Job Description: Our Cyber and Electromagnetic Activities (CEMA) department is championing interoperability with partners, allies, and NATO to get the right information to the right place at the speed of relevance.
CEMA is currently recruiting for a highly motivated Lead Security Engineer to join their team. The role requires you to be based on-site at one of the following locations: Basildon, Southampton, Luton, or Bristol, with occasional travel to customers, suppliers, and other Leonardo sites in the UK and overseas.
As a Lead Security Engineer, you will provide Security Assurance to support the development and delivery of products aligned with Secure by Design principles. You will oversee the development, implementation, and management of security protocols, tools, and practices to ensure products meet standards and legislation. Working closely with the Integrated Product Team (IPT) frameworks and specialists from other disciplines, you will provide expert knowledge throughout the product lifecycle.
Provide independent Information Assurance (IA) on products outside your immediate responsibility, including assessments at Design Reviews and on artefacts.
Contribute to the wider Product IA and Security community across Leonardo Electronics UK, influencing policies and guidance.
Generate Security Management Plans, Risk Assessments, Security Design documentation, and risk Remediation Plans.
Create artefacts, support Design Reviews, and deliver Product Security documentation such as Product Integrity certificates and security cases.
What you'll bring You should have experience managing security risk systems for highly regulated products based on recognized frameworks, and a good understanding of engineering development lifecycles and product security alignment.
Engineering degree with a minimum of 5 years' experience in product security and relevant certifications (CISSP, CISM, or equivalent).
Practical experience with risk management frameworks (NIST SP800-37, ISO27001).
Experience with risk assessment processes (NIST SP800-30, ISO 27005).
Knowledge of security controls (NIST SP800-53, ISO27002).
Experience with Secure by Design requirements (ISN 2023/09).
Ability to write IA Technical Risk Assessments and manage these assessments.
Ability to interpret Penetration Test Reports and develop Remediation Action Plans.
An understanding of UK Government Assurance Processes (e.g., JSP 440, DEF STAN 05-139, CAF GovAssure).
Note: We welcome candidates with varying levels of experience; a positive attitude and willingness to learn are most important.
Security Clearance This role requires pre-employment screening in line with the UK Government's BPSS. Additional vetting (NSV) may be required, including eligibility for Security Check (SC) or Developed Vetting (DV). More info at:
https://careers.uk.leonardo.com/gb/en/security-and-vetting
Why join us At Leonardo, our people are central to our success. We offer a comprehensive benefits package supporting wellbeing, career growth, and work-life balance, including:
Generous leave with up to 12 additional flexi-days annually.
Competitive pension scheme with up to 15% employer contribution.
Free mental health support, financial advice, and diverse employee networks.
Performance bonuses for employees at management level and below.
Access to over 4,000 online courses via Coursera and LinkedIn Learning.
Referral rewards for successful candidate introductions.
Flexible benefits up to £500 annually, including healthcare, dental, tech discounts, and gym memberships.
Flexible working options, including hybrid arrangements.
For more details, visit our website. Leonardo is a global leader in Aerospace, Defence, and Security, with over 53,000 employees worldwide, including 8,500 in the UK. We are committed to diversity and inclusion. If you have accessibility needs during recruitment, please let us know.
Apply now and be part of something bigger!
Locations & Contract Primary Location:
GB - Basildon
Additional Locations:
GB - Bristol - Coldharbour Lane, GB - Luton - Cap. Green 300, GB - Southampton
Contract Type:
Employee-Permanent
Hybrid Working:
Yes
#J-18808-Ljbffr