Lead Product Security Engineer – Hybrid Cyber Resilience

Leonardo UK Ltd; Caddington; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Time to Recharge

Pension up to 15%

Mental health support

4,000+ online courses

Flexible benefits

Hybrid working

Job summary

Leonardo UK Ltd is seeking a Principal Product Security Engineer to help deliver cyber resilience across defence products, working with Combat Air and Electronic Warfare teams in the UK.

You’ll define security requirements, develop protocols, manage artefacts like risk assessments and security cases, and drive security assurance across the product lifecycle, aligning with government standards and industry best practices.

Qualifications

• Familiar with ISO27001/27004/27005 and/or RMF risk management frameworks.
• Experience supporting a security risk management system for regulated defence/aerospace/industrial products.
• Understanding of engineering development lifecycles and how Product Security aligns.
• Ability to interpret Penetration Test Reports and support remediation.
• Awareness of UK government assurance processes (e.g., JSP/CAF GovAssure).
• Professional recognition in security governance, risk management or security architecture.

Responsibilities

• Define product security requirements and advise on implementation standards.
• Develop and manage security protocols, tools, and processes against threats.
• Create and manage artefacts like Risk Assessments, Security Cases, Remediation Action Plans.
• Drive Security Assurance across the full product lifecycle; improve engineering capability.
• Contribute to Leonardo’s UK-wide Security and IA community; shape best practices.
• Liaise with Security experts to support ongoing Security Assurance.

Skills

ISO27001 / RMF

RMF risk management

Security governance

Penetration testing interpretation

UK government assurance

Security architecture

Job description

Leonardo UK Ltd is seeking a Principal Product Security Engineer to help deliver cyber resilience across defence products, working with Combat Air and Electronic Warfare teams in the UK.

You’ll define security requirements, develop protocols, manage artefacts like risk assessments and security cases, and drive security assurance across the product lifecycle, aligning with government standards and industry best practices.