Principal Engineer - Product Security

We're recruiting for a Principal Engineer - Product Security to provide senior technical leadership across Information Assurance (IA) and Product Security activities within a highly regulated engineering programme.

This is a delivery-focused role, supporting design maturity and programme readiness through security engineering governance, security case development, and risk management.

Location: Barrow-in-Furness (Hybrid)
Hybrid: Typically 1-2 days on-site per month
Contract: 12 months
Positions: 1
Rate: £63.21 PAYE / £85.40 Umbrella

You'll act as the focal point for product security within a complex engineering environment, working closely with engineering teams and stakeholders to ensure security engineering activities are delivered in line with agreed processes, governance, and programme milestones.

Key responsibilities include:

• Leading and delivering product security engineering activity in line with programme plans and governance
• Developing Interim and Final Security Cases across programme phases
• Managing IA and security risks, including maintaining security/risk register contributions
• Supporting design assurance, formal reviews, and lifecycle gates with robust security evidence
• Coordinating and managing IA Technical Queries and formal communications
• Reviewing supplier IA/cyber deliverables and providing assurance outputs
• Planning, tracking and reporting delivery status, risks and milestones
• Providing technical leadership and mentoring within the product security team

We're looking for strong experience in IA / Product Security within complex, regulated environments (e.g., defence, maritime, aerospace), including:

• Security case development and security evidence/assurance
• Risk management (including risk registers) and requirements gap analysis
• Secure by Design and/or application security principles
• Systems engineering lifecycle understanding and design assurance processes
• Stakeholder management across multi-disciplinary engineering teams and suppliers

Desirable knowledge:

• HM Government Information Security Standards IS1 & IS2
• ISO 27000 series (e.g., ISO 27001)
• IEC 62443
• Working towards or holding NCSC CCP SIRA (or equivalent)

If you've led product security/IA activities through formal engineering governance and can deliver high-quality security artefacts against programme milestones, please apply today.