Principal Product Security Engineer for Defence Tech

Leonardo; Luton; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Time to Recharge

Pension scheme

Mental health support

Online courses (Coursera/LinkedIn)

Bonus scheme

Flexible benefits budget

Hybrid working

Job summary

Leonardo UK seeks Principal Product Security Engineer to lead security integration across the product lifecycle. You will work with multidisciplinary teams within the Combat Air and Electronic Warfare business area to ensure resilient, secure defence products across domains.

Role involves defining security requirements, developing protocols, and driving assurance through development lifecycles. Hybrid working and a comprehensive benefits package are offered.

Qualifications

• Experience applying ISO27001/27004/27005 and/or NIST RMF.
• Experience supporting security risk management for highly regulated sectors (defence, aerospace, nuclear, automotive, rail, oil & gas).
• Understanding of Engineering development lifecycles and how Product Security aligns.
• Ability to interpret Penetration Test Reports and support remediation activities.
• Awareness of UK Government Assurance Processes (e.g., MoD Secure by Design).
• Professional recognition in security governance and risk management.

Responsibilities

• Define product security requirements and advise development teams on implementation standards.
• Develop and manage security protocols, tools, and processes to counter threats.
• Create and manage artefacts like Risk Assessments, Security Cases, and Remediation Plans.
• Drive Security Assurance across the full product lifecycle and improve engineering capability.
• Contribute to Leonardo’s UK-wide Security and IA community and security strategy.
• Liaise with Security experts including heads of Product Security and Product Cyber Resilience Managers.

Skills

ISO27001/27004/27005 or NIST RMF

Security risk mgmt for regulated goods

SDLC awareness

Penetration testing interpretation

UK govt assurance frameworks

Security governance & risk mgmt

Job description

Leonardo UK seeks Principal Product Security Engineer to lead security integration across the product lifecycle. You will work with multidisciplinary teams within the Combat Air and Electronic Warfare business area to ensure resilient, secure defence products across domains.

Role involves defining security requirements, developing protocols, and driving assurance through development lifecycles. Hybrid working and a comprehensive benefits package are offered.