Lead Product Security Engineer

7 months ago

Edinburgh, United Kingdom Leonardo Full time

Job Description:

At Leonardo, we have a fantastic opportunity for a Lead Product Security Engineer to join our team within the Customer Support and Service Solutions (CS3) line of business. CS3 operates across the UK, providing innovative and invaluable support solutions to our customers. We help to ensure the availability of front-line capability wherever and whenever required.

We are looking for an experienced security engineer with expertise in developing and maintaining product security management systems for defence and government customers. Within CS3, the term product can be used to include both in-service equipment, and the support solutions/services provided to customers, which in themselves are developed. The Lead Product Security Engineer will be responsible for all security aspects of product design, development, verification and maintenance of this range of products through all phases of their lifecycle, including completion of key security related planning, assessment, risk mitigation and accreditation activities. It will also involve working closely with product development teams to design, implement and maintain appropriate security controls, providing technical advice within the specialist area of product security.

Work with customer security accreditors and SMEs as well as project engineering teams to ensure product compliance with customer and company security policies and that any residual security risks are defined and managed. Production of Security Managements Plans, work package descriptions and cost estimates in support of product bids, services and proposals. Undertake security risk assessments, create risk mitigation plans, perform mitigation gap analysis and prepare security management documentation for system accreditation. Define product security requirements, advising development teams on suitable implementation standards and techniques and overseeing product development activities. Liaise with Security Accreditors and Security Assurance Coordinators in support of security accreditation. Prepare Protection Profiles, Security Targets and Evaluation Management Plans, and liaise with NCSC and commercial evaluation teams in support of evaluation activities. Advise development teams on suitable platform lockdown and configurations, and support Penetration test activities. Analyse penetration test results and preparation of remedial action plans. Prepare and implement through life support and maintenance for product security including vulnerability and patch management plans Lead security incident management teams during incident/crisis situations in conjunction with the Chief Product Security Engineer Support the review and maintenance of corporate product security policies, processes and ways of working, including recommending improvements where appropriate. Deliver product security training to project engineering teams. Experience in the development of security solutions for military and/or commercial products and systems. Registered NCSC certified professional at senior level or above, or NCSC recognised qualification, e.g. ISC Certified Information System Security Professional. Knowledge of UK/NATO Information Assurance standards, procedures and systems, including Government Functional Standard GovS 007: Security, HMG IS1&2, ISO27000series standards, NIST SP800series standards, JSP440, JSP604, guidance material provided by NCSC, CPNI and NIST. Practical experience of producing Security Accreditation documentation Practical experience of NCSC and Common Criteria security evaluation techniques. Knowledge of current crypto technologies and key management systems Model Based System Engineering (MBSE) knowledge Understanding of operating systems, firmware and software security controls and how to apply them. Understanding of existing, current and emerging technologies including cloud, virtualisation and web-based Excellent communication and interpersonal skills, with the ability to interact with a range of stakeholders, including development teams, subject matter experts, accreditors and senior leaders. A positive attitude, with a drive to improve the business, and the ability to influence and motivate others Experience of working with Enterprise Security Architectures (SABSA, MODAF).

Security Clearance

:

Life at Leonardo

With a company funded benefits package, a commitment to learning and development, and a flexible approach to working hours focused on the needs of both our employees and customers, a career with Leonardo has never offered as many opportunities or been more accessible to as many people.

Flexible Working: Flexible hours with hybrid working options. For part time opportunities, please talk to us

Company funded flexible benefits: Access to private healthcare, dental schemes, Workplace ISA, Go Green Car Scheme, technology and lifestyle options (£500 annual allowance)

Holidays: 25 days plus bank holidays, option to buy/sell leave and to accrue up to 12 additional flexi leave days per year

Pension: Award winning pension scheme (up to 15% employer contribution)

Wellbeing:  Employee Assistance Programme with access to free mental health support, financial wellbeing support and network groups to demonstrate our ongoing commitment to diversity & inclusion (Enable, Pride, Equalise, Reservists, Carers)

Lifestyle: Discounted Gym membership, Cycle to work scheme

Training: Free access to more than 4000 online courses via Coursera

Referral Incentive: You can earn a reward for successfully referring a friend or family member

Bonus: Scheme in place for all employees at management level and below

  • Product Security Engineer

    7 months ago

    Edinburgh, United Kingdom Leonardo Full time

    Job Description: The opportunity: Technology in Defence is rapidly evolving, and so are the risks to capabilities and success through an ever-changing security landscape. As customers demand higher levels of resilience in the products we create, our approach to securing systems and products needs to change with it. We are recruiting for a Product...

