Principal Engineer - Product Security

Matchtech; Barrow-in-Furness; Hybrid; GBP 87,000 - 117,000; Full time

Job summary

Matchtech is seeking a Principal Engineer - Product Security to provide senior technical leadership across Information Assurance and Product Security within a highly regulated engineering programme. The role is delivery-focused, supporting design maturity, programme readiness through security governance, security case development and risk management.

Location: Barrow-in-Furness (Hybrid). Contract: 12 months. Typical on-site 1–2 days per month. Rate: £63.21 PAYE / £85.40 Umbrella.

Qualifications

• Experience in IA and product security within regulated environments (defence/maritime/aerospace).
• Experience with security case development and security evidence/assurance.
• Risk registers management and requirements gap analysis.
• Understanding of secure by design and lifecycle security processes.

Responsibilities

• Lead product security engineering activity in line with programme plans and governance.
• Develop interim and final security cases across programme phases.
• Manage IA and security risks and contribute to security registers.
• Support design assurance, formal reviews, and lifecycle gates with evidence.
• Coordinate IA technical queries and formal communications.
• Review supplier IA/cyber deliverables and provide assurance outputs.

Skills

IA / Product Security

Security case development

Risk management

Secure by Design / app security

Systems engineering lifecycle

Stakeholder management

Job description

We're recruiting for a Principal Engineer - Product Security to provide senior technical leadership across Information Assurance (IA) and Product Security activities within a highly regulated engineering programme.

This is a delivery-focused role, supporting design maturity and programme readiness through security engineering governance, security case development, and risk management.

Location: Barrow-in-Furness (Hybrid)
Hybrid: Typically 1-2 days on-site per month
Contract: 12 months
Positions: 1
Rate: £63.21 PAYE / £85.40 Umbrella

The Role

You’ll act as the focal point for product security within a complex engineering environment, working closely with engineering teams and stakeholders to ensure security engineering activities are delivered in line with agreed processes, governance, and programme milestones.

Key responsibilities include:

• Leading and delivering product security engineering activity in line with programme plans and governance
• Developing Interim and Final Security Cases across programme phases
• Managing IA and security risks, including maintaining security/risk register contributions
• Supporting design assurance, formal reviews, and lifecycle gates with robust security evidence
• Coordinating and managing IA Technical Queries and formal communications
• Reviewing supplier IA/cyber deliverables and providing assurance outputs
• Planning, tracking and reporting delivery status, risks and milestones
• Providing technical leadership and mentoring within the product security team

Skills & Experience

We’re looking for strong experience in IA / Product Security within complex, regulated environments (e.g., defence, maritime, aerospace), including:

• Security case development and security evidence/assurance
• Risk management (including risk registers) and requirements gap analysis
• Secure by Design and/or application security principles
• Systems engineering lifecycle understanding and design assurance processes
• Stakeholder management across multi-disciplinary engineering teams and suppliers

Desirable knowledge:

• HM Government Information Security Standards IS1 & IS2
• ISO 27000 series (e.g., ISO 27001)
• IEC 62443
• Working towards or holding NCSC CCP SIRA (or equivalent)