Principal Engineer – Product Security

BAE Systems
Bristol
Workplace: HybridFull timeFunction: Solutions Engineering & Sales EngineeringEducation: bachelorsSkills: ["Risk management","Cybersecurity analysis","Technical guidance","Stakeholder communication"]

Define and implement risk-based cybersecurity requirements for submarine platform systems and subsystems. Conduct in-depth cyber analysis, including threat taxonomies, security architectures, baselines, and risk mitigation strategies, and execute security test plans. Support engineering lifecycle reviews and design assurance to embed security throughout development, producing key security artifacts like risk registers and security assurance cases for delivery of secure, resilient products.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
BAE Systems
BAE Systems
10 hours ago

Principal Engineer – Product Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 6 hours agoStatus: Live
Reposted: similar role first listed 1 month ago

Job Summary

Define and implement risk-based cybersecurity requirements for submarine platform systems and subsystems. Conduct in-depth cyber analysis, including threat taxonomies, security architectures, baselines, and risk mitigation strategies, and execute security test plans. Support engineering lifecycle reviews and design assurance to embed security throughout development, producing key security artifacts like risk registers and security assurance cases for delivery of secure, resilient products.
Location: Bristol
Workplace: Hybrid
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Sr. Manager level

Key Responsibilities

  • •Define and implement risk-based cybersecurity requirements for systems and subsystems, providing technical expertise and guidance across cyber security and resilience.
  • •Conduct cybersecurity analysis, including development of threat taxonomies, security architectures, security baselines, and risk mitigation strategies.
  • •Develop and execute cybersecurity test plans and schedules, performing informal and formal security testing activities.
  • •Support engineering lifecycle reviews and design assurance processes to ensure security is embedded throughout system development.
  • •Produce and maintain security artifacts such as risk registers, security assurance cases, plans, and schedules.

Pay and Benefits

Salary: GBP 61,500
Perks:Relocation

Key Requirements

  • •Hold a degree in a relevant STEM subject or maintain recognised industry security qualifications (e.g., CCP, CISSP).
  • •Proven experience assessing and managing risk following industry good practice (NIST, ISO 27001).
  • •Significant experience using security baselines, mitigations, and controls.
  • •Be familiar with a life cycle phased approach.
  • •Achieve the Baseline Personnel Security Standard; some roles may require higher levels of National Security Vetting.
Experience:DefenceAerospaceCybersecurity
Education:Bachelor's
Skills:Risk managementCybersecurity analysisTechnical guidanceStakeholder communication
Certifications:CCPCISSP
Tech Stack:NISTISO 27001

Eligibility

Security Clearance:Baseline Personnel Security StandardNational Security Vetting

Company Brief

BAE Systems
Multinational defence, security and aerospace company designing, manufacturing and supporting military and civilian systems including naval ships, submarines, aircraft, cyber solutions and electronic systems for governments and commercial customers.
Industry: Defense Manufacturing
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1999
WebsiteLinkedIn