Product Security Engineer

Rolls-Royce • Full-time • Derby - Moor Lane (UK-EM), United Kingdom • 3h ago

Job Description

Product Security Engineer

Derby/Bristol

Full Time

Why join Rolls-Royce?

At Rolls-Royce we are proud to be a business that has truly helped to shape the modern world and are committed to always being a force for progress; powering, protecting and connecting people everywhere.

By joining Rolls-Royce, you'll have the opportunity to work on world-class solutions, supported by a culture that believes individuality is our greatest strength, and all perspectives, experiences and backgrounds help us innovate and enable our high-performance culture.

An exciting opportunity has arisen for a Product Security Engineer to join the team in Derby or Bristol. As a Product Security Engineer, you will be responsible to secure a range of Roll-Royce products against an ever-evolving range of security threats (i.e. - cyber, supply chain, etc.). You may be involved at any stage of a project life cycle from concept development, design and integration, integrated/component testing through final production release. You'll usually work in cross-functional project teams with colleagues in other branches of engineering.

This is an exciting opportunity to work on flagship RR programs and play an important role in addressing some of the most complex and interesting technological challenges in Rolls-Royce. You will be encouraged to further develop and leverage your skills and experience in Systems Security Engineering and to help grow RR capability in this pivotal area.

What you will be doing:

By joining Rolls-Royce and the Product Security Team you have the opportunity to be working on projects for any one of our three core businesses:

Civil aerospace - major manufacturer of aero engines for the large commercial aircraft, regional jet and business aviation markets.
Defence - a market leader in aero engines for military transport and patrol aircraft with strong positions in combat applications.
Power Systems - is a world-leading provider of integrated solutions for onsite power and propulsion.

Key accountabilities within this role will include:

Contribution to the Secure Cyber Resilient Engineering (SCRE) of our products, applying technical knowledge and providing technical direction as required throughout the product lifecycle: requirements, design, build, test, production, operations, and support.
Leading the development, implementation, documentation, and maintenance of policies, procedures, associated guidelines, tools and training.
Leading a small number of individuals or projects in this subject area, providing technical leadership to teams or projects in addition to having impact through functional knowledge.
Collaboration with government, customers, suppliers, and industry experts to meet customer mission, business, and system security requirements.
Developing and updating systems security and resilience good practice and help disseminate the techniques, policies, procedures, and knowledge across the business.
Strong ability to work across and communicate with multiple business functions (i.e. - Software, hardware, maintenance, manufacturing, corporate).

Preferred requirements:

Essential

Bachelor's degree in a relevant engineering discipline (Electrical, Software, Controls, Systems, Cybersecurity) with experience in a relevant engineering environment (Electrical, Software, Controls, Systems) with 2+ years’ experience, OR
Master’s degree in a relevant engineering discipline (Electrical, Software, Controls, Systems, Cybersecurity) with experience in a relevant engineering environment (Electrical, Software, Controls, Systems), with 0+ years’ experience OR
JD/PhD

Desirable

3+ years of experience working in Systems Security Engineering on real-time cyber-physical embedded systems (i.e. - aviation systems, software defined vehicles, medical devices, weapon systems, etc.) OR 4+ years of experience working in a related Engineering role (i.e. - Systems Engineering, Software Engineering, Electronics Engineering, Manufacturing Engineering, etc).
Familiarity with Systems Engineering on complex systems and excellent systems thinking aptitude: the ability to understand complex system boundaries, interactions, and interdependencies across multiple abstraction layers throughout the system’s entire lifecycle.
Deep knowledge of embedded systems and the technical skills required to develop, implement, and secure such cyber-physical systems.
Experience or interest in cybersecurity and cyber threats (i.e. - designing secure products, systems, and applications; intrusion detection; digital forensics; system recovery; risk assessment tools and methods; security solutions, policies, standards, and procedures, etc).
Knowledge and/or experience in applying systems security policies and standards in engineering cyber-physical systems such as the Risk Management Framework (RMF), NIST SP 800-160, DO-326, and DoDI 5000.83.
Excellent communications skills: able to influence without authority and describe complex ideas simply and succinctly to non-technical people.

Benefits will include:

Retirement Savings through the Rolls-Royce Retirement Savings Trust
Group Life Assurance provides for a lump sum benefit if you die whilst employed by Rolls-Royce
Group Income Protection provides an income in the event that you are unable to work due to illness or injury
Your Shares: Matched is a simple way to own Rolls-Royce shares and invest in our future, together. Buy one share, get one free!
Digital GP provides a convenient way for you to access GP consultations
Employee Assistance (EAP) and Live Well programmes

Our vision is to ensure that the excellence and ingenuity that shaped our history continues into our future. Our multi-year transformation programme aims to turn Rolls-Royce into a high-performing, competitive, resilient and growing company. Join us, and it can be your future vision too.

Rolls-Royce are committed to being a respectful, inclusive, and non-discriminatory workplace where individuality is valued, diverse perspectives fuel innovation, and everyone can thrive.

Closing date: 23rd August 2026

As part of our selection process, candidates in certain locations may be asked to complete an online assessment, which can include cognitive and behavioural aptitude testing relevant to the role. If required, full instructions for the next steps will be provided.