Principal Product Security Engineer - Secure by Design (Hybrid)

Leonardo UK; Lincoln; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Time to Recharge

Pension scheme

Mental health support

Bonus scheme

Never Stop Learning (Coursera/LinkedIn

Refer a friend

Flexible benefits

Flexible hours

Job summary

Leonardo UK is seeking a Principal Product Security Engineer to lead the delivery of product security outputs and partner with system, software and firmware teams to ensure secure by design across defence and aerospace platforms.

You will define security requirements, manage risk assessments, and drive security assurance through the full product lifecycle while contributing to UK security communities and liaising with senior security experts.

Qualifications

• Experience in highly regulated industries (defence, aerospace, nuclear, automotive, rail or oil & gas).
• Knowledge of secure development frameworks (NIST) and security assurance (Common Criteria).
• Familiarity with security assurance frameworks affecting UK/NATO/international Defence partners (e.g. MOD Secure by Design, EU Cyber Resiliency Act).
• Ability to integrate security activities within engineering development lifecycles.

Responsibilities

• Define product security requirements and advise development teams on implementation standards.
• Identify and manage security processes and tools to stay ahead of threats.
• Create and manage artefacts such as Risk Assessments, Security Cases and Remediation Action Plans.
• Drive Security Assurance through the full product lifecycle and improve engineering capability.
• Contribute to Leonardo’s UK-wide Security and IA community and influence security strategy.
• Liaise with Security experts, including Head of Product Security and Product Cyber Resilience Managers.

Education

Professional security certification recognition (CIISec / ISC2 / ISACA)

Job description

Leonardo UK is seeking a Principal Product Security Engineer to lead the delivery of product security outputs and partner with system, software and firmware teams to ensure secure by design across defence and aerospace platforms.

You will define security requirements, manage risk assessments, and drive security assurance through the full product lifecycle while contributing to UK security communities and liaising with senior security experts.