Principal Engineer - Product Security
Listed on 2026-09-21
-
Engineering
Cybersecurity -
IT/Tech
Cybersecurity
We're recruiting for a Principal Engineer - Product Security to provide senior technical leadership across Information Assurance (IA) and Product Security activities within a highly regulated engineering programme.
This is a delivery-focused role, supporting design maturity and programme readiness through security engineering governance, security case development, and risk management.
Location: Barrow-in-Furness (Hybrid)
Hybrid: Typically 1-2 days on-site per month
Contract: 12 months
Positions: 1
Rate: £63.21 PAYE / £85.40 Umbrella
You’ll act as the focal point for product security within a complex engineering environment, working closely with engineering teams and stakeholders to ensure security engineering activities are delivered in line with agreed processes, governance, and programme milestones.
Key responsibilities include:
- Leading and delivering product security engineering activity in line with programme plans and governance
- Developing Interim and Final Security Cases across programme phases
- Managing IA and security risks, including maintaining security/risk register contributions
- Supporting design assurance, formal reviews, and lifecycle gates with robust security evidence
- Coordinating and managing IA Technical Queries and formal communications
- Reviewing supplier IA/cyber deliverables and providing assurance outputs
- Planning, tracking and reporting delivery status, risks and milestones
- Providing technical leadership and mentoring within the product security team
We’re looking for strong experience in IA / Product Security within complex, regulated environments (e.g., defence, maritime, aerospace), including:
- Security case development and security evidence/assurance
- Risk management (including risk registers) and requirements gap analysis
- Secure by Design and/or application security principles
- Systems engineering lifecycle understanding and design assurance processes
- Stakeholder management across multi-disciplinary engineering teams and suppliers
Desirable knowledge:
- HM Government Information Security Standards IS1 & IS2
- ISO 27000 series (e.g., ISO 27001)
- IEC 62443
- Working towards or holding NCSC CCP SIRA (or equivalent)
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).