Senior Security Consultant

b Overview /b p In this role you will lead cyber and information security activities across the engineering lifecycle for Leonardo UK’s core products, collaborating with engineering teams and external stakeholders. You will help ensure security requirements align with customer needs and risk appetite, contributing to high-assurance solutions in a defence and aerospace context. The role combines hands-on security design with risk management and compliance work, in a hybrid, team-driven environment. You will join a supportive multi-disciplinary team focused on secure product delivery and continual improvement. /p b Pay / Benefits /b ul li company-funded benefits package /li li generous leave with up to 12 flexi-days /li li pension scheme with up to 15% employer contribution /li li mental health support and wellbeing resources /li li Coursera and LinkedIn Learning access /li li refer a friend bonus program /li /ul b Responsibilities /b ul li Deliver cyber and information security across the engineering lifecycle from requirements to in-service support /li li Collaborate with engineering teams and external stakeholders to implement security controls /li li Support MOD accreditation and secure by design processes and related lifecycle activities /li li Assess and manage risks in alignment with customer, regulatory and legislative requirements /li li Analyze design constraints and develop security designs for cyber domain /li li Conduct cyber risk assessments including threat modelling and vulnerability analysis /li li Engage in provisioning of security capabilities across proprietary/open-source software, firmware, and hardware /li li Communicate effectively with internal and external stakeholders and maintain client relations /li /ul b Key requirements /b ul li Proven delivery experience in a Cyber/Engineering role /li li Involvement in MOD accreditation and secure by design practices (ISN2023/09) /li li Experience with risk management and regulatory expectations /li li Experience across hardware, firmware, software in hybrid IT/OT environments /li li Exposure to OT and IEC62443 standards /li li Ability to operate with minimal supervision and make sound decisions /li li Strong communication and stakeholder management skills /li /ul ul li Communication (written and verbal) /li li Independence and sound decision-making /li li Adaptability and flexibility /li li Cyber security engineering across engineering lifecycle /li li Threat modelling and vulnerability analysis /li li Security by design and risk assessment methods /li /ul