Principal Product Security Practitioner

Job Title: Principal Product Security Practitioner

Location: Barrow-In-Furness

Grade: S5

Referral bonus: £5000

You're expected to have completed 12 months in role prior to applying for an advertised vacancy and you should also discuss the internal opportunity with your line manager to ensure sustained business continuity and to further support your career development. We know there may be exceptional individual circumstances that impact this, in the first instance please discuss this with your line manager.

If you don't feel you can talk to your line manager, you can contact your HRBP.

PLEASE NOTE: Should you be invited for interview; you acknowledge that the Recruitment team will contact you and your line manager regarding your application for this opportunity.

What you will be doing:

Defence platforms operate in the world's most hostile, high consequence environments. Their survival depends on uncompromising cyber resilience across embedded hardware, tactical networks (IT) and mission critical systems (OT). The successful candidate will work as a valued member of an engineering delivery team, applying their subject matter expertise to focus on ensuring the next generation of submarine systems are developed, built and delivered to be appropriately secure and resilient within their operational environment.

Core duties:

• Gain sufficient understanding of a system, its concept of use and architectures to provide an accurate assessment of Product Security in terms of possible threats, potential avenues of attack and to advise on the application of secure development practices
• Your role will include the identification, analysis, and evaluation of security risks throughout the product lifecycle. Managing the Security interface between IT & OT Product families, to ensure cyber resilience of the platform
• Represent Product Security at Design Reviews, presenting risks and mitigation options to influence stakeholders to achieve agreement and buy-in
• Developing and maintaining security architecture including requirement derivation and definition
• Produce and support key Product Security deliverables, including Security Strategies, Threat assessments and Security Case artefact
• Collaborate with other engineering disciplines such as Safety Engineering to ensure and assure that the cyber interface is understood and risk aware

Essential Skills:

• Degree or equivalent experience in a relevant STEM, Information Security, Cyber Security or related discipline
• Experience of Product Security, Information Assurance or Cyber Security within Critical National Infrastructures such as Defence/Financial services
• Recognised Industry Security Qualifications for example CCP, CISSP, CISM or similar (or able to achieve)
• Able to support and influence senior stakeholders by bridging technical engineering and cyber risk to support product outcomes and decisions

The Product Security Team:

As a member of the Product Security Team, you will be responsible for managing product security and information risk across the lifecycle of BAE Systems' complex products and systems. You will provide specialist security expertise to engineering and project teams, ensuring that security risks are identified, assessed and appropriately managed from system design through delivery, operation and through-life support. We offer relocation support packages across all Submarines roles, subject to meeting eligibility criteria.

A place where everyone can thrive:

We're committed to building an inclusive workplace where everyone feels valued and supported. We welcome applications from all suitably qualified people and encourage discussion of reasonable adjustments where needed.

We welcome applications from all suitably qualified people, who are BAE Systems employees and have been in their current role for 12 months or longer.

Please be aware that many roles at BAE Systems are subject to security and export control restrictions. Applicants must meet Baseline Personnel Security Standard, and many roles require higher levels of National Security Vetting, including 5-10 years continuous UK residency depending on the role.

Why BAE Systems?

Here you'll build a career with purpose and limitless possibilities. Lifelong learning, meaningful work, and a supportive culture enable you to grow with confidence. You'll be recognised for your contribution and supported with rewards that matter most to you.

#J-18808-Ljbffr