Product Security EngineerPermanent roleBased in BristolOffering circa £55,000Do you have experience in Secure by Design?Do you have experience in Product Security Engineering?Do you want to work with an industry-leading company?If your answers are yes to these, then this could be the role for you!As the Product Security Engineer, you will be working alongside a market-leading Defence and Aerospace company who are constantly growing and developing. They are always looking to bring on new talents such as yourself and further develop your skills to enable you to grow within the company and industry!Some of what you will be involved in:Conduct risk assessments and identify vulnerabilities in product design, implementing, and deployingImplement controls and mitigations to manage identified riskCollaborate with development teams to integrate secure coding practices throughout the software development lifecyclePerform security code reviews and provide security guidance during product design and development to ensure Secure by DesignConduct threat modelling exercises to prioritise potential risks and develop mitigation strategies to reduce risksEnsure products meet regulatory standards such as ISO27001, NIST 800-30/37/53, Joint Standards Publications (JSP) such as JSP 440, 604 and Defence Standards (Def stans)Produce security documentation like RMADS, Security Assurance Document, Security Management PlanConduct penetration testing, vulnerability assessments and remediation activitiesYour skillset may include:Understanding and application of risk management frameworks and methodologies (e.g., ISO 27001/2, ISO27005/31000, NIST 800-30, NIST 800-53)Working knowledge of Defence Standards (e.g., JSPs, HMG, Def Stan 05-138, Def Stan 05-139)Experience with security testing tools, technologies and techniques If this all sounds like something you will be interested in then simply apply and we can discuss the opportunity further!