Product Security Engineer

Role Overview

• Contribution to the Secure Cyber Resilient Engineering (SCRE) of our products, applying technical knowledge and providing technical direction as required throughout the product lifecycle: requirements, design, build, test, production, operations, and support.
• Leading the development, implementation, documentation, and maintenance of policies, procedures, associated guidelines, tools and training.
• Leading a small number of individuals or projects in this subject area, providing technical leadership to teams or projects in addition to having impact through functional knowledge.
• Collaboration with government, customers, suppliers, and industry experts to meet customer mission, business, and system security requirements.
• Developing and updating systems security and resilience good practice and help disseminate the techniques, policies, procedures, and knowledge across the business.
• Strong ability to work across and communicate with multiple business functions (i.e.
• Software, hardware, maintenance, manufacturing, corporate).

Requirements

• Essential Bachelor's degree in a relevant engineering discipline (Electrical, Software, Controls, Systems, Cybersecurity) with experience in a relevant engineering environment (Electrical, Software, Controls, Systems) with 2+ years’ experience, OR Master’s degree in a relevant engineering discipline (Electrical, Software, Controls, Systems, Cybersecurity) with experience in a relevant engineering environment (Electrical, Software, Controls, Systems), with 0+ years’ experience OR JD/PhD
• Desirable 3+ years of experience working in Systems Security Engineering on real-time cyber-physical embedded systems (i.e.
• aviation systems, software defined vehicles, medical devices, weapon systems, etc.) OR 4+ years of experience working in a related Engineering role (i.e.
• Systems Engineering, Software Engineering, Electronics Engineering, Manufacturing Engineering, etc).
• Familiarity with Systems Engineering on complex systems and excellent systems thinking aptitude: the ability to understand complex system boundaries, interactions, and interdependencies across multiple abstraction layers throughout the system’s entire lifecycle.
• Deep knowledge of embedded systems and the technical skills required to develop, implement, and secure such cyber-physical systems.
• Experience or interest in cybersecurity and cyber threats (i.e.
• designing secure products, systems, and applications; intrusion detection; digital forensics; system recovery; risk assessment tools and methods; security solutions, policies, standards, and procedures, etc).
• Knowledge and/or experience in applying systems security policies and standards in engineering cyber-physical systems such as the Risk Management Framework (RMF), NIST SP 800-160, DO-326, and DoDI 5000.83.
• Excellent communications skills: able to influence without authority and describe complex ideas simply and succinctly to non-technical people.

Tech Stack

• Cyber Security

Benefits

• Retirement Savings through the Rolls-Royce Retirement Savings Trust
• Group Life Assurance provides for a lump sum benefit if you die whilst employed by Rolls-Royce
• Group Income Protection provides an income in the event that you are unable to work due to illness or injury
• Your Shares: Matched is a simple way to own Rolls-Royce shares and invest in our future, together. Buy one share, get one free!
• Digital GP provides a convenient way for you to access GP consultations
• Employee Assistance (EAP) and Live Well programmes