Principal Product Security Practitioner

Defence platforms operate in the world's most hostile, high consequence environments. Their survival depends on uncompromising cyber resilience across embedded hardware, tactical networks (IT) and mission critical systems (OT). The successful candidate will work as a valued member of an engineering delivery team, applying their subject matter expertise to focus on ensuring the next generation of submarine systems are developed, built and delivered to be appropriately secure and resilient within their operational environment.

• Gain sufficient understanding of a system, its concept of use and architectures to provide an accurate assessment of Product Security in terms of possible threats, potential avenues of attack and to advise on the application of secure development practices
• Your role will include the identification, analysis, and evaluation of security risks throughout the product lifecycle. Managing the Security interface between IT & OT Product families, to ensure cyber resilience of the platform
• Represent Product Security at Design Reviews, presenting risks and mitigation options to influence stakeholders to achieve agreement and buy-in
• Developing and maintaining security architecture including requirement derivation and definition
• Produce and support key Product Security deliverables, including Security Strategies, Threat assessments and Security Case artefact
• Collaborate with other engineering disciplines such as Safety Engineering to ensure and assure that the cyber interface is understood and risk aware

• Degree or equivalent experience in a relevant STEM, Information Security, Cyber Security or related discipline
• Experience of Product Security, Information Assurance or Cyber Security within Critical National Infrastructures such as Defence/Financial services
• Recognised Industry Security Qualifications for example CCP, CISSP, CISM or similar (or able to achieve)
• Able to support and influence senior stakeholders by bridging technical engineering and cyber risk to support product outcomes and decisions

As a member of the Product Security Team, you will be responsible for managing product security and information risk across the lifecycle of BAE Systems' complex products and systems. You will provide specialist security expertise to engineering and project teams, ensuring that security risks are identified, assessed and appropriately managed from system design through delivery, operation and through-life support. We offer relocation support packages across all Submarines roles, subject to meeting eligibility criteria.

We’re committed to building an inclusive workplace where everyone feels valued and supported. We welcome applications from all suitably qualified people and encourage discussion of reasonable adjustments where needed.

We welcome applications from all suitably qualified people, who are BAE Systems employees and have been in their current role for 12 months or longer.

Please be aware that many roles at BAE Systems are subject to security and export control restrictions. Applicants must meet Baseline Personnel Security Standard, and many roles require higher levels of National Security Vetting, including 5–10 years continuous UK residency depending on the role.

Here you’ll build a career with purpose and limitless possibilities. Lifelong learning, meaningful work, and a supportive culture enable you to grow with confidence. You’ll be recognised for your contribution and supported with rewards that matter most to you.