Product Security Engineer

• Overview
• Product Security Engineer — Derby/Bristol, Full Time

Rolls-Royce is seeking a Product Security Engineer to secure a range of Rolls-Royce products against evolving security threats (cyber, supply chain, etc.).

You may be involved at any stage of a project life cycle from concept development through final production release.

You will typically work in cross-functional project teams across engineering disciplines and be encouraged to develop skills in Systems Security Engineering to grow RR capability in this pivotal area.

• What you will be doing
• Be part of Rolls-Royce and the Product Security Team, contributing to projects for one or more core businesses: Civil Aerospace, Defence, and Power Systems.
• Contribute to the Secure Cyber Resilient Engineering (SCRE) of products across the lifecycle: requirements, design, build, test, production, operations, and support.
• Lead the development, implementation, documentation, and maintenance of policies, procedures, guidelines, tools, and training.
• Provide technical leadership to teams or projects in the subject area and collaborate with government, customers, suppliers, and industry experts to meet mission, business, and system security requirements.
• Develop and update systems security and resilience good practice and disseminate techniques, policies, procedures, and knowledge across the business.
• Communicate effectively across multiple functions (software, hardware, maintenance, manufacturing, and corporate) to align security activities with business goals.

Qualifications

Essential

• Bachelor's degree in a relevant engineering discipline (Electrical, Software, Controls, Systems, Cybersecurity) with 2+ years’ experience, or
• Master’s degree in a relevant engineering discipline with experience in a relevant environment, or
• JD/Ph D
• Desirable: 3+ years in Systems Security Engineering on real-time cyber-physical embedded systems (aviation, software-defined vehicles, medical devices, weapon systems, etc.) or 4+ years in related engineering roles (Systems, Software, Electronics, Manufacturing).
• Familiarity with complex systems and strong systems thinking; ability to understand system boundaries, interactions, and interdependencies across lifecycle.
• Deep knowledge of embedded systems and skills to develop, implement, and secure cyber-physical systems.
• Experience or interest in cybersecurity and cyber threats (security design, intrusion detection, digital forensics, risk assessment tools, security policies and standards).
• Knowledge of applying systems security policies and standards in cyber-physical systems (e. g., RMF, NIST SP 800-160, DO-326, Do DI
• Excellent communication skills; ability to influence and explain complex concepts to non-technical stakeholders.

Benefits

• Retirement Savings through the Rolls-Royce Retirement Savings Trust
• Group Life Assurance
• Group Income Protection
• Employee Share Purchase: Buy one share, get one free
• Digital GP for GP consultations
• Employee Assistance and Live Well programmes
• Additional information

Our vision is to maintain Rolls-Royce’s excellence and ingenuity as we transform into a high-performing, resilient, and growing company.

Rolls-Royce is committed to a respectful, inclusive, and non-discriminatory workplace where individuality is valued and diverse perspectives drive innovation.

As part of the selection process, candidates in certain locations may be asked to complete online assessments (cognitive and behavioural).

If required, full instructions will be provided.

#J-18808-Ljbffr