Senior Security Consultant

Senior Consultant at Leonardo UK leads cyber and information security delivery across the engineering lifecycle for a core product. You work within a consulting team alongside engineers and domain specialists to translate requirements into actionable security plans and artefacts. You will be the subject matter expert for the product, ensuring timely, cost-effective, and quality delivery while managing risks and customer relationships. This role blends hybrid work with on-site collaboration and emphasizes agile, team-centered problem solving in a defence-focused context.

• generous leave with up to 12 flexi-days
• pension scheme with up to 15% employer contribution
• mental health support and financial advice
• access to 4,000+ online courses via Coursera and LinkedIn Learning
• bonus scheme for eligible employees
• flexible benefits up to 500 annually (private healthcare, dental, discounts)

• Support the cyber and information security delivery across the engineering lifecycle
• Translate customer requirements into security management plans, statements of work, and lifecycle activities
• Become the security subject matter expert for the delivered product
• Deliver statements of work and artefacts within time, cost, and quality constraints
• Identify, manage, and escalate technical and delivery risks and issues
• Manage customer relationships for the cyber and information security workstream (internal and external)

• Ability to work independently and make sound decisions
• Excellent written and verbal communication at all levels
• Core consulting skills: client relations, adaptability, reliability, and quality delivery
• Experience with risk and service management per customer, regulatory, and legislative expectations
• Degree and/or Master in cyber security or systems/software engineering, or relevant comparable experience
• At least one professional cyber security certification (e.g., CISSP, CISM, CASP/SecurityX, CIISec) or equivalent
• Knowledge of MOD accreditation and secure-by-design processes (ISN2023/09) and standards (NIST SP 800-30/37/53, RTCA-DO-326A/B, 355A/356A)
• Experience with Defence security standards (Defstan 05-138/139) and cyber risk assessment methods (threat modelling, vulnerability analysis)
• Ability to coordinate with product engineers, system architects, and developers to guide robust solutions
• Understanding of cryptography, key management, and COMSEC concepts (Nice to have)
• Awareness of ARP4754A/ARP4761 and their link to security (Nice to have)
• Security clearance potential (BPSS, NSV, SC/DV)

• Strong communication and presentation skills
• Client relationship building
• Adaptability to changing schedules
• Cyber security delivery across lifecycle
• Security requirements interpretation and planning
• Threat modelling and risk assessment