Principal Security Consultant

Overview

In this role you lead the cyber and information security delivery for a core Leonardo product within an agile, cross-functional team. You translate customer requirements into actionable security plans and oversee artefacts across the engineering lifecycle, from requirements to in-service support. You act as a security subject matter expert, ensuring the product meets security expectations and risk appetite. The position is based in Yeovil and offers collaboration with engineers, consultants, and domain specialists on a major programme.

Pay / Benefits

• Generous leave with up to 12 flexi-days per year
• Award-winning pension scheme with up to 15% employer contribution
• Mental health support and financial advice
• Bonus scheme for eligible employees
• Free access to 4,000+ online courses via Coursera and LinkedIn Learning
• Flexible benefits up to 500 annually (private healthcare, dental, etc.)

Responsibilities

• Lead a team to deliver cyber and information security across the engineering lifecycle
• Convert customer requirements into security management plans and statements of work
• Be the security subject matter expert for the product being delivered
• Oversee SBOMs, artefacts, and deliverables to time, cost and quality
• Identify, manage and escalate technical and delivery risks and issues
• Manage internal and external customer relationships for the cyber workstream
• Line manage and mentor consultants within the team

Key requirements

• Ability to work independently and make sound decisions
• Excellent written and verbal communication skills at all levels
• Strong consulting skills: client relations, adaptability, reliability and delivery quality
• Experience managing risks and services per customer, regulatory and legislative expectations
• Degree and/or master’s in cyber security and/or systems/software engineering or relevant comparable experience
• At least two recognised professional cyber security certifications such as CISSP, CISM, CASP/SecurityX and/or Chartership or comparable in security discipline (ChCSP)
• Knowledge of Defence security standards and MOD accreditation processes (ISN2023/09)
• Experience with standards like NIST SP 800-30, 37 & 53 and RTCA-DO-326A/B, 355A & 356A
• Ability to scope and manage security verification and remediation plans
• Ability to coordinate with product engineers, system architects and developers to guide robust solutions

• Independent work ethic
• Effective communicator across stakeholders
• Collaborative, team-oriented
• Cyber security and information security management
• Threat modelling and vulnerability analysis
• Security risk assessment and mitigations

…