Senior Product Security Engineer — Hybrid (Aerospace)

Leonardo SpA; Lincoln; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Pension

Mental health support

Bonus scheme

Hybrid working

Job summary

Leonardo UK seeks a Senior Product Security Engineer to embed security across the lifecycle for EW and FCAS designs. You will collaborate with cross-functional teams across UK sites, with hybrid work and regular travel to Lincoln and other sites.

Key experience includes ISO27001/27004/27005 and RMF, plus the ability to interpret penetration tests and prepare remediation plans. BPSS/NSV may apply.

Qualifications

• Experience with ISO27001/27004/27005 and NIST RMF.
• Security risk management for highly regulated products (aerospace, nuclear, automotive, rail or oil & gas).
• Understanding of engineering development lifecycles and how product security aligns.
• Ability to interpret Penetration Test Reports and write remediation action plans.
• Familiarity with UK Government Assurance processes (JSP 604, CAF GovAssure).

Responsibilities

• Support the production of work package descriptions and cost estimates for bids and proposals.
• Drive Security Assurance through the full product lifecycle, ensuring designs are robust, compliant, and resilient.
• Provide independent Information Assurance reviews and risk assessments on high-impact projects.
• Contribute to Leonardo's UK-wide Security and IA community, shaping best practice and security strategy.
• Review and guide security risk assessments, mitigation plans, gap analyses, and security management documentation for system Accreditation.

Skills

ISO27001 RMF

Security risk management

Penetration testing

IA reviews

UK Government Assurance

Job description

Leonardo UK seeks a Senior Product Security Engineer to embed security across the lifecycle for EW and FCAS designs. You will collaborate with cross-functional teams across UK sites, with hybrid work and regular travel to Lincoln and other sites.

Key experience includes ISO27001/27004/27005 and RMF, plus the ability to interpret penetration tests and prepare remediation plans. BPSS/NSV may apply.