Principal Product Security Engineer – Defence Systems

Leonardo View All Jobs; Southampton; Hybrid; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Time off & flexi days

Company pension (up to 15% employer)

Mental health support

Bonus scheme

Free courses (Coursera/LinkedIn)

Referral programme

Flexible benefits up to £500

Hybrid working

Job summary

Leonardo UK is seeking a Principal Security Engineer to secure the next generation of defence protection systems. You will embed security throughout the product lifecycle, guiding teams on standards and risk management while delivering resilient, compliant solutions for national security missions.

You will define requirements, develop processes and artefacts, and drive assurance activities across the lifecycle.

Qualifications

• Experience in security for regulated products (aerospace, nuclear, rail or oil & gas).
• Ability to interpret penetration test reports and drive remediation actions.
• Understanding of UK BPSS/NSV frameworks and related guidance.

Responsibilities

• Define and manage product security requirements and provide expert guidance to project teams on standards and best practices.
• Develop and implement security processes, tools and protocols to counter evolving threats.
• Produce and maintain security artefacts such as Risk Assessments, Threat Analyses and Remediation Action Plans.
• Drive security assurance throughout the product lifecycle to ensure secure by design and operational resilience.
• Support continuous improvement of security engineering capabilities, processes and ways of working.
• Collaborate with security specialists to deliver effective assurance and risk management.
• Engage on UK defence programmes to help protect national security through advanced technologies.

Skills

Security engineering

Risk management

Penetration testing

Threat analysis

Security standards

Lifecycle security

Job description

Leonardo UK is seeking a Principal Security Engineer to secure the next generation of defence protection systems. You will embed security throughout the product lifecycle, guiding teams on standards and risk management while delivering resilient, compliant solutions for national security missions.

You will define requirements, develop processes and artefacts, and drive assurance activities across the lifecycle.