Lead Product Cyber Security Engineer in Bicester

Evolito's mission is to accelerate the adoption of electric propulsion in aerospace applications in support of a net‑zero world. We will help to revolutionise personal mobility and transform our towns and cities with clean, noise‑free air transportation. Evolito develops and manufactures class‑leading, lightweight, high‑power, and high‑torque‑density electric propulsion systems for a range of aerospace markets, including EVTOL, Unmanned Aerial Vehicles and General Aviation. As well as ultra‑high performance, low‑weight electric motors and controllers, Evolito specialises in high integrity, bespoke battery systems for the aerospace and defence markets. The team is scaling rapidly and has ambitious growth plans over the next twelve to eighteen months.

As part of our high‑growth phase, we are looking for a Lead Product Cyber Security Engineer to drive the analysis and implementation of aviation cyber‑security across our electric propulsion and generation systems. You will lead the delivery of secure‑by‑design solutions, aligned to RTCA DO‑326A/B and DO‑356A, producing key cyber‑security artefacts including security plans, system scoping, security architecture, risk assessments and verification activities. You will also play a critical role in means of compliance analysis, supporting certification activities, and helping deliver type‑certified aerospace products. Beyond individual projects, you will establish and continuously improve a robust cyber‑security framework that meets stringent regulatory and security requirements throughout the entire product lifecycle.

Key responsibilities

• Cybersecurity (system security) governance leadership: establish and maintain the organisation's aviation cybersecurity framework aligned with DO-326B and associated standards
• Security risk assessment: oversee Security Risk Assessments (SRAs), Threat Analyses (TAs), and Security Development Assurance Levels (SDALs)
• Secure development lifecycle management: integrate cybersecurity activities into system engineering, software, and hardware development processes
• Compliance and certification support: interface with regulatory authorities, certification bodies, and OEMs to demonstrate compliance with DO-326B/ED-202B
• Cross‑functional collaboration: work closely with Design Organisation Engineering teams, Supply Chain and Quality Teams to ensure cohesive security‑by‑design
• Incident response coordination: develop vulnerability management processes and support Evolito's Emergency Response Plan
• Supplier and supply‑chain oversight: ensure cybersecurity requirements are flowed down and verified across suppliers and partners
• Documentation and audit readiness: produce and maintain cybersecurity plans, reports, and evidence packages for audits and certification
• Training and awareness: build cybersecurity culture through targeted training for engineering and operational teams

Qualifications, skills and experience required

• Degree in Engineering, Software, Cyber Security or related disciplines
• Deep knowledge of DO 326A/B, DO 356A, DO 355, ED 202B and related aviation cybersecurity standards
• Experience working with safety‑critical systems such as avionics, embedded systems, or aircraft platforms
• Strong understanding of threat modelling, risk assessment, and security architecture principles
• Familiarity with certification processes for CAA, EASA, FAA, or other aviation authorities
• Ability to lead cross disciplinary teams in complex engineering environments
• Excellent communication and documentation skills suitable for audits, regulators, and executive stakeholders
• Strong attention to detail
• A 'self‑starter' attitude with energy and enthusiasm, with the ability to thrive in a small business environment
• Ability to work under pressure while managing conflicting demands against tight deadlines
• A flexible approach to work