Lead Product Security Engineer - Defense & Cyber Resilience

Leonardo; Lincoln; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Time to Recharge

Pension scheme

Mental health support

Bonus scheme

Online courses

Referral programme

Flexible benefits

Flexible working

Job summary

Leonardo UK is seeking a Principal Product Security Engineer to help deliver cutting-edge defence products. You will join the Combat Air and Electronic Warfare Design Integrity team to integrate security across the product lifecycle.

Hybrid role based in Bristol, offering a comprehensive benefits package, strong career development, and active security community involvement. You will define security requirements, manage risk, and drive assurance for high‑integrity systems.

Qualifications

• Experience of ISO27001/27004/27005 and/or NIST RMF.
• Experience supporting security risk management for highly regulated products.
• Understanding of engineering development lifecycles and security alignment.
• Ability to interpret Penetration Test Reports and support remediation.
• Awareness of UK Government Assurance Processes (e.g., JSP 453/ISN2023/09).
• Professional recognition in security governance or secure architecture endorsed by CIISec/ISC2/ISACA/UKCSC.

Responsibilities

• Defining product security requirements and advising development teams.
• Develop and manage security protocols, tools, and processes.
• Create and manage artefacts like Risk Assessments, Security Cases, Remediation Action Plans.
• Drive Security Assurance through the full product lifecycle.
• Contribute to Leonardo’s UK security community and support security strategy.
• Liaise with Security experts to support ongoing Security Assurance.

Skills

ISO27001 RMF

Security governance

Security architecture

Remediation support

UK Gov Assurance

Job description

Leonardo UK is seeking a Principal Product Security Engineer to help deliver cutting-edge defence products. You will join the Combat Air and Electronic Warfare Design Integrity team to integrate security across the product lifecycle.

Hybrid role based in Bristol, offering a comprehensive benefits package, strong career development, and active security community involvement. You will define security requirements, manage risk, and drive assurance for high‑integrity systems.