Senior Product Security Engineer — Hybrid Defence Focus

Leonardo; Luton; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Time to Recharge: up to 12 flexi-days

Pension scheme with up to 15% employer

Mental health support

Bonus scheme

4,000+ online courses (Coursera/Linked

Referral programme

Flex benefits up to £500

Flexible hours with hybrid working

Job summary

Leonardo is seeking a Senior Product Security Engineer for its EW and FCAS Design Integrity team in the UK. You will deliver product security activities across the engineering lifecycle, ensuring security is embedded from concept to delivery.

The role is hybrid, based at Luton with travel to other UK sites. Strong knowledge of security frameworks and government assurance processes is essential.

Qualifications

• Practical experience of ISO27001/27004/27005 and NIST RMF.
• Experience with security risk management for highly regulated products (aerospace, nuclear, automotive, rail or oil & gas).
• Understanding of engineering development lifecycles and how Security integrates into product design.
• Ability to interpret Penetration Test Reports and write remediation plans.
• Awareness of UK Government Assurance processes (e.g., JSP 604, CAF GovAssure).

Responsibilities

• Support bid work package descriptions and cost estimates.
• Drive security assurance through full product lifecycle and improve engineering capability.
• Provide independent IA reviews and risk assessments on complex projects.
• Contribute to Leonardos UK-wide Security and IA community and best practices.
• Review security risk assessments and mitigation plans for system accreditation.
• Liaise with Security Accreditors and NSV/SC-related contacts during accreditation.

Skills

ISO27001/27004/27005

RMF risk management

Engineering lifecycle alignment

Penetration test remediation

UK government assurance processes

Job description

Leonardo is seeking a Senior Product Security Engineer for its EW and FCAS Design Integrity team in the UK. You will deliver product security activities across the engineering lifecycle, ensuring security is embedded from concept to delivery.

The role is hybrid, based at Luton with travel to other UK sites. Strong knowledge of security frameworks and government assurance processes is essential.