Product Security Engineer

TN United Kingdom
Edinburgh
3 weeks ago
Applications closed

Related Jobs

View all jobs

Senior Product Security Engineer

Senior Product Security Engineer

VP, Senior Product Security Engineer

Senior Security Engineer

Lead Security Engineer - Chase UK

Security Engineer

Social network you want to login/join with:

Technology in Defence is rapidly evolving, and so are the risks to capabilities and success through an ever-changing security landscape. As customers demand higher levels of resilience in the products we create, our approach to securing systems and products needs to change with it.

We are recruiting for a Product Security Engineer. You will work on some of the most challenging and rewarding security problems in the UK, helping design and develop security solutions that sit at the heart of our products.

What you will do as a Product Security Engineer:

Your work at Leonardo will see you addressing security risks in an agile, innovative and team-centric manner. You’ll work alongside a team of security engineers and consultants to support engineering delivery teams, aiding the design and development of new products and systems by providing guidance to ensure the customer’s capabilities remain secure.

Through engagement with engineering teams and customers, you will advise on solutions that address security concerns while providing value to the customer based on risk balance. Utilising a focus of supporting the customer achieve their goals, you will endeavour to provide the best possible solutions balanced against the programme constraints.

Key responsibility areas involve:

  • Writing security requirements to flow down to engineering teams, and overseeing implementation
  • Reviewing documentation such as design documents, system specifications, and risk profiles to identify potential vulnerabilities and propose appropriate security controls
  • Working with solution architects and engineers to ensure that systems meet stringent Design Integrity and security standards and satisfy relevant accreditation requirements
  • Participating in wider customer forums, to review security topics

What we need from you:

Ideally, we would like you to have the following skills; if you don’t have them but feel you could gain them whilst adding value to the team from alternative experience, we’d still like you to apply:

  • A degree or equivalent experience in science, technology, engineering or maths subjects
  • A passion for security and problem solving
  • Technical knowledge across security of hardware, firmware, and/or software systems
  • Knowledge of risk management
  • Understanding of the engineering product development lifecycle and Systems Engineering
  • Experience in safety-critical engineering
  • Ability to listen, understand and communicate effectively (both written and verbal) with internal and external customers
  • Ability to be self-directed, conducting both independent learning and collaborating with other engineers to develop solutions that will increase the security posture of Leonardo products
  • Eagerness to learn and adapt to changing technologies

It would also be helpful if you had:

  • A working knowledge of MOD Secure by Design process and practices
  • Practical experience in application of Risk Management Frameworks
  • Experience of using DOORS to manage requirements
  • Knowledge and experience of complex cryptography

Security Clearance:

Life at Leonardo:

With a company funded benefits package, a commitment to learning and development, and a flexible approach to working hours focused on the needs of both our employees and customers, a career with Leonardo has never offered as many opportunities or been more accessible to as many people.

  • Flexible Working:Flexible hours with hybrid working options. For part time opportunities, please talk to us
  • Company funded flexible benefits:Access to private healthcare, dental schemes, Workplace ISA, Go Green Car Scheme, technology and lifestyle options (£500 annual allowance)
  • Holidays:25 days plus bank holidays, option to buy/sell leave and to accrue up to 12 additional flexi leave days per year
  • Pension:Award winning pension scheme (up to 10% employer contribution)
  • Wellbeing:Employee Assistance Programme with access to free mental health support, financial wellbeing support and network groups to demonstrate our ongoing commitment to diversity & inclusion (Enable, Pride, Equalise, Reservists, Carers)
  • Lifestyle:Discounted Gym membership, Cycle to work scheme
  • Training:Free access to more than 4000 online courses via Coursera
  • Referral Incentive:You can earn a reward for successfully referring a friend or family member
  • Bonus:Scheme in place for all employees at management level and below

#J-18808-Ljbffr

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Portfolio Projects That Get You Hired for Cyber Security Jobs (With Real GitHub Examples)

With rising cyber threats and increasingly sophisticated attacks, cyber security has become a critical priority for organisations worldwide. From penetration testers (pentesters) and SOC analysts to cloud security engineers and threat intelligence specialists, the demand for skilled cyber security professionals continues to surge. But how do you stand out in a growing field? Alongside your CV, an impressive cyber security portfolio can be the distinguishing factor that convinces employers you’re the right fit. In this comprehensive guide, you’ll discover: Why a cyber security portfolio is essential for job seekers in this domain. How to align portfolio projects with different cyber security career paths. Real GitHub examples that demonstrate best practices in security-focused projects. Actionable project ideas you can start today, from penetration testing labs to blue-team detection pipelines. Best practices for organising your repos and presenting your work so hiring managers can instantly see your impact. When you’re ready to pursue your next opportunity, remember to upload your CV on CyberSecurityJobs.tech. Our specialised platform connects talented security professionals with employers who need your expertise—exactly what your portfolio will showcase.

Cyber Security Job Interview Warm‑Up: 30 Real Coding & System‑Design Questions

The need for skilled cyber security professionals has never been greater. As organisations rapidly digitise their operations and store increasing amounts of sensitive data online, cyber threats loom large—ranging from sophisticated ransomware attacks to insider threats and state‑sponsored espionage. Against this backdrop, cyber security jobs remain some of the most in‑demand and mission‑critical roles on the market. If you’re preparing for a cyber security interview, expect to be tested on a broad spectrum of topics—from secure coding and incident response to network security architecture and compliance standards. In many cases, companies also include problem‑solving exercises and system design scenarios to gauge how well you can apply theoretical knowledge to real‑world threats. To help you ace these assessments, we’ve compiled 30 real coding & system‑design questions you might encounter. Each reflects a key area of cyber security—whether it’s encryption and key management, threat modelling, or designing a zero‑trust network. Along the way, we’ll offer insights and best practices so you can stand out from the crowd. If you’re on the lookout for exciting cyber security roles in the UK, head to www.cybersecurityjobs.tech. There, you’ll discover a range of positions—covering everything from penetration testing and threat intelligence to compliance management and security operations. Let’s dive into the essentials of interview readiness.

Negotiating Your Cybersecurity Job Offer: Equity, Bonuses & Perks Explained

How to Secure Compensation That Reflects Your Value in the UK’s High-Stakes Cybersecurity Sector Introduction As cyber threats grow more sophisticated and frequent, cybersecurity professionals have never been more in demand. From thwarting ransomware attacks to architecting secure cloud infrastructures, mid‑senior cybersecurity experts play a critical role in safeguarding a company’s data and reputation. Thanks to this growing reliance on cybersecurity, employers in the UK are going above and beyond simple salary offers to attract the top echelon of talent. Although base salary remains a key component of any job offer, the broader package—encompassing equity, bonuses, and perks—can often surpass what you’d gain from a small bump in monthly pay. For cybersecurity specialists working in areas such as threat intelligence, incident response, penetration testing, or compliance, the complexity and risk mitigation you bring to the table is massive. Knowing how to negotiate the entire package ensures you are duly rewarded for keeping an organisation’s data, assets, and operations safe. In this guide, we’ll delve into every aspect of negotiating a cybersecurity job offer. Whether you’re pivoting to a mid‑senior role or cementing your expertise at an established security consultancy, understanding the full range of compensation elements will help you secure an offer that acknowledges the criticality of what you do. Let’s explore equity options, performance bonuses, and the perks that matter most, so you can come out of your next job negotiation confident that you’re getting more than just a salary.