an experienced security engineer with expertise in developing and maintaining product security management systems for defence and government customers. Within CS3, the term product can be used to include both in-service equipment, and the support solutions/services provided to customers, which in themselves are developed. The Lead Product Security Engineer will be responsible for all security aspects of product design, development, verification and maintenance of this range of products through all phases of their lifecycle, including completion of key security related planning, assessment, risk mitigation and accreditation activities. It will also involve working closely with product development teams to design, implement and maintain appropriate security controls, providing technical advice within the specialist area of product security.

Work with customer security accreditors and SMEs as well as project engineering teams to ensure product compliance with customer and company security policies and that any residual security risks are defined and managed. Production of Security Managements Plans, work package descriptions and cost estimates in support of product bids, services and proposals. Undertake security risk assessments, create risk mitigation plans, perform mitigation gap analysis and prepare security management documentation for system accreditation. Define product security requirements, advising development teams on suitable implementation standards and techniques and overseeing product development activities. Liaise with Security Accreditors and Security Assurance Coordinators in support of security accreditation. Prepare Protection Profiles, Security Targets and Evaluation Management Plans, and liaise with NCSC and commercial evaluation teams in support of evaluation activities. Advise development teams on suitable platform lockdown and configurations, and support Penetration test activities. Analyse penetration test results and preparation of remedial action plans. Prepare and implement through life support and maintenance for product security including vulnerability and patch management plans Lead security incident management teams during incident/crisis situations in conjunction with the Chief Product Security Engineer Support the review and maintenance of corporate product security policies, processes and ways of working, including recommending improvements where appropriate. Deliver product security training to project engineering teams. Experience in the development of security solutions for military and/or commercial products and systems. Registered NCSC certified professional at senior level or above, or NCSC recognised qualification, e.g. ISC Certified Information System Security Professional. Knowledge of UK/NATO Information Assurance standards, procedures and systems, including Government Functional Standard GovS 007: Security, HMG IS1&2, ISO27000series standards, NIST SP800series standards, JSP440, JSP604, guidance material provided by NCSC, CPNI and NIST. Practical experience of producing Security Accreditation documentation Practical experience of NCSC and Common Criteria security evaluation techniques. Knowledge of current crypto technologies and key management systems Model Based System Engineering (MBSE) knowledge Understanding of operating systems, firmware and software security controls and how to apply them. Understanding of existing, current and emerging technologies including cloud, virtualisation and web-based Excellent communication and interpersonal skills, with the ability to interact with a range of stakeholders, including development teams, subject matter experts, accreditors and senior leaders. A positive attitude, with a drive to improve the business, and the ability to influence and motivate others Experience of working with Enterprise Security Architectures (SABSA, MODAF).

Security Clearance

:

Life at Leonardo

With a company funded benefits package, a commitment to learning and development, and a flexible approach to working hours focused on the needs of both our employees and customers, a career with Leonardo has never offered as many opportunities or been more accessible to as many people.

Flexible Working: Flexible hours with hybrid working options. For part time opportunities, please talk to us

Company funded flexible benefits: Access to private healthcare, dental schemes, Workplace ISA, Go Green Car Scheme, technology and lifestyle options (£500 annual allowance)

Holidays: 25 days plus bank holidays, option to buy/sell leave and to accrue up to 12 additional flexi leave days per year

Pension: Award winning pension scheme (up to 15% employer contribution)

Wellbeing:  Employee Assistance Programme with access to free mental health support, financial wellbeing support and network groups to demonstrate our ongoing commitment to diversity & inclusion (Enable, Pride, Equalise, Reservists, Carers)

Lifestyle: Discounted Gym membership, Cycle to work scheme

Training: Free access to more than 4000 online courses via Coursera

Referral Incentive: You can earn a reward for successfully referring a friend or family member

Bonus: Scheme in place for all employees at management level and below

  • Product Security Engineer

    2 months ago

    Edinburgh, United Kingdom Skyscanner Full time

    Our world is different. And we’re proud of that. Less complication. More sense of purpose. You’ll notice it every day, as you help make booking travel easier and more accessible. How? By solving challenges on a grand scale. By building solutions and your own expertise alongside inspirational, supportive colleagues. And by taking personal and...

  • Product Security Engineer

    3 months ago

    Edinburgh, United Kingdom Leonardo Full time

    Job Description: The opportunity: Technology in Defence is rapidly evolving, and so are the risks to capabilities and success through an ever-changing security landscape. As customers demand higher levels of resilience in the products we create, our approach to securing systems and products needs to change with it. We are recruiting for a Product...

  • Senior Security Engineer

    5 days ago

    Edinburgh, United Kingdom Adarma Security Full time

    Who we are Do you have the skills to fill this role Read the complete details below, and make your application today.We’re a company on a mission to protect the promise of cyber resilience. From banking and retail to food delivery and manufacturing, our team of passionate cyber defenders are committed to protecting the things that matter. We stand...

  • Senior Security Engineer

    6 days ago

    Edinburgh, United Kingdom Adarma Security Full time

    Who we are Do you have the skills to fill this role Read the complete details below, and make your application today.We’re a company on a mission to protect the promise of cyber resilience. From banking and retail to food delivery and manufacturing, our team of passionate cyber defenders are committed to protecting the things that matter. We stand...

  • Senior Security Engineer

    2 weeks ago

    Edinburgh, United Kingdom Adarma Security Full time

    Who we are We’re a company on a mission to protect the promise of cyber resilience. From banking and retail to food delivery and manufacturing, our team of passionate cyber defenders are committed to protecting the things that matter. We stand side-by-side with our customers every day providing innovative cybersecurity solutions that protect against...

