Principal Product Security Engineer

Join our security engineering team and help deliver future combat-air capability as part of the GCAP programme. You will work on complex, safety-critical mission-computing systems, embedding security into the product architecture and engineering lifecycle. Working alongside specialists across systems, software, hardware, safety and certification, you will help ensure that security risks are identified, understood and addressed through robust engineering solutions. This is an opportunity to influence the design of advanced airborne technology while contributing to a strategically important UK defence programme. This is a product and systems security engineering role, focused on embedding security into complex, safety-critical airborne mission systems. In this role you will: - Own and lead the product-security architecture for complex airborne mission systems - Define the security strategy, requirements and secure-by-design approach across the programme lifecycle - Lead threat modelling, vulnerability analysis, security risk assessment and accreditation activities - Provide technical authority and informed security advice across systems, software and hardware engineering - Make and communicate proportionate security decisions, balancing operational capability, technical risk and programme constraints - Lead engagement with customers, programme partners and relevant assurance stakeholders - Review security evidence and ensure that proposed designs and mitigations support the required assurance outcomes - Coach and provide technical guidance to security and multidisciplinary engineering teams - Drive the adoption of consistent product-security methods, tools and good practice across the programme Essential experience - Significant experience developing or leading product-security or systems-security architecture for complex engineered products - Knowledge of Secure by Design principles and relevant product and systems security standards, ideally gained within defence, aerospace or another safety-critical engineering environment - Strong experience defining security requirements and secure-by-design approaches at system or product level - Experience leading threat modelling, security risk assessment and vulnerability-analysis activities - Experience providing technical leadership and making security architecture decisions across multidisciplinary engineering teams - Knowledge of cryptographic principles and their application within secure products or systems - Experience engaging with customers, partners and assurance stakeholders on complex security matters - Ability to translate security threats and risks into practical engineering requirements and design decisions - Degree-level qualification in engineering, computer science, cyber security or a related discipline, or equivalent relevant experience Desirable experience - Experience in aerospace, defence, avionics, mission systems, embedded systems or other safety-critical products - Experience acting as a product-security technical authority, security architect or engineering lead - Knowledge of accreditation, certification and security-assurance approaches within regulated environments - Experience coaching or technically leading security engineers - Familiarity with digital engineering, model-based systems engineering or requirements-management tools - Experience working with or familiarity with AI/ML models is preferred