Principal Product Security Engineer, Defense (Hybrid)

Leonardo S.p.A.; Lincoln; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Time to Recharge: up to 12 flexi-days

Pension scheme with up to 15% employer

Mental health support + employee-led D

Learning: Coursera & LinkedIn Learning

Referral bonus

Flexible benefits up to £500/year

Hybrid working

Job summary

Leonardo UK is seeking a Principal Product Security Engineer to deliver security outputs across hardware and software development in a highly technical, regulated environment. You will work with system, software and firmware teams to ensure secure-by-design products and contribute to identity, resilience, and proactive threat management.

The role requires strong experience with security frameworks, governance and risk management, and collaboration with security leaders to maintain UK and NATO

Qualifications

• Experience in security work in highly regulated industries (defence, aerospace, nuclear, automotive, rail or oil and gas).
• Experience implementing industry best practice frameworks for secure development (e.g. NIST) and/or security assurance.
• Experience with security assurance frameworks impacting UK/NATO/Defence partners (e.g. MOD Secure by Design, EU Cyber Resiliency Act).
• Experience integrating security activities within engineering lifecycles to deliver secure solutions in complex systems.
• Professional recognition in security governance, risk management, secure architecture or assurance (CIISec/ISC2/ISACA/UKCSC).

Responsibilities

• Define product security requirements and advise development teams on secure implementation.
• Identify and manage security processes and tools to stay ahead of threats.
• Create and manage risk assessments, security cases and remediation plans.
• Drive security assurance through the full product lifecycle and improve engineering capability.
• Contribute to UK security community and influence security strategy.
• Liaise with security experts to support ongoing security assurance.

Skills

Security governance

Risk management

Secure architecture

Security assurance

NIST standards

Tools

Common Criteria

MOD Secure by Design

Job description

Leonardo UK is seeking a Principal Product Security Engineer to deliver security outputs across hardware and software development in a highly technical, regulated environment. You will work with system, software and firmware teams to ensure secure-by-design products and contribute to identity, resilience, and proactive threat management.

The role requires strong experience with security frameworks, governance and risk management, and collaboration with security leaders to maintain UK and NATO