> Markdown version of [/jobs/ext/2930592-principal-engineer-product-security](https://www.wearedevelopers.com/jobs/ext/2930592-principal-engineer-product-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Engineer - Product Security

- **Company:** Morson Group
- **Location:** Barrow-in-Furness, UK
- **Salary:** £177,632.0
- **Contract:** Contract
- **Skills:** Systems Engineering, Cyber Security, Javaserver Pages, Software Security
- **Published:** September 16, 2026
- **Apply:** https://www.totaljobs.com/job/principal-engineer/morson-edge-job107986409

## About the Role

We are looking for someone with strong experience in Product Security, Systems Security or Information Assurance within complex engineered systems, rather than traditional enterprise IT security., A relevant STEM, Cyber Security or Information Security qualification is desirable, alongside NCSC CCP SIRA or an equivalent professional security qualification.

## Description

We are recruiting for an experienced Principal Product Security Engineer to support a major UK defence engineering programme.

You will take a senior technical role within the Product Security team, providing security assurance across the engineering lifecycle of a complex, safety-critical system. The position involves Security Cases, information risk, security requirements and design assurance, working closely with engineering teams, programme stakeholders and external suppliers.

This is a Product / Systems Security engineering role supporting a complex defence platform - it is not an enterprise IT, SOC or corporate cyber security position., * Lead the development and delivery of Interim and Final Security Cases

 * Identify, assess and manage Product Security and Information Assurance risks
 * Maintain security risk evidence and contribute to programme-level risk registers
 * Identify security requirement gaps and support appropriate risk treatment
 * Provide Product Security input throughout the systems engineering lifecycle
 * Support design reviews, engineering maturity gates and technical assurance activities
 * Review and assure security evidence and deliverables produced by suppliers
 * Manage security-related technical queries and formal communications
 * Support security verification and testing activities
 * Work across Product Security, engineering and programme teams to ensure system-level security aligns with wider platform requirements
 * Provide technical leadership, guidance and mentoring to other engineers, Relevant experience is likely to include:
 * Security Case development and/or ownership
 * Security risk assessment, risk registers and risk management
 * Secure by Design
 * Security requirements capture, validation and gap analysis
 * Systems engineering lifecycle and design assurance
 * Supplier security assurance and technical reviews
 * Security verification/testing scope and assurance evidence
 * Defence, maritime, aerospace, nuclear or another highly regulated engineering environment
 * Experience applying relevant UK Government / defence security standards and frameworks, for example JSP 440, JSP 604, HMG IS1 & IS2, RMADS, Defence Standards (Def Stan), ISO 27000 and/or IEC 62443
 * Senior stakeholder engagement and the ability to operate as a Product Security SME


## Related Videos

- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Climate vs. Weather: How Do We Sustainably Make Software More Secure?](https://www.wearedevelopers.com/videos/357-climate-vs-weather-how-do-we-sustainably-make-software-more-secure)
- [Open Source Secure Software Supply Chain in action](https://www.wearedevelopers.com/videos/1038-open-source-secure-software-supply-chain-in-action)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Is Software Engineering Hard?](https://www.wearedevelopers.com/magazine/448-is-software-engineering-hard)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)