Software Security Engineer

The opportunity
\n Join a software engineering function where you'll get broad exposure to the organisation's product portfolio, working in a team that actively adopts modern/innovative technologies.

\n
\nKey aspects of the role\n
\n

\n
• Lead and guide the security aspects of product development across the full lifecycle: concept/design ? delivery ? in-service support.
\n
• Provide hands-on technical guidance to software development and wider project teams, including:\n
  \n
  • security requirements and techniques
  \n
  • software architecture and design patterns
  \n
  • coding standards, trade-offs, and best practice
  \n
\n
• Support technology/framework evaluation and selection for software projects.
\n
• Conduct security assessments and risk analysis for technologies and software systems:\n
  \n
  • identify vulnerabilities and threats
  \n
  • define mitigation strategies
  \n
\n
• Drive continuous improvement:\n
  \n
  • identify process improvements
  \n
  • contribute to development/implementation of engineering methodologies, tools, and frameworks
  \n
\n
• Maintain clear, current security documentation (processes, procedures, guidelines).
\n
• Produce security reporting/metrics to track activities, vulnerabilities, and remediation.
\n

\n
\nWhat you can expect in the team\n
\n

\n
• Engineering is central to the business, with scope to grow technical leadership and deepen understanding of complex software systems.
\n
• Work alongside a multi-disciplinary engineering environment within a supportive and expanding software engineering team.
\n

\n
\nWhat we're looking for\n
\n

\n
• Experience developing complex software products in regulated/safety-/security-conscious sectors such as defence, automotive, aerospace, telecoms (or similar).
\n
• Practical software security experience, with knowledge of relevant standards and best practices.
\n
• Strong collaborator and technical leader with good communication/influencing skills; enjoys problem solving and technical challenge.
\n
• Interest in emerging technologies and current security challenges.
\n
• Embedded software and/or firmware experience is beneficial but not essential.
\n
• STEM degree (or equivalent experience) and comfortable working cross-discipline.
\n

\n

Dynamic (hybrid) working: 3 to 5 days per week on-site, due to workload classification

\n

Security Clearance: British Citizen or a Dual UK national with British citizenship.

\n
\n

JBRP1_UKTJ