We're recruiting for a Principal Engineer - Product Security to provide senior technical leadership across Information Assurance (IA) and Product Security activities within a highly regulated engineering programme.
This is a delivery-focused role, supporting design maturity and programme readiness through security engineering governance, security case development, and risk management.
Location: Barrow-in-Furness (Hybrid)
Hybrid: Typically 1-2 days on-site per month
Contract: 12 months
Positions: 1
Rate: £63.21 PAYE / £85.40 Umbrella
The Role
You'll act as the focal point for product security within a complex engineering environment, working closely with engineering teams and stakeholders to ensure security engineering activities are delivered in line with agreed processes, governance, and programme milestones.
Key responsibilities include:
Leading and delivering product security engineering activity in line with programme plans and governance
Developing Interim and Final Security Cases across programme phases
Managing IA and security risks, including maintaining security/risk register contributions
Supporting design assurance, formal reviews, and lifecycle gates with robust security evidence
Coordinating and managing IA Technical Queries and formal communications
Reviewing supplier IA/cyber deliverables and providing assurance outputs
Planning, tracking and reporting delivery status, risks and milestones
Providing technical leadership and mentoring within the product security team
Skills & Experience
We're looking for strong experience in IA / Product Security within complex, regulated environments (e.g., defence, maritime, aerospace), including:
Security case development and security evidence/assurance
Risk management (including risk registers) and requirements gap analysis
Secure by Design and/or application security principles
Systems engineering lifecycle understanding and design assurance processes
Stakeholder management across multi-disciplinary engineering teams and suppliersDesirable knowledge:
HM Government Information Security Standards IS1 & IS2
ISO 27000 series (e.g., ISO 27001)
IEC 62443
Working towards or holding NCSC CCP SIRA (or equivalent)
Apply
If you've led product security/IA activities through formal engineering governance and can deliver high-quality security artefacts against programme milestones, please apply today
