Principal Security Consultant

Salary: £90,000 - 90,000 per year

Requirements:

• We need a proven and experienced Principal Consultant with a passion for cyber and information security.
• We need the ability to work independently without supervision and make sound decisions based on the facts available at the time.
• We need excellent written and verbal communication skills at all levels, both internally and with customers.
• We need core consulting skills, including building client relations, adaptability to changing schedules, reliability and quality of task delivery, flexibility in working hours and locations, and a team-player mindset.
• We need experience managing risks and services in accordance with customer, regulatory, and legislative expectations.
• We need a degree and/or masters degree in cyber security and/or a systems or software engineering discipline, or relevant comparable experience.
• We need at least two recognised professional cyber security certifications such as CISSP, CISM, CASP/SecurityX, and/or Chartership or comparable security-related experience.
• We need knowledge and demonstratable experience applying Defence security standards such as Def Stan 05-138 and Def Stan 05-139.
• We need knowledge and demonstratable experience of MOD accreditation and secure by design processes, including ISN2023/09 and associated policies, practices, and deliverables across the lifecycle.
• We need knowledge and demonstratable experience applying standards including NIST Special Publications such as SP 800-30, 37, and 53, and/or RTCA-DO-326A/B, 355A, and 356A.
• We need experience that extends beyond traditional enterprise IT into proprietary and open-source software, firmware, and electronic hardware.
• We need experience developing, evaluating, and analysing design constraints, and detailed system and security designs as they pertain to the cyber domain.
• We need experience decomposing cyber and security requirements down to the system control level.
• We need experience conducting cyber and information security risk assessments, including threat modelling, vulnerability analysis, and analysis of mitigations, with technical understanding.
• We need experience scoping and managing security verification and validation activities and remedial action plans.
• We need experience coordinating with product engineers, system architects, and developers to provide oversight and guidance in the development of robust solutions, including advising on suitable product or platform lockdown and configurations.
• It would be beneficial to have an excellent understanding of the engineering lifecycle and key gate review activities.
• It would be beneficial to have knowledge of current crypto technologies, key management systems, practical COMSEC implementations, and MOD/NCSC standards.
• It would be beneficial to have knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security.
• This role is based full-time at our Yeovil site.
• This role is subject to pre-employment screening in line with BPSS, and additional National Security Vetting may apply, including eligibility for SC or DV.

Responsibilities:

• We contribute to or lead a team to meet all aspects of cyber and information security delivery across an engineering lifecycle.
• We interpret customer requirements into actionable security management plans, statements of work, and activities to be delivered across the lifecycle.
• We become a lead security subject matter expert for the product being delivered.
• We oversee and deliver associated statements of work and artefacts to time, cost, and quality constraints.
• We identify, manage, and escalate technical and delivery risks and issues.
• We manage customer relationships for the cyber and information security workstream, both internal and external.
• We line manage and mentor consultants within our team as required.
• We solve customer problems in an agile, innovative, and team-centric manner.
• We ensure the product and associated deliverables are as secure as reasonably practicable and in accordance with customer requirements and risk appetite.
• We support delivery as part of a larger consulting team, engineers, and product domain specialists.

Technologies:

• Firmware
• Hardware
• Support
• Security

More:

We are Leonardo UK, a global leader in Aerospace, Defence, and Security, headquartered in Italy with over 53,000 people worldwide including 8,500 across 9 sites in the UK. We are partnering directly with hackajob to hire a Principal Consultant for our Cyber & Security Solutions Division on a permanent hybrid basis, working full-time from our Yeovil site. We offer a comprehensive, company-funded benefits package, including generous leave with up to 12 additional flexi-days each year, an award-winning pension scheme with up to 15% employer contribution, free mental health and financial advice support, inclusion and diversity networks, bonus eligibility for management level and below, access to 4,000 online courses through Coursera and LinkedIn Learning, a referral reward programme, up to £500 annually in flexible benefits, and flexible hours with hybrid working options. We are committed to building an inclusive, accessible, and welcoming workplace where diverse perspectives help drive innovation, improve outcomes, and enhance global safety.

last updated 35 week of 2026