Principal Engineer - Product Security

We're recruiting for a Principal Engineer - Product Security to provide senior technical leadership across Information Assurance (IA) and Product Security activities within a highly regulated engineering programme.

This is a delivery-focused role, supporting design maturity and programme readiness through security engineering governance, security case development, and risk management.

Location: Barrow-in-Furness (Hybrid) Hybrid: Typically 1-2 days on-site per month Contract: 12 months Positions: 1 Rate: 63.21 PAYE / 85.40 Umbrella

The Role

You'll act as the focal point for product security within a complex engineering environment, working closely with engineering teams and stakeholders to ensure security engineering activities are delivered in line with agreed processes, governance, and programme milestones.

Key responsibilities include:

• Leading and delivering product security engineering activity in line with programme plans and governance

• Developing Interim and Final Security Cases across programme phases

• Managing IA and security risks, including maintaining security/risk register contributions

• Supporting design assurance, formal reviews, and lifecycle gates with robust security evidence

• Coordinating and managing IA Technical Queries and formal communications

• Reviewing supplier IA/cyber deliverables and providing assurance outputs

• Planning, tracking and reporting delivery status, risks and milestones

• Providing technical leadership and mentoring within the product security team

Skills & Experience

We're looking for strong experience in IA / Product Security within complex, regulated environments (e.g., defence, maritime, aerospace), including:

• Security case development and security evidence/assurance

• Risk management (including risk registers) and requirements gap analysis

• Secure by Design and/or application security principles

• Systems engineering lifecycle understanding and design assurance processes

• Stakeholder management across multi-disciplinary engineering teams and suppliers Desirable knowledge:

• HM Government Information Security Standards IS1 & IS2

• ISO 27000 series (e.g., ISO 27001)

• IEC 62443

• Working towards or holding NCSC CCP SIRA (or equivalent)

Apply

If you've led product security/IA activities through formal engineering governance and can deliver high-quality security artefacts against programme milestones, please apply today.