Principal Product Security Engineer
About this role
Job Advertisement: Principal Product Security Engineer
Agency: Supportive Bridge Staffing Agency
Client: BAE Systems
Position: Principal Product Security Engineer
Location: Portsmouth Broad Oak (Hybrid – with occasional travel to other BAE Systems sites)
Salary: Up to £64,000 (Dependent on skills and experience)
Closing Date: 29th September 2026
About the Opportunity
Supportive Bridge Staffing Agency is thrilled to partner with BAE Systems to source an experienced Principal Product Security Engineer for their central Product Security capability team in Portsmouth.
Join a global leader in advanced defense, aerospace, and security solutions. At BAE Systems, you will lead cutting-edge Secure by Design initiatives, protecting what matters most and shaping a safer, technology-led future.
Role Overview
As a Principal Product Security Engineer, you will drive the application of information assurance, cyber security, and physical security principles throughout the entire product engineering lifecycle. Collaborating closely with System Design Authorities and development teams, you will embed security requirements from conception through to in-service support, conducting threat modeling, risk assessments, and vulnerability analyses to mitigate risks and secure product acceptance.
Core Duties
Partner with design engineering teams to integrate robust security considerations and controls prior to production, testing, and acceptance.
Represent projects at Security Working Groups, delivering regular progress updates regarding Secure by Design and security risk profiles.
Undertake functional design and provide qualification evidence for acceptance, legislative compliance, and product fitness for purpose.
Collate and demonstrate the technical maturity of product security aspects during formal engineering design reviews.
Essential Skills & Requirements
Certifications: Certified to CISSP, CISM, or an equivalent recognized standard.
Standards & Frameworks: In-depth knowledge of security standards such as the NIST series, ISO 27000 series, and relevant Defence Standards.
Analysis Techniques: Proven expertise in security analysis methods, including threat modeling, risk assessment, encryption, and penetration testing.
Product Security Assurance: Substantial experience in a product development environment utilizing Ministry of Defence processes, Secure by Design principles, and security case management (Security Management Plans, Impact Assessments).
Security Clearance: Must achieve a minimum of Baseline Personnel Security Standard (BPSS), with potential requirements for higher National Security Vetting.