  • Senior Security Engineer

    2 weeks ago

    Edinburgh, United Kingdom Adarma Security Full time

    Who we are We’re a company on a mission to protect the promise of cyber resilience. From banking and retail to food delivery and manufacturing, our team of passionate cyber defenders are committed to protecting the things that matter. We stand side-by-side with our customers every day providing innovative cybersecurity solutions that protect against...

  • Senior Security Engineer

    1 day ago

    Edinburgh, United Kingdom Adarma Security Full time

    Who we are We’re a company on a mission to protect the promise of cyber resilience. From banking and retail to food delivery and manufacturing, our team of passionate cyber defenders are committed to protecting the things that matter. We stand side-by-side with our customers every day providing innovative cybersecurity solutions that protect against...

  • Senior Security Engineer

    3 days ago

    Edinburgh, United Kingdom Adarma Security Full time

    Who we are We’re a company on a mission to protect the promise of cyber resilience. From banking and retail to food delivery and manufacturing, our team of passionate cyber defenders are committed to protecting the things that matter. We stand side-by-side with our customers every day providing innovative cybersecurity solutions that protect against...

  • Senior Security Engineer

    2 weeks ago

    Edinburgh, United Kingdom Adarma Security Full time

    Who we are We’re a company on a mission to protect the promise of cyber resilience. From banking and retail to food delivery and manufacturing, our team of passionate cyber defenders are committed to protecting the things that matter. We stand side-by-side with our customers every day providing innovative cybersecurity solutions that protect against...

  • Senior Security Engineer

    2 weeks ago

    Edinburgh, United Kingdom Adarma Security Full time

    Who we are We’re a company on a mission to protect the promise of cyber resilience. From banking and retail to food delivery and manufacturing, our team of passionate cyber defenders are committed to protecting the things that matter. We stand side-by-side with our customers every day providing innovative cybersecurity solutions that protect against...

  • Product Security Specialist

    1 week ago

    Edinburgh, Edinburgh, United Kingdom Leonardo Full time

    Position: Product Security SpecialistCompany: LeonardoAs a leading innovator in the defence industry, Leonardo is constantly evolving to meet the changing security landscape. Our products and systems must be resilient and secure to meet customer demands.We are seeking a Product Security Specialist to join our team. In this role, you will contribute to the...

  • Product Security Specialist

    3 days ago

    Edinburgh, Edinburgh, United Kingdom Leonardo Full time

    Position: Product Security SpecialistCompany: LeonardoAs a leading innovator in the defence industry, Leonardo is constantly evolving to meet the changing security landscape. Our products and systems must be resilient and secure to meet customer demands.We are seeking a Product Security Specialist to join our team. In this role, you will contribute to the...

  • Security Solutions Architect

    5 days ago

    Edinburgh, Edinburgh, United Kingdom Adarma Security Full time

    Job DescriptionAbout UsWe are a leading cybersecurity company, Adarma Security, dedicated to protecting our customers' digital assets. Our team of passionate cybersecurity experts is committed to delivering innovative solutions that safeguard against threats and mitigate risk.Our MissionWe empower our customers to defend against cyber threats by providing...

  • Roaming Security Officer

    3 months ago

    Edinburgh, United Kingdom Amberstone Security Full time

    **Roaming Security Officer - SIA Licence is essential to be considered for the role** **An exciting new career opportunity for Roaming Security Officers in Edinburgh, working in partnership with one of the largest retail companies, Tesco** Amberstone provides integrated security solutions through the provision of technology products and manned guarding...

  • Senior / Lead Security Engineer

    3 months ago

    Edinburgh, United Kingdom CAPCO Full time

    Senior / Lead Security Engineer at Capco UK - Edinburgh Senior/Lead Security Engineer About Capco   Capco is a global technology and business consultancy, focused on the financial services sector. We are passionate about helping our clients succeed in an ever-changing industry. You will work on engaging projects with some of the largest banks...

  • Lead Data Security Engineer

    3 weeks ago

    Edinburgh, Edinburgh, United Kingdom Rockstar Games UK Full time

    At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar Games...

  • Lead Data Security Engineer

    1 month ago

    Edinburgh, Edinburgh, United Kingdom Rockstar Games UK Full time

    At Rockstar Games, we create world-class entertainment experiences. A career at Rockstar Games is about being part of a team working on some of the most creatively rewarding and ambitious projects to be found in any entertainment medium. You would be welcomed to a dedicated and inclusive environment where you can learn, and collaborate with some of the most...

  • Mobile Roaming Security Officer

    3 months ago

    Edinburgh, United Kingdom Amberstone Security Full time

    **Roaming Security Officer - SIA Licence is essential to be considered for the role** Amberstone provides integrated security solutions through the provision of technology products and manned guarding resources. Our security solutions bridge the gap through the provision of risk based integrated security solutions. Products combine to provide a best return...

  • Mobile Response Security Officer

    3 months ago

    Edinburgh, United Kingdom Amberstone Security Full time

    **Mobile response Security Officer - SIA Licence is essential to be considered for the role** ***Amberstone provides integrated security solutions through the provision of technology products and manned guarding resources. Our security solutions bridge the gap through the provision of risk based integrated security solutions. Products combine to provide a...

  • Mobile Response Security Officer

    3 months ago

    Edinburgh, United Kingdom Amberstone Security Full time

    **Mobile response Security Officer - SIA Licence is essential to be considered for the role** ***Amberstone provides integrated security solutions through the provision of technology products and manned guarding resources. Our security solutions bridge the gap through the provision of risk based integrated security solutions. Products combine to provide a...