Product Security & Integration Consultant

Location: Reading - Hybrid Working
Contract: 12 Months
IR35: Inside IR35
Clearance: Active SC Clearance Required

We are seeking an experienced Product Security Integration Manager, driving the integration of product security, security risk management and threat intelligence across engineering teams.

Working with engineering and security stakeholders, you will help embed a risk-based security approach throughout the system lifecycle, improve security integration processes and ensure development activities align with security requirements.

• Lead Product Security (PSEC) working groups to review existing processes and identify opportunities to integrate security risk management and threat intelligence.

• Establish and coordinate cross-functional working groups across engineering and security teams.

• Review SYATO (Security Authorisation to Operate) and associated documentation, integrating security considerations from a System 2 perspective.

• Develop and maintain security policies, procedures and risk management processes.

• Contribute to the Security Risk Management Integration Process and Threat Integration Plan.

• Integrate Threat Intelligence Platforms (TIP) into engineering processes, promoting a proactive, threat-led approach to development.

• Assess and recommend improvements to DevSecOps practices and development pipelines to strengthen security.

• Manage stakeholder relationships, balancing engineering priorities with security requirements and driving agreement on common solutions.

• Proven experience in product security, security integration or security risk management.

• Strong understanding of threat intelligence integration and risk-based security approaches.

• Experience working with engineering teams to embed security into development processes.

• Knowledge of DevSecOps principles and secure software development pipelines.

• Experience developing security policies, procedures and technical documentation.

• Excellent stakeholder management skills, with the ability to align technical engineering and security teams.

• Active SC Security Clearance.

• Duration: 12 months

• Location: Reading, with hybrid working

• IR35 Status: Inside IR35

This is an excellent opportunity for an SC-cleared security professional to play a key role in strengthening product security, threat integration and risk management across a major programme.