Principal Engineer – Product Security

Job Advertisement: Principal Engineer – Product Security

Agency Partner: Supportive Bridge Staffing Agency

Client: BAE Systems Submarines

Location: Flexible Locations (Frimley, Bristol, Weymouth, Portsmouth, Coventry) with Hybrid/Flexible working options available

Position Type: Permanent Experienced Professional Contract

Salary: Circa £61,500 per annum

Relocation Support: Relocation packages available (subject to meeting eligibility criteria)

Application Closing Date: 7th October 2026 (Note: Vacancy may close early if sufficient applications are received)

About the Opportunity

Supportive Bridge Staffing Agency is proud to partner with BAE Systems—a global leader in defence, aerospace, and security—to source an expert and driven Principal Engineer – Product Security for a permanent career opportunity.

As part of the Engineering Delivery Team supporting all Submarine Platforms in the Royal Naval fleet, you will play a pivotal role in ensuring submarine systems and products are developed with top-tier security and resilience. This permanent position offers an extraordinary platform to lead product cybersecurity, manage information security risks, and shape the future of sovereign defence capabilities.

Role Overview

Working across multiple flexible UK locations, you will define and implement risk-based cybersecurity requirements for systems and subsystems. You will conduct in-depth cybersecurity analyses, execute security testing, support lifecycle reviews, and produce critical security artefacts such as risk registers and security assurance cases.

Core Duties & Responsibilities

• Cybersecurity Strategy: Define and implement risk-based cybersecurity requirements, threat taxonomies, security architectures, and security baselines for systems and subsystems.

• Security Testing: Develop and execute cybersecurity test plans, schedules, and both informal/formal security testing activities.

• Risk & Assurance Management: Identify, analyse, evaluate, and manage information security risks associated with on-board submarine products, maintaining risk registers and security assurance cases.

• Lifecycle Integration: Support engineering lifecycle reviews and design assurance processes to embed security throughout system development.

• Stakeholder Consultation: Provide expert technical guidance and communicate security risks, likelihoods, and operational impacts credibly to customers, users, and internal stakeholders.

Key Requirements & Qualifications

• Academic / Professional Background: Hold a degree in a relevant STEM subject or maintain recognised industry security qualifications (e.g., CCP, CISSP).

• Risk Assessment: Proven experience assessing and managing risk in line with industry best practices (e.g., NIST, ISO 27001).

• Security Controls: Significant hands-on experience using security baselines, mitigations, and controls within a lifecycle phased approach.

• Working Arrangement: Flexible hybrid working options available across Frimley, Bristol, Weymouth, Portsmouth, or Coventry.

• Security Clearance: All applicants must achieve, as a minimum, the Baseline Personnel Security Standard (BPSS). Note: Due to security and export control restrictions, candidates must meet national identity, birthplace, and residency criteria (typically requiring continuous UK residency of 5 to 10 years for higher-level national security vetting).

Why Join BAE Systems?

• Meaningful Impact: Build a career with purpose, contributing to advanced technology-led solutions that protect what matters most and shape a safer future.

• Professional Growth: Access first-class training, coaching, and mentoring programs designed to stretch your potential and foster lifelong learning.

• Wellbeing & Rewards: Enjoy a competitive salary of circa £61,500, relocation support packages (subject to eligibility), and flexible benefits tailored to support your financial and personal wellbeing.

• Inclusive Culture: Thrive in an environment that champions diversity, sustainable working practices, and a strong sense of shared purpose within a global workforce of over 110,000 colleagues.