Senior Product Security Engineer

Leonardo SpA; Lincoln; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Pension

Mental health support

Bonus scheme

Hybrid working

Job summary

Leonardo UK seeks a Senior Product Security Engineer to embed security across the lifecycle for EW and FCAS designs. You will collaborate with cross-functional teams across UK sites, with hybrid work and regular travel to Lincoln and other sites.

Key experience includes ISO27001/27004/27005 and RMF, plus the ability to interpret penetration tests and prepare remediation plans. BPSS/NSV may apply.

Qualifications

• Experience with ISO27001/27004/27005 and NIST RMF.
• Security risk management for highly regulated products (aerospace, nuclear, automotive, rail or oil & gas).
• Understanding of engineering development lifecycles and how product security aligns.
• Ability to interpret Penetration Test Reports and write remediation action plans.
• Familiarity with UK Government Assurance processes (JSP 604, CAF GovAssure).

Responsibilities

• Support the production of work package descriptions and cost estimates for bids and proposals.
• Drive Security Assurance through the full product lifecycle, ensuring designs are robust, compliant, and resilient.
• Provide independent Information Assurance reviews and risk assessments on high-impact projects.
• Contribute to Leonardo's UK-wide Security and IA community, shaping best practice and security strategy.
• Review and guide security risk assessments, mitigation plans, gap analyses, and security management documentation for system Accreditation.

Skills

ISO27001 RMF

Security risk management

Penetration testing

IA reviews

UK Government Assurance

Job description

Job Description:

Your Impact

Do you want to play a pivotal role in protecting the next generation of defence technologies? Are you excited by the challenge of influencing product cyber resilience at the cutting edge of fighter aircraft development?

Our Electronic Warfare (EW) and Future Combat Air Systems (FCAS) Design Integrity team is seeking a Senior Product Security Engineer. In this role, you will be responsible for the delivery of product security activities throughout the engineering lifecycle, working closely with multidisciplinary product teams across our Electronic Warfare and Future Combat Air business areas. You will play a key role in ensuring that security is embedded into the design and development of innovative defence solutions from concept through to delivery.

This position is working on a hybrid basis and requires you to work at least one day per week from one of our following sites; Luton, Lincoln, Southampton, Basildon or Bristol. Regular monthly travel to our Luton site will also be required.

Your responsibilities will include:

• Support the production of work package descriptions and cost estimates in support of product bids, services and proposals.
• Drive Security Assurance through the full product lifecycle, ensuring every design is robust, compliant, and resilient. Contributing to continual improvement of the engineering capability.
• Provide independent Information Assurance (IA) reviews and risk assessments on a variety of complex, high-impact projects.
• Contribute to Leonardo's UK-wide Security and IA community - shaping best practice and influencing security strategy.
• Review and provide guidance of security risk assessments, risk mitigation plans, mitigation gap analysis and preparation of security management documentation for system Accreditation, such as solution hardening guidance and security operating procedures.
• Liaison with Security Accreditors and Security Assurance Coordinators in support of security Accreditation.

What you'll bring:

• Practical experience of ISO27001/27004/27005 and NIST Risk Management Framework (RMF).
• Experience working with a security risk management system for highly regulated products based on recognised frameworks such as aerospace, nuclear, automotive, rail or oil and gas.
• Good understanding and appreciation of the Engineering development lifecycles and how the Product Security specialism aligns.
• Ability to interpret Penetration Test Reports and write Remediation Action Plans.
• An appreciation of the wider UK Government Assurance Processes (such as the legacy JSP 604 Assurance or the CAF GovAssure processes).

This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn.

Security Clearance

This role is subject to pre-employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: https://careers.uk.leonardo.com/gb/en/security-and-vetting

Why join us

• Time to Recharge: Enjoy generous leave with the opportunity to accrue up to 12 additional flexi-days each year.
• Secure your Future: Benefit from our award-winning pension scheme with up to 15% employer contribution.
• Your Wellbeing Matters: Free access to mental health support, financial advice, and employee-led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity).
• Rewarding Performance: All employees at management level and below are eligible for our bonus scheme.
• Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning.
• Refer a friend: Receive a financial reward through our referral programme.
• Tailored Perks: Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more.
• Flexible working: Flexible hours with hybrid working options. For part time opportunities, please talk to us about what might be possible for this role.

For a full list of our company benefits please visit our website.

Leonardo UK operates a grade-based salary framework with broad bands. The salary range shown reflects the approved grade band for this role, or a narrower hiring range published within that band, and is benchmarked against the external market. Exceptions above the standard range are managed through governance controls to protect internal equity.

Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety.

At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know.

Primary Location:

GB - Lincoln

Additional Locations:

GB - Bristol - Coldharbour Lane, GB - Southampton

Contract Type:

Permanent

Hybrid Working:

Hybrid