Principal Engineer - Product Security

Job Description

Job Title: Principal Engineer - Product Security Location: Bristol, Weymouth, Frimley, Barrow-in-Furness - hybrid Salary: Competitive What you’ll be doing: • Providing strong leadership and management of Product Security activities throughout the Engineering Lifecycle, ensuring milestones and deliverables are met to an appropriate level of maturity at the applicable review gates • Directing, developing and maintaining the security architecture including requirement derivation and definition. Influencing stakeholders to ensure agreement and buy in of recommendations • Utilising your expert advice, practical knowledge and experience of applying architecture and security principles to ensure cyber resilience requirements are fed into the product. • Leading the through life security risk management, presenting risks, proposing controls, supporting implementation, defining and overseeing the creation of applicable evidence and documenting for acceptance by the Senior Information Risk Owner • Continuously developing knowledge and maintaining awareness of the security advantages and vulnerabilities of common products and technologies to ensure ability to respond to upcoming risks, reduce likelihood of compromise and maintain mitigations Your skills and experiences: Essential • Degree (or equivalent experience) in a relevant STEM subject or Information Security related subject • Recognised Industry Security Qualifications eg CCP, CISSP, CISM or similar • Proven experience of assessing and managing security information risk in line with industry good practice (NIST, ISO 27001) at board level Desirable • Experience of MOD Policies and regulations such as SPF, JSP 440 and JSP604 and production of Risk Management Accreditation Document Set (RMADS) • Experience of Engineering lifecycle management (preferably within the defence, maritime or closely linked domain) Benefits: You’ll receive benefits including a competitive pension scheme, enhanced annual leave allowance and a Company contributed Share Incentive Plan. You’ll also have access to additional benefits such as flexible working, an employee assistance programme, Cycle2workand employee discounts - you may also be eligible for an annual incentive The Engineering Security team: You will work as part of a team who design, build, integrate and provide through life support to all the Submarine Platforms in the Royal Navy fleet. Using your skills and experience you will lead on security and information risk matters to ensure the submarine systems are designed and built to be secure and resilient. This role requires use of a deep level of subject matter expertise to drive security requirements, identify possible threats and avenues of attack and advise on the application of secure development practices. Why BAE Systems This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome candidates from all backgrounds andparticularly from sections of the community who are currently underrepresented within our industry, including women, ethnic minorities, people with disabilities and LGBTQ+ individuals. We also want to make sure that our recruitment processes are as inclusiveas possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles working for BAE Systems will be subject to both security and export control restrictions. These restrictions mean that factors including your nationality, any previous nationalities you have held, and your place of birth maylimit those roles you can perform for the organisation Closing Date 2nd October 2023 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-OD1