National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Chief Product Security Engineer

Leonardo
Tyne and Wear
1 year ago
Create job alert

Job Description:

At Leonardo, we have a fantastic opportunity for a Chief Product Security Engineer to join our team within the Customer Support and Service Solutions (CS3) line of business. CS3 operates across the UK, providing innovative and invaluable support solutions to our customers. We help to ensure the availability of front-line capability wherever and whenever required.

We are looking for an experienced product security practitioner with expertise in developing and maintaining robust product security management systems for defence and government customers.

Within CS3, the term product can be used to include both in-service equipment, and the support solutions/services provided to customers, which in themselves are developed. The Chief Product Security Engineer will take responsibility for ensuring that all security aspects of the design, development, verification and maintenance of this range of products, through all phases of their lifecycle, have been completed in accordance with policy and process. They will work closely with the development teams to provide guidance in the design, implementation and maintenance of appropriate security controls.

Provide security advice and support to product development teams, including in terms of:Deriving security requirementsUndertaking security risk assessments for productsPreparing security risk mitigation plansReview and approval of Security Management plans Security policy maintenance and monitoring Production of LoB security metrics Management of attendance at external security forums Attendance and support to the Security Special Interest Group Lead security incident management teams during incident/crisis situations in conjunction with the Lead Product Security Engineer(s)

The Chief Product Security Engineer has delegated authority within the independent Design Integrity function, responsible for the following elements:

Security process maintenance and monitoring Security competence framework maintenance and monitoring Assessment of security competence in line with the competency framework Chair and maintenance of a LoB security Community of Interest (CoI) Promoting and sharing knowledge and best practice across the division to improve product security awareness and help embed it within ways of working Training the engineering teams with respect to the security framework, policies and processes Demonstrated experience of developing robust security risk management systems for a range of pan domain products and services in accordance with customer, regulatory and legislative expectations. Familiarity with Legislation – e.g. IPA, DPA, Official Secrets Act Registered NCSC Certified Professional at lead level, or equivalent NCSC recognised qualification. Knowledge of UK/NATO Information Assurance standards, procedures & systems, including HMG Security Policy Framework, ISO security standards, RTCA DO326A. Familiarity with the principles of incident investigation and knows how to implement an investigation process; Practical experience of NCSC and Common Criteria security evaluation techniques and requirements up to High Grade. Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations. Experience of identifying the future Product Security needs of the company, regularly delivering training courses within a corporate environment and delivering awareness presentations to other groups. Awareness of product security implications relating to safety Excellent communication and interpersonal skills, with the ability to interact with a number of stakeholders from subject matter experts to senior leaders, regarding a wide range of technical and operational topics. Good understanding and experience in delivery and maintenance of products to meet regulatory requirements, for example MAA DAOS, ARP4754 Understanding of the concept of operations for products, in order to understand the functional security risks and define/agree the appropriate mitigations Ability to identify and deliver alternative/innovative ways to manage security, including ensuring buy-in from key regulatory bodies Understanding of the role of advisory boards within the UK Government or NATO for security. Active membership of an external security specialist group or forum

Security Clearance

:

Life at Leonardo

With a company funded benefits package, a commitment to learning and development, and a flexible approach to working hours focused on the needs of both our employees and customers, a career with Leonardo has never offered as many opportunities or been more accessible to as many people.

Flexible Working:Flexible hours with hybrid working options. For part time opportunities, please talk to us

Company funded flexible benefits:Access to private healthcare, dental schemes, Workplace ISA, Go Green Car Scheme, technology and lifestyle options (£500 annual allowance)

Holidays:25 days plus bank holidays, option to buy/sell leave and to accrue up to 12 additional flexi leave days per year

Pension:Award winning pension scheme (up to 15% employer contribution)

Wellbeing: Employee Assistance Programme with access to free mental health support, financial wellbeing support and network groups to demonstrate our ongoing commitment to diversity & inclusion (Enable, Pride, Equalise, Reservists, Carers)

Lifestyle:Discounted Gym membership, Cycle to work scheme

Training:Free access to more than 4000 online courses via Coursera

Referral Incentive:You can earn a reward for successfully referring a friend or family member

Bonus:Scheme in place for all employees at management level and below

Related Jobs

View all jobs

Chief Product Security Engineer

Chief Information Security Officer

Chief Information Security Officer

Chief Information Security Officer

Chief Information Security Officer

Chief Information Security Officer

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Jobs Salary Calculator 2025: Check Your Market Value in Seconds

Why yesterday’s pay survey no longer protects you. “Could I earn more at a managed SOC?” “Is that fintech’s offer really competitive?” Every UK cyber‑security professional asks some version of those questions—usually after another colleague lands a pay rise, a recruiter sends a tempting JD, or a fresh breach makes headline news. Yet salary guides published even last year feel as out‑of‑date as a forgotten antivirus signature. Since 2024, ransomware gangs switched to double‑extortion, deepfake phishing exploded, & the EU’s NIS2/DORA regulations bled into UK contracts despite Brexit. With each shift, salary bands move. To cut through stale averages, CybersecurityJobs.tech distilled a three‑factor formula that lets you estimate a realistic 2025 salary in under a minute. Feed in your role, your UK region, & your seniority level. The output arms you with data‑driven leverage for your next appraisal, job application, or freelance rate card. This article explains the formula, reveals the forces pushing cyber pay ever higher, & outlines five practical moves to boost your market value within ninety days.

How to Present Cyber Security Solutions to Non-Technical Audiences: A Public Speaking Guide for Job Seekers

Cyber security is no longer just an IT issue—it’s a board-level priority. Whether you’re applying for a role in penetration testing, security operations, risk management, or compliance, your ability to clearly explain cyber threats and solutions to non-technical stakeholders is vital. This guide will help cyber security job seekers develop one of the most in-demand soft skills in the industry: public speaking. You’ll learn how to simplify complex concepts, structure effective presentations, use storytelling and analogies, and handle common stakeholder questions with confidence.

Cyber Security Jobs Employer Hotlist 2025: 50 UK Companies Actively Hiring Right Now

Bookmark this guide—refreshed every quarter—so you always know who’s really expanding their cyber security teams. Ransomware payouts broke records in 2024, the UK’s new Cyber Security Bill imposed mandatory breach disclosure, and the National Cyber Force’s move to Samlesbury has super‑charged the northern skills market. Result? Demand for security architects, SOC analysts, penetration testers, cloud‑security engineers, threat hunters & GRC specialists is at an all‑time high in 2025. Below you’ll find 50 organisations that have posted UK‑based cyber security vacancies or announced head‑count growth during the past eight weeks. They’re organised into five quick‑scan categories. For every employer you’ll see: Main UK hub Example live or recent vacancy Why it’s worth a look (tech stack, culture, mission) Search any company on CyberSecurityJobs.tech to view current ads, or set a free alert so fresh openings land straight in your inbox.