Senior Security Engineer – Defence Systems

Leonardo SpA; Southampton; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Time to Recharge

Pension scheme

Mental health support

Bonus scheme

Online courses

Refer a friend

Flexible benefits

Hybrid working

Job summary

Leonardo UK is seeking a Principal Security Engineer to secure defence systems across the product lifecycle, working with engineering specialists to embed security in design and drive resilient solutions for national security.

You will define security requirements, perform risk analyses and remediation plans, and collaborate with Product Cyber Resilience Managers to strengthen assurance. Hybrid working in Southampton with a competitive benefits package.

Qualifications

• Experience with ISO27001/27004/27005 and NIST RMF.
• Experience supporting security risk management for regulated products (aerospace, nuclear, automotive, rail, oil/gas).
• Understanding of engineering development lifecycles and how Product Security aligns.
• Ability to interpret Penetration Test Reports and support remediation actions.
• Awareness of UK Government Assurance Processes.

Responsibilities

• Define and manage product security requirements and provide expert guidance on standards and best practices.
• Develop and implement security processes, tools and protocols to stay ahead of threats.
• Produce and maintain security artefacts such as Risk Assessments, Threat Analyses and Remediation Action Plans.
• Drive security assurance activities across the full product lifecycle ensuring secure by design solutions.
• Support continuous improvement of security engineering capability and ways of working across the business.
• Collaborate with security specialists including Product Cyber Resilience Managers and the Head of Product Security to deliver risk management.

Job description

Leonardo UK is seeking a Principal Security Engineer to secure defence systems across the product lifecycle, working with engineering specialists to embed security in design and drive resilient solutions for national security.

You will define security requirements, perform risk analyses and remediation plans, and collaborate with Product Cyber Resilience Managers to strengthen assurance. Hybrid working in Southampton with a competitive benefits package.