Senior Product Security Engineer – Hybrid (Defence)

Leonardo; West of England; Hybride; GBP 95 000 - 120 000; Plein temps

Résumé du poste

Leonardo UK is seeking a Principal Product Security Engineer to lead security outputs across the product lifecycle for advanced defence technologies. You will work with system, software and firmware teams to ensure secure by design products and robust risk management.

In a highly regulated environment, you will define security requirements, drive assurance activities and contribute to security governance across UK sites. Applicants with industry standards experience will excel.

Qualifications

• Experience in a highly regulated industry such as defence, aerospace, nuclear, automotive, rail, or oil and gas.
• Experience implementing industry security frameworks (e.g., NIST) and security assurance (e.g., Common Criteria).
• Experience with security assurance frameworks affecting UK, NATO, and international defence partners.
• Experience integrating security into engineering lifecycles for complex non-enterprise systems.
• Professional recognition in security governance/risk management or secure architecture from CIISec/ISC2/ISACA/UKCSC.

Responsabilités

• Define product security requirements and advise development teams on secure implementation standards.
• Identify and manage security processes and tools to stay ahead of threats.
• Create and manage artefacts like risk assessments, security cases and remediation plans.
• Drive security assurance across the full product lifecycle and improve engineering capability.
• Contribute to the UK-wide Security and IA community to shape best practice.
• Liaise with security experts to support ongoing assurance.

Connaissances

Security governance

Security risk management

Secure system architecture

Security assurance

Regulatory experience

Description du poste

Leonardo UK is seeking a Principal Product Security Engineer to lead security outputs across the product lifecycle for advanced defence technologies. You will work with system, software and firmware teams to ensure secure by design products and robust risk management.

In a highly regulated environment, you will define security requirements, drive assurance activities and contribute to security governance across UK sites. Applicants with industry standards experience will excel.