Lead Product Security Engineer — Hybrid, Next-Gen Defence

Leonardo UK Ltd; Southampton; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Time to Recharge

Pension scheme

Mental health support

Bonus scheme

Online courses

Refer a friend

Flexible benefits

Hybrid working

Job summary

Leonardo UK Ltd is seeking a Principal Security Engineer to secure next‑gen defence protection systems across the product lifecycle. You will define security requirements and guide cross‑functional teams to embed security by design.

You will bring experience with ISO27001/27004/27005 and NIST RMF, and you will work within a hybrid setup in the UK, contributing to resilient, compliant security solutions for national defence programmes.

Qualifications

• Experience with ISO27001/27004/27005 and NIST RMF frameworks.
• Experience supporting security risk management for highly regulated products (aerospace, nuclear, etc.).
• Understanding of engineering development lifecycles and Product Security alignment.
• Ability to interpret Penetration Test Reports and support remediation.
• Awareness of UK Government Assurance Processes.

Responsibilities

• Defining and managing product security requirements with guidance to project teams.
• Developing and implementing security processes, tools and protocols.
• Producing and maintaining security artefacts (Risk Assessments, Threat Analyses, Remediation Plans).
• Driving security assurance across the full product lifecycle.
• Supporting continuous improvement of security engineering capabilities and processes.
• Collaborating with security specialists and leadership to deliver risk management.

Skills

ISO27001/27004/27005

NIST RMF

Security risk management

Penetration test interpretation

Security assurance

Tools

Risk Assessments

Threat Analyses

Job description

Leonardo UK Ltd is seeking a Principal Security Engineer to secure next‑gen defence protection systems across the product lifecycle. You will define security requirements and guide cross‑functional teams to embed security by design.

You will bring experience with ISO27001/27004/27005 and NIST RMF, and you will work within a hybrid setup in the UK, contributing to resilient, compliant security solutions for national defence programmes.