  • Product Security Expert

    1 month ago

    Edinburgh, Edinburgh, United Kingdom Weare5vtech Full time

    Product Security EngineerType: PermanentSalary: €80,000 paWe are seeking a highly skilled Product Security Engineer to join our team at Weare5vtech. As a Product Security Engineer, you will play a key role in ensuring the security of our software and embedded products.With over 75 years of experience as one of the world's leading manufacturers of...

  • Senior Security Engineer

    1 month ago

    Edinburgh, United Kingdom Adarma Security Full time

    Job Description Who we are We’re a company on a mission to protect the promise of cyber resilience. From banking and retail to food delivery and manufacturing, our team of passionate cyber defenders are committed to protecting the things that matter. We stand side-by-side with our customers every day providing innovative cybersecurity solutions that...

  • Senior Security Engineer

    1 month ago

    Edinburgh, United Kingdom Adarma Security Full time

    Who we areWe’re a company on a mission to protect the promise of cyber resilience. From banking and retail to food delivery and manufacturing, our team of passionate cyber defenders are committed to protecting the things that matter. We stand side-by-side with our customers every day providing innovative cybersecurity solutions that protect against...

  • Senior Security Engineer

    4 weeks ago

    Edinburgh, United Kingdom Adarma Security Full time

    Job Description Who we are We’re a company on a mission to protect the promise of cyber resilience. From banking and retail to food delivery and manufacturing, our team of passionate cyber defenders are committed to protecting the things that matter. We stand side-by-side with our customers every day providing innovative cybersecurity solutions that...

  • Product Security Expert

    4 weeks ago

    Edinburgh, Edinburgh, United Kingdom Leonardo Full time

    Job OverviewThe successful candidate will have the opportunity to work in a dynamic environment, contributing to the development and implementation of cutting-edge security solutions for defence and government customers.As a Lead Product Security Engineer at Leonardo, you will be responsible for all security aspects of product design, development,...

  • Security Engineer Lead

    1 week ago

    Edinburgh, Edinburgh, United Kingdom Change Digital – Digital & Tech Recruitment Full time

    Cyber Security Engineer Lead - We are looking for an experienced professional to lead our client's Cyber SOC team in Edinburgh. The successful candidate will be responsible for driving innovation and enhancing security capabilities.The ideal candidate will have 5+ years of experience in Cyber Security, with expertise in IT security best practices, common...

  • Roaming Security Officer

    7 months ago

    Edinburgh, United Kingdom Amberstone Security Full time

    **Roaming Security Officer - SIA Licence is essential to be considered for the role** **An exciting new career opportunity for Roaming Security Officers in Edinburgh, working in partnership with one of the largest retail companies, Tesco** Amberstone provides integrated security solutions through the provision of technology products and manned guarding...

  • Senior SOC Security Lead

    2 weeks ago

    Edinburgh, Edinburgh, United Kingdom indie Semiconductor Full time

    Job SummaryWe are seeking a Senior SOC Security Lead to join our MCU and Security Team. The ideal candidate will have extensive experience in IC design architecture, cybersecurity, and automotive applications.ResponsibilitiesLead the development and implementation of security requirements and architectures for SOC designs.Design and evaluate robust security...

  • Product Lead: Building Scalable and Secure Solutions

    3 days ago

    Edinburgh, Edinburgh, United Kingdom Wordsmith Full time

    Join us at Wordsmith, where innovation meets collaboration. As a Senior Product Engineer, you will contribute to the development of cutting-edge AI solutions that empower enterprise-level teams.With a strong foundation in computer science and web technologies, you will lead the design and delivery of engineering projects and customer-centric features.Your...

