BAE Systems
Principal Product Security Practitioner

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Principal Product Security Practitioner
Location: Barrow-In-Furness
Salary: Competitive
Who we are:
Join BAE Systems and you’ll be part of something bigger. As a valued member of our global colleague network, you’ll bring your unique skills and perspectives to help pioneer progress and protect what matters most. You’ll be trusted to play your part in delivering advanced, technology-led defence, aerospace and security solutions, shaping a safer future for all of us.
From the depths of the ocean to the far reaches of space, there’s no limit to where a career at BAE Systems could take you.
What you will be doing:
Defence platforms operate in the world's most hostile, high consequence environments. Their survival depends on uncompromising cyber resilience across embedded hardware, tactical networks (IT) and mission critical systems (OT). The successful candidate will work as a valued member of an engineering delivery team, applying their subject matter expertise to focus on ensuring the next generation of submarine systems are developed, built and delivered to be appropriately secure and resilient within their operational environment.
Core duties:
- Gain sufficient understanding of a system, its concept of use and architectures to provide an accurate assessment of Product Security in terms of possible threats, potential avenues of attack and to advise on the application of secure development practices
- Your role will include the identification, analysis, and evaluation of security risks throughout the product lifecycle.
- Managing the Security interface between IT & OT Product families, to ensure cyber resilience of the platform.
- Represent Product Security at Design Reviews, presenting risks and mitigation options to influence stakