You will need to login before you can apply for a job.
Job Description
Product Security Engineer Full-time
Derby/Bristol/Solihull/Hybrid
An exciting opportunity for a
Product Security Engineer
to join the team working in either Derby, Bristol or Solihull.
As a Product Security Engineer, you will be responsible for securing a range of Rolls-Royce products against an ever-evolving range of security threats (i.e. cyber, supply chain, etc). You may be involved at any stage of a project life cycle from concept development, design and integration, integrated/component testing through final production release. You'll usually work in cross-functional project teams with colleagues in other branches of engineering.
What you will be doing:
Contributing to the Secure Cyber Resilient Engineering (SCRE) of our products, applying technical knowledge and providing technical direction as required throughout the product lifecycle: architecture, requirements, design, build, test, production, operations, and support. Frequently, these activities will be done in a digital environment using Model Based Engineering tools. Contribute to the development, implementation, documentation, and maintenance of policies, procedures, associated guidelines, tools and training. Contribute to the security life cycle activities (concept through release) including regulatory certification/qualification (i.e. The Risk Management Framework, ED-202A / DO-326A, Secure By Design, IEC 62443, etc). Collaborate with government, customers, suppliers, and industry experts to meet system and program requirements. Provide feedback on systems security and resilience good practice and help disseminate the techniques, policies, procedures, and knowledge across the business. Able to work across and communicate with multiple business functions (i.e. Software, hardware, maintenance, manufacturing, corporate). May be required to communicate risk to business stakeholders.
Who we're looking for:
At Rolls-Royce we put safety first, do the right thing, keep it simple and make a difference. These principles form the behaviours that guide us and are an essential component of our assessment process.
They are the fundamental qualities that we seek for all roles and for this role we are looking for someone with: Good time management skills able to prioritize and execute tasks in a high-pressure environment. Dynamically respond to evolving objectives and emerging opportunities while working in coordination with a multidisciplinary, energetic team of engineers and scientists. Ability or an awareness of the following would be advantageous: - The secure development lifecycle - Use of encryption - Security measures (firewalls, HIDS, NIDS) - Security risk assessment techniques (e.g. ED202A, ED203A, NIST SP800-30) - Systems Security policies and standards to the engineering of cyber-physical systems such as NIST SP 800-160, DO-326, UK Secure By Design, IEC 62443. Experience or interest in cybersecurity and cyber threats. Highly self-motivated and directed, with keen attention to detail. Strong problem solving skills, and an ability to understand the level of analysis required. Good written, oral, and interpersonal communication skills, able to communicate ideas in both technical and user-friendly language. Able to work within a team-oriented, collaborative environment. Keen to develop capability through appropriate training courses and workshops. A working appreciation of associated engineering disciplines.
We are an equal opportunities employer. We're committed to developing a diverse workforce and an inclusive working environment. We believe that people from different backgrounds and cultures give us different perspectives which are crucial to innovation and problem solving. We believe the more diverse perspectives we have, the more successful we'll be. By building a culture of caring and belonging, we give everyone who works here the opportunity to realise their full potential.
Closing Date: 13th January 2025
Job Category
Software Systems
Posting Date
20 Dec 2024; 00:12
Posting End Date
13 Jan 2025 #J-18808-Ljbffr
Product Security Engineer Full-time
Derby/Bristol/Solihull/Hybrid
An exciting opportunity for a
Product Security Engineer
to join the team working in either Derby, Bristol or Solihull.
As a Product Security Engineer, you will be responsible for securing a range of Rolls-Royce products against an ever-evolving range of security threats (i.e. cyber, supply chain, etc). You may be involved at any stage of a project life cycle from concept development, design and integration, integrated/component testing through final production release. You'll usually work in cross-functional project teams with colleagues in other branches of engineering.
What you will be doing:
Contributing to the Secure Cyber Resilient Engineering (SCRE) of our products, applying technical knowledge and providing technical direction as required throughout the product lifecycle: architecture, requirements, design, build, test, production, operations, and support. Frequently, these activities will be done in a digital environment using Model Based Engineering tools. Contribute to the development, implementation, documentation, and maintenance of policies, procedures, associated guidelines, tools and training. Contribute to the security life cycle activities (concept through release) including regulatory certification/qualification (i.e. The Risk Management Framework, ED-202A / DO-326A, Secure By Design, IEC 62443, etc). Collaborate with government, customers, suppliers, and industry experts to meet system and program requirements. Provide feedback on systems security and resilience good practice and help disseminate the techniques, policies, procedures, and knowledge across the business. Able to work across and communicate with multiple business functions (i.e. Software, hardware, maintenance, manufacturing, corporate). May be required to communicate risk to business stakeholders.
Who we're looking for:
At Rolls-Royce we put safety first, do the right thing, keep it simple and make a difference. These principles form the behaviours that guide us and are an essential component of our assessment process.
They are the fundamental qualities that we seek for all roles and for this role we are looking for someone with: Good time management skills able to prioritize and execute tasks in a high-pressure environment. Dynamically respond to evolving objectives and emerging opportunities while working in coordination with a multidisciplinary, energetic team of engineers and scientists. Ability or an awareness of the following would be advantageous: - The secure development lifecycle - Use of encryption - Security measures (firewalls, HIDS, NIDS) - Security risk assessment techniques (e.g. ED202A, ED203A, NIST SP800-30) - Systems Security policies and standards to the engineering of cyber-physical systems such as NIST SP 800-160, DO-326, UK Secure By Design, IEC 62443. Experience or interest in cybersecurity and cyber threats. Highly self-motivated and directed, with keen attention to detail. Strong problem solving skills, and an ability to understand the level of analysis required. Good written, oral, and interpersonal communication skills, able to communicate ideas in both technical and user-friendly language. Able to work within a team-oriented, collaborative environment. Keen to develop capability through appropriate training courses and workshops. A working appreciation of associated engineering disciplines.
We are an equal opportunities employer. We're committed to developing a diverse workforce and an inclusive working environment. We believe that people from different backgrounds and cultures give us different perspectives which are crucial to innovation and problem solving. We believe the more diverse perspectives we have, the more successful we'll be. By building a culture of caring and belonging, we give everyone who works here the opportunity to realise their full potential.
Closing Date: 13th January 2025
Job Category
Software Systems
Posting Date
20 Dec 2024; 00:12
Posting End Date
13 Jan 2025 #J-18808-Ljbffr
