
Principal Product Security Engineer
Leonardo S.p.A.28 days ago
Lincoln, United Kingdom or Southampton, United KingdomStaff+
Responsibilities
- Define product security requirements and advise development teams on implementation standards and techniques.
- Develop and manage security protocols, tools, and processes addressing emerging threats.
- Create and manage risk assessments, security cases, and remediation action plans.
- Drive security assurance throughout the product lifecycle.
- Interpret penetration-test reports and support remediation activities.
- Contribute to engineering capability improvement, security strategy, and Leonardo’s UK-wide security and information assurance community.
- Liaise with product security leaders and Product Cyber Resilience Managers.
Requirements
- Practical experience with ISO 27001, ISO 27004, ISO 27005, and/or the NIST Risk Management Framework.
- Experience supporting security risk-management systems for highly regulated products in sectors such as defence, aerospace, nuclear, automotive, rail, or oil and gas.
- Understanding of engineering development lifecycles and product security integration.
- Awareness of UK Government assurance processes, including the MoD Secure by Design Framework, JSP 453, ISN2023/09, JSP 604 Assurance, or CAF GovAssure.
- Professional recognition in security governance and risk management, secure system architecture and design, or security assurance and audit from bodies such as CIISec, ISC2, ISACA, or UKCSC.
- Willingness to learn and a positive attitude.
Benefits
- Permanent hybrid working with flexible hours and part-time discussions available.
- Generous leave with the opportunity to accrue up to 12 additional flexi-days annually.
- Award-winning pension scheme with up to 15% employer contribution.
- Free mental health support, financial advice, and employee-led inclusion and diversity networks.
- Eligibility for a bonus scheme for employees at management level and below.
- Free access to more than 4,000 online courses through Coursera and LinkedIn Learning.
- Employee referral programme with a financial reward.
- Up to £500 annually for flexible benefits including private healthcare, dental and family cover, technology and lifestyle discounts, and gym memberships.
- Locations include Luton, Bristol, Lincoln, and Southampton.