Product Security Engineer
Hybrid - 3 Days a week in the Office
Bristol Based
This role blends secure-by-design engineering and security assurance to safeguard mission-critical products operating in complex and demanding environments.
You will act as a technical security authority, collaborating across software, systems, and hardware teams to embed robust security controls, while also representing the organisation to the UK Ministry of Defence (MoD) and other regulatory bodies to demonstrate compliance with stringent security and airworthiness standards.
Key Responsibilities
* Lead product-level cybersecurity assessments for UAV platforms, avionics, and Embedded payload systems.
* Conduct vulnerability analysis and assurance activities across software, firmware, and communication interfaces.
* Develop and maintain product security architectures, ensuring compliance with secure-by-design principles and recognised standards.
* Support and participate in MoD and customer assurance reviews, presenting evidence of product robustness, testing outcomes, and mitigation strategies.
* Produce and maintain security documentation including Security Cases, and risk assessments for submission to accrediting authorities.
* Perform design assurance testing and verification in alignment with standards such as Secure by Design and NIST.
* Contribute to security certification efforts, providing technical input during formal reviews, audits, and design sign-offs.
* Collaborate with systems and software teams to implement Secure Development Lifecycle (SDL) processes.
* Identify and mitigate cyber threats early in the product life cycle through threat modelling and risk analysis.
* Drive continuous improvement in security testing, automation, and vulnerability management practices.
* Proficiency in one or more programming/Scripting languages: C, C++, Python, or Bash, preferably in Embedded or Linux environments.
* Familiarity with relevant standards, including:
o DEF STAN 05-138 - Cyber Security in Defence Acquisition
o DO-326A/ED-202A - Airworthiness Security
o ISO/SAE 21434 - Automotive Cybersecurity
Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers.
#J-18808-Ljbffr