Principal Security Consultant

Experteer Overview In this role you lead the cyber and information security delivery for a core Leonardo product within an agile, cross-functional team. You translate customer requirements into actionable security plans and oversee artefacts across the engineering lifecycle, from requirements to in-service support. You act as a security subject matter expert, ensuring the product meets security expectations and risk appetite. The position is based in Yeovil and offers collaboration with engineers, consultants, and domain specialists on a major programme. Pay / Benefits * Lead a team to deliver cyber and information security across the engineering lifecycle * Convert customer requirements into security management plans and statements of work * Be the security subject matter expert for the product being delivered * Oversee SBOMs, artefacts, and deliverables to time, cost and quality * Identify, manage and escalate technical and delivery risks and issues * Manage internal and external customer relationships for the cyber workstream * Line manage and mentor consultants within the team Tasks * Ability to work independently and make sound decisions * Excellent written and verbal communication skills at all levels * Strong consulting skills: client relations, adaptability, reliability and delivery quality * Experience managing risks and services per customer, regulatory and legislative expectations * Degree and/or master’s in cyber security and/or systems/software engineering or relevant comparable experience * At least two recognised professional cyber security certifications such as CISSP, CISM, CASP/SecurityX and/or Chartership or comparable in security discipline (ChCSP) * Knowledge of Defence security standards and MOD accreditation processes (ISN2023/09) * Experience with standards like NIST SP 800-30, 37 & 53 and RTCA-DO-326A/B, 355A & 356A * Ability to scope and manage security verification and remediation plans * Ability to coordinate with product engineers, system architects and developers to guide robust solutions Key requirements * Generous leave with up to 12 flexi-days per year * Award-winning pension scheme with up to 15% employer contribution * Mental health support and financial advice * Bonus scheme for eligible employees * Free access to 4,000+ online courses via Coursera and LinkedIn Learning * Flexible benefits up to 500 annually (private healthcare, dental, etc.)

_ customer relationships for the cyber workstream * Line manage and mentor consultants within the team Tasks * Ability to work independently and make sound decisions * Excellent written and verbal communication skills at all levels * Strong consulting skills: client relations, adaptability, reliability and delivery quality * Experience managing risks and services per customer, regulatory and legislative expectations * Degree and/or master’s in cyber security and/or systems/software engineering or relevant comparable experience * At least two recognised professional cyber security certifications such as CISSP, CISM, CASP/SecurityX and/or Chartership or comparable in security discipline (ChCSP) * Knowledge of Defence security standards and MOD accreditation processes (ISN2023/09) * Experience with standards like NIST SP 800-30, 37 & 53 and RTCA-DO-326A/B, 355A & 356A * Ability to scope and manage security verification and remediation plans * Ability to coordinate with product engineers, a aaaC_ architects and developers to guide robust solutions Key requirements * Generous leave with up to 12 flexi-days per year * Award-winning pension scheme with up to 15% employer contribution * Mental health support and financial advice * Bonus scheme for eligible employees * Free access to 4,000+ online courses via Coursera and LinkedIn Learning * Flexible benefits up to 500 annually (private healthcare, dental, etc.)