Product Security Engineer

Airbus pioneers sustainable aerospace for a safe and united world. The Company constantly innovates to provide efficient and technologically-advanced solutions in aerospace, defence, and connected services. In commercial aircraft, Airbus offers modern and fuel-efficient airliners and associated services. Airbus is also a European leader in defence and security and one of the world’s leading space businesses. In helicopters, Airbus provides the most efficient civil and military rotorcraft solutions and services worldwide.

Product Security Engineer

Reporting directly to the Head of Product Security you will ensure the Security of Airbus products, supporting services and supply chain systems across Airbus Defence and Space.

You will be in charge of the analysis, definition and specification of the security aspects of Airbus DS products and their supporting test, integration, production and support systems for Space Systems and CIS Business Lines, initially Skynet 6A, throughout their lifecycle.

Tasks and Responsibilities

The main tasks and responsibilities will be focused on;

• Securing the supply chain for AD products.
• Assist in the development, review and improvement of the Airbus product security policies, methods and tools with regards to security in the supply chain.
• Performance of security risk analysis (threat and vulnerability assessment) on products and supporting information systems.
• Definition of security requirements for products and information systems.
• Design of security architectures for products and information systems.
• To specify and assist in the development of security measures to protect and defend Airbus products and systems by ensuring their confidentiality, integrity and availability.
• Guarantee of the compliance on the security requirements against the national and international security regulations.
• Support of assessments and audits of the information security aspects projects and product lines across Airbus Defence and Space to ensure compliance with Airbus business, customer and national security requirements.
• Supporting programs and projects in the definition and production of product security documents and records in line with customer national security requirements and Airbus business requirements.
• To specify and support penetration testing and health checks on products and systems.
• Support a culture of engagement across the engineering organization, which emphasizes shared responsibility in achieving secure designs.
• Conduct formal compliance process (security evaluation, certification and accreditation processes) in accordance to the appropriate national and NATO criteria and methodologies when required.
• Perform information systems security evaluation for verification and validation processes.
• Perform Internal and External security technical audits.
• Production of the security operating procedures to guarantee the security of information systems throughout their lifecycle.

The successful candidate will be subjected to a NATO/National security clearance to a minimum of SC in order to undertake related work in accordance with the business needs.

This role can be based at either of our offices in Newport, South Wales or Portsmouth and will involve occasional travel for business and as such the jobholder must be able to travel according to the business needs.

Experience

• Information security standards and their implementation supporting the HMG Government Security Standard. (Principally ISO28000 and ISO27001 but knowledge of other frameworks such as NIST, desirable).
• Implementation of an ISMS.
• Systems and applications security architecture design utilising latest NCSC guidance and patterns.
• Threats and risk analysis methods and tools utilised within HMG.(Specifically MOD)
• Typical risk management decisions and necessary mitigations utilised within HMG. (Production of Risk Management and Accreditation Document Set)(RMADS)
• Creation and management of Product Security documentation in accordance with the BMS (PSLMP, PSCP).
• Impacts of legislation on Product Security.
• Understanding of Security Management concepts within customer organisations across the Airbus Defence and Space client base.

Qualifications

• ISO 27001 Lead Implementer (Desirable)
• ISO 27001 Lead Auditor (Mandatory)
• CISM (Desirable)

In return we can offer a competitive remuneration package; an ever growing list of company benefits including enhanced pay for maternity, adoption and shared parental leave and strong career development options across our transnational, market leading company.

Many of our staff work flexibly in many different ways, including part-time. Please talk to us at interview about the flexibility you need. We can’t promise to give you exactly what you want, but we do promise not to judge you for asking.

Please let us know if you need us to make any reasonable adjustments for the selection process – you can share this with the Recruitment Business Partner who gets in touch if you are invited to interview. Examples of this may include (but is not exclusive to) accessible facilities; auxiliary aids; room layout etc. Any information disclosed will be treated in the strictest confidence.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.
Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.