Principal Product Security Engineer — Hybrid, Secure by Design

Leonardo View All Jobs; Luton; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Time to Recharge

Pension scheme with employer CPP up to

Mental health support and employee net

Bonus scheme

Free online courses (Coursera/LinkedIn

Flexible benefits up to £500

Job summary

Leonardo UK is seeking a Principal Product Security Engineer to deliver security across the product lifecycle for advanced electronic warfare capabilities. You will work closely with system, software and firmware teams to ensure secure by design products and robust security outcomes.

The role emphasizes defining security requirements, risk assessments, and security cases, while collaborating with security experts and business leaders to strengthen the UK security posture.

Qualifications

• Experience of conducting security work in a highly regulated industry such as defence, aerospace, nuclear, automotive, rail or oil and gas.
• Practical experience of implementing industry best practice frameworks for secure development of capabilities (i.e. NIST) and / or security assurance (i.e. Common Criteria).
• Experience in the implementation of, or appreciation of applicable security assurance frameworks that may impact delivery to UK, NATO and wider international Defence partners (i.e. MOD Secure by Design, EU Cyber Resiliency Act etc).
• Experience in integrating security activities within wider Engineering development lifecycles to develop tightly integrated security solutions within complex, non-enterprise computing systems.
• Professional recognition in security governance and risk management, secure system architecture and design or security assurance and audit endorsed by a professional information security body such as CIISec, ISC2, ISACA or the UKCSC.

Responsibilities

• Defining product security requirements, advising development teams on suitable implementation standards and techniques to ensure security controls are integrated within wider requirements specifications.
• Identify and manage security processes and tools to keep our products ahead of emerging threats.
• Creation and management of key artefacts such as: Risk Assessments, Security Cases and Remediation Action Plans.
• Drive Security Assurance through the full product lifecycle, ensuring every design is robust, compliant, and resilient. Contributing to continual improvement of the engineering capability.
• Contribute to Leonardo's UK-wide Security and IA community - shaping best practice and influencing security strategy.
• Liaison with Security experts, including the Head of Product Security and Product Cyber Resilience Managers to support ongoing Security Assurance.

Job description

Leonardo UK is seeking a Principal Product Security Engineer to deliver security across the product lifecycle for advanced electronic warfare capabilities. You will work closely with system, software and firmware teams to ensure secure by design products and robust security outcomes.

The role emphasizes defining security requirements, risk assessments, and security cases, while collaborating with security experts and business leaders to strengthen the UK security posture.