Senior Defence Product Security Engineer

Leonardo; Lincoln; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Time to Recharge

Pension contribution

Mental health support

Bonus scheme

Learning resources

Referral rewards

Flexible benefits

Job summary

Leonardo is seeking a Senior Product Security Engineer to lead security activities across the engineering lifecycle for Electronic Warfare and FCAS programs. You will embed security into fighter aircraft development, performing IA reviews and risk assessments while collaborating with multidisciplinary teams.

The role requires weekly presence at multiple UK sites (Luton, Lincoln, Southampton, Basildon or Bristol) with monthly travel to Luton; it is a hybrid role with flexible working options.

Qualifications

• Experience with ISO27001/27004/27005 and RMF.
• Experience with security risk management in regulated sectors (aerospace, nuclear, automotive, rail, or oil & gas).
• Understanding of engineering lifecycles and how Product Security fits.
• Ability to interpret Penetration Test Reports and draft remediation plans.
• Familiarity with UK Government Assurance processes (JSP 604, CAF GovAssure).

Responsibilities

• Produce work package descriptions and cost estimates for bids and proposals.
• Drive Security Assurance across the product lifecycle and improve engineering capability.
• Provide independent IA reviews and risk assessments for complex projects.
• Contribute to Leonardo’s UK Security community and governance.
• Review security risk assessments and mitigation plans; prepare management docs for accreditation.
• Liaise with Security Accreditors and Assurance Coordinators to support accreditation.

Skills

ISO27001 RMF

NIST RMF

Security risk mgmt

Penetration test insights

UK Gov Assurance

Job description

Leonardo is seeking a Senior Product Security Engineer to lead security activities across the engineering lifecycle for Electronic Warfare and FCAS programs. You will embed security into fighter aircraft development, performing IA reviews and risk assessments while collaborating with multidisciplinary teams.

The role requires weekly presence at multiple UK sites (Luton, Lincoln, Southampton, Basildon or Bristol) with monthly travel to Luton; it is a hybrid role with flexible working options.