Senior Product Security Engineer – Defence, Secure by Design

Leonardo; Southampton; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

12 flexi‑days per year

Employer pension up to 15%

Mental health support

Coursera/LinkedIn Learning access

Flexible benefits up to £500

Hybrid working

Job summary

Leonardo in the UK is seeking a Principal Security Engineer to secure the next‑generation defence protection systems. You will embed security across the product lifecycle, working with engineering specialists to develop resilient, compliant solutions that support national security missions.

This role involves defining security requirements, implementing processes and artefacts such as risk assessments and threat analyses, and driving assurance activities across the lifecycle.

Qualifications

• Experience with ISO27001/27004/27005 and RMF.
• Experience supporting security risk management for highly regulated products.
• Understanding of engineering development lifecycles and how security aligns with them.
• Ability to interpret Penetration Test Reports and support remediation.
• Awareness of UK Government Assurance Processes.

Responsibilities

• Defining and managing product security requirements and guiding project teams on security standards.
• Developing and implementing security processes, tools and protocols to stay ahead of threats.
• Producing and maintaining artefacts: Risk Assessments, Threat Analyses and Remediation Action Plans.
• Driving security assurance throughout the full product lifecycle to ensure secure by design solutions.
• Supporting improvement of security engineering capability and processes across the business.
• Collaborating with security specialists to deliver effective security assurance and risk management.

Skills

ISO27001/27004/27005 RMF

RMF

Security risk management

Penetration Test reports

UK Government Assurance

Job description

Leonardo in the UK is seeking a Principal Security Engineer to secure the next‑generation defence protection systems. You will embed security across the product lifecycle, working with engineering specialists to develop resilient, compliant solutions that support national security missions.

This role involves defining security requirements, implementing processes and artefacts such as risk assessments and threat analyses, and driving assurance activities across the lifecycle.