  • Mobile Roaming Security Officer

    6 months ago

    Edinburgh, United Kingdom Amberstone Security Full time

    **Roaming Security Officer - SIA Licence is essential to be considered for the role** Amberstone provides integrated security solutions through the provision of technology products and manned guarding resources. Our security solutions bridge the gap through the provision of risk based integrated security solutions. Products combine to provide a best return...

  • Senior / Lead Security Engineer

    7 months ago

    Edinburgh, United Kingdom CAPCO Full time

    Senior / Lead Security Engineer at Capco UK - Edinburgh Senior/Lead Security Engineer About Capco   Capco is a global technology and business consultancy, focused on the financial services sector. We are passionate about helping our clients succeed in an ever-changing industry. You will work on engaging projects with some of the largest banks...

  • Security Officer

    7 months ago

    Edinburgh, United Kingdom WC Security Full time

    **About Us** WC Security is a leading, established and innovative supplier of temporary and permanent staffing services. Our services are for established clients within Edinburgh and surrounding areas - although we are undertaking rapid expansion. Our coverage includes England, Scotland and further beyond. **About The Role** **Essential Criteria** - A...

  • Security Officer

    6 months ago

    Edinburgh, United Kingdom WC Security Full time

    **About Us** WC Security is a leading, established and innovative supplier of temporary and permanent staffing services. Our services are for established clients within Edinburgh - although we are undertaking rapid expansion. Our coverage includes England, Scotland and further beyond. **About The Role** **Essential Criteria** - A valid, in-date and...

  • Cyber Security Sales Developer

    2 weeks ago

    Edinburgh, Edinburgh, United Kingdom Adarma Security Full time

    Cyber Security Sales Developer OpportunityAdarma Security is a leading provider of cybersecurity solutions, and we are seeking a highly motivated and skilled Cyber Security Sales Developer to join our team. As a key member of our sales development team, you will play a crucial role in driving business growth and identifying new revenue streams.This is an...

  • Fire and Security Engineer

    3 months ago

    Edinburgh, United Kingdom CV-Library Full time

    Title: Fire and Security Service Engineer The Company:  Fire and Security Company who look after multiple high end retail customers are on the lookout for additional engineers due to expansion. Package: Basic: £32,000 - £38,000 Travel time paid after 30 minutes each way – Also paid at time and half Overtime available Company Van...

  • Senior Quality Assurance Engineer

    2 weeks ago

    Edinburgh, Edinburgh, United Kingdom Quorum Cyber Security Limited Full time

    At Quorum Cyber Security Limited, we're seeking a highly skilled Senior Quality Assurance Engineer to drive the evolution of our testing practices. This exciting opportunity offers a chance to be part of a team that brings innovative cybersecurity solutions to market.We're looking for someone with an interest in cybersecurity and a passion for developing...

  • Lead Security Solutions Engineer

    1 week ago

    Edinburgh, Edinburgh, United Kingdom Innotech Partners Full time

    We are collaborating with an established Contractor who specialise in design, installation and maintenance services for electrical, heating, plumbing, fire and security systems. They are seeking an enthusiastic Lead Fire Alarm and Security Systems Installation Engineer to join them on a permanent full-time basis.The standard hours are 40 hours a week Monday...

  • Relief Security Officer

    7 months ago

    Edinburgh, United Kingdom Corps Security Full time

    **Who are we?** Founded in 1859, The Corps of Commissionaires Management Limited, now Corps Security, was a business initially built to provide employment for ex-servicemen on return from the Crimean War. By sticking true to our values of ‘loyalty, integrity, service’, we have become the UK’s most established and respected specialist security...

  • Business Development Manager

    2 weeks ago

    Edinburgh, Edinburgh, United Kingdom Adarma Security Full time

    Business Development Manager (Cyber Security)Adarma Security is a pioneering provider of cybersecurity solutions, and we are seeking a seasoned Business Development Manager to join our team. As a key member of our sales leadership team, you will be responsible for developing and executing business strategies that drive growth and revenue expansion.This is an...