Principal Product Security Engineer

Join our security engineering team and help deliver future combat-air capability as part of the GCAP programme. You will work on complex, safety-critical mission-computing systems, embedding security into the product architecture and engineering lifecycle.
Working alongside specialists across systems, software, hardware, safety and certification, you will help ensure that security risks are identified, understood and addressed through robust engineering solutions. This is an opportunity to influence the design of advanced airborne technology while contributing to a strategically important UK defence programme.
This is a product and systems security engineering role, focused on embedding security into complex, safety-critical airborne mission systems.
In this role you will:
Own and lead the product-security architecture for complex airborne mission systems
Define the security strategy, requirements and secure-by-design approach across the programme lifecycle
Lead threat modelling, vulnerability analysis, security risk assessment and accreditation activities
Provide technical authority and informed security advice across systems, software and hardware engineering
Make and communicate proportionate security decisions, balancing operational capability, technical risk and programme constraints
Lead engagement with customers, programme partners and relevant assurance stakeholders
Review security evidence and ensure that proposed designs and mitigations support the required assurance outcomes
Coach and provide technical guidance to security and multidisciplinary engineering teams
Drive the adoption of consistent product-security methods, tools and good practice across the programme
Essential experience
Significant experience developing or leading product-security or systems-security architecture for complex engineered products
Knowledge of Secure by Design principles and relevant product and systems security standards, ideally gained within defence, aerospace or another safety-critical engineering environment
Strong experience defining security requirements and secure-by-design approaches at system or product level
Experience leading threat modelling, security risk assessment and vulnerability-analysis activities
Experience providing technical leadership and making security architecture decisions across multidisciplinary engineering teams
Knowledge of cryptographic principles and their application within secure products or systems
Experience engaging with customers, partners and assurance stakeholders on complex security matters
Ability to translate security threats and risks into practical engineering requirements and design decisions
Degree-level qualification in engineering, computer science, cyber security or a related discipline, or equivalent relevant experience
Desirable experience
Experience in aerospace, defence, avionics, mission systems, embedded systems or other safety-critical products
Experience acting as a product-security technical authority, security architect or engineering lead
Knowledge of accreditation, certification and security-assurance approaches within regulated environments
Experience coaching or technically leading security engineers
Familiarity with digital engineering, model-based systems engineering or requirements-management tools
Experience working with or familiarity with AI/ML models is preferred

Employment type
Full-time

Work arrangement
Hybrid