Essential cookies keep the site working. With your consent we also measure how the site is used, first-party only. We never run advertising trackers. Details in the cookie policy.

Product Security & Integration Consultant

£555 to £750a day

Job type
Contract, IR35 not stated
Location
Reading
Working
Hybrid
Posted
3w ago

Job description

Product Security Integration Manager - SC Cleared

Location: Reading - Hybrid Working

Contract: 12 Months

IR35: Inside IR35

Clearance: Active SC Clearance Required

Overview

We are seeking an experienced Product Security Integration Manager, driving the integration of product security, security risk management and threat intelligence across engineering teams.

Working with engineering and security stakeholders, you will help embed a risk-based security approach throughout the system lifecycle, improve security integration processes and ensure development activities align with security requirements.

Key Responsibilities

Lead Product Security (PSEC) working groups to review existing processes and identify opportunities to integrate security risk management and threat intelligence.

Establish and coordinate cross-functional working groups across engineering and security teams.

Review SYATO (Security Authorisation to Operate) and associated documentation, integrating security considerations from a System 2 perspective.

Develop and maintain security policies, procedures and risk management processes.

Contribute to the Security Risk Management Integration Process and Threat Integration Plan.

Integrate Threat Intelligence Platforms (TIP) into engineering processes, promoting a proactive, threat-led approach to development.

Assess and recommend improvements to DevSecOps practices and development pipelines to strengthen security.

Manage stakeholder relationships, balancing engineering priorities with security requirements and driving agreement on common solutions.

Essential Skills & Experience

Proven experience in product security, security integration or security risk management.

Strong understanding of threat intelligence integration and risk-based security approaches.

Experience working with engineering teams to embed security into development processes.

Knowledge of DevSecOps principles and secure software development pipelines.

Experience developing security policies, procedures and technical documentation.

Excellent stakeholder management skills, with the ability to align technical engineering and security teams.

Active SC Security Clearance.

Contract Details

Duration: 12 months

Location: Reading, with hybrid working

IR35 Status: Inside IR35

This is an excellent opportunity for an SC-cleared security professional to play a key role in strengthening product security, threat integration and risk management across a major programme