+SC cleared role

+Hybrid working 2/3 days a week in Reading

+Inside IR35

• 80 - 83 ph

We are seeking an experienced Senior Systems Engineer to lead the delivery of model-based Product Security digital capabilities across a complex, regulated engineering environment.

Reporting to the Product Owner - Systems Engineering, you will define and implement the reference architectures, toolchains and technical baselines that enable end-to-end traceability across the Digital Thread - from security objectives and threat modelling through to verification, validation and assurance evidence.

This role replaces document-centric practices with authoritative, model-based security engineering across the full product lifecycle.

Key Responsibilities

• Deliver and continuously improve Product Security digital toolchains, including:

  • Threat & risk modelling (STRIDE, STPA-Sec, TARA, attack trees)
  • Security requirements & controls modelling
  • SBOM & vulnerability management
  • Cryptography & key management governance
  • Configuration/change control
  • Verification & validation orchestration
  • Security/assurance case evidence

• Define Product Security reference architecture and Digital Thread integrations

• Own roadmap, backlog and delivery planning aligned to enterprise priorities

• Establish governance, data standards and model quality controls

• Lead vendor engagement, technology evaluations and service performance

• Drive adoption of model-centric security engineering across programmes and suppliers

• Ensure alignment with regulatory frameworks (DO-326A, IEC 62443, ISO/IEC 27001, ISO/SAE 21434, NIST, etc.)

Experience Required

• 10+ years delivering Product Security capabilities in aerospace, defence or other regulated/safety-critical sectors
• Strong understanding of model-based security engineering and Digital Thread integration
• Experience integrating modelling, ALM, CI/CD security services and verification pipelines
• Proven stakeholder, supplier and budget management capability
• ITIL and Project/Programme delivery experience (APM, PRINCE2, SAFe or similar)
• SC clearance