Principal Engineer - Product Security

We're recruiting for a Principal Engineer - Product Security to provide senior technical leadership across Information Assurance (IA) and Product Security activities within a highly regulated engineering programme.

This is a delivery-focused role, supporting design maturity and programme readiness through security engineering governance, security case development, and risk management.

Location: Barrow-in-Furness (Hybrid) Hybrid: Typically 1-2 days on-site per month Contract: 12 months Positions: 1 Rate: £63.21 PAYE / £85.40 Umbrella

The Role

You'll act as the focal point for product security within a complex engineering environment, working closely with engineering teams and stakeholders to ensure security engineering activities are delivered in line with agreed processes, governance, and programme milestones.

Key responsibilities include:

Leading and delivering product security engineering activity in line with programme plans and governance Developing Interim and Final Security Cases across programme phases Managing IA and security risks, including maintaining security/risk register contributions Supporting design assurance, formal reviews, and lifecycle gates with robust security evidence Coordinating and managing IA Technical Queries and formal communications Reviewing supplier IA/cyber deliverables and providing assurance outputs Planning, tracking and reporting delivery status, risks and milestones Providing technical leadership and mentoring within the product security team

Skills & Experience

We're looking for strong experience in IA / Product Security within complex, regulated environments (e.g., defence, maritime, aerospace), including:

Security case development and security evidence/assurance Risk management (including risk registers) and requirements gap analysis Secure by Design and/or application security principles Systems engineering lifecycle understanding and design assurance processes Stakeholder management across multi-disciplinary engineering teams and suppliersDesirable knowledge:

HM Government Information Security Standards IS1 & IS2 ISO 27000 series (e.g., ISO 27001)

Iec 62443

Working towards or holding NCSC CCP SIRA (or equivalent)

Apply

If you've led product security/IA activities through formal engineering governance and can deliver high-quality security artefacts against programme milestones, please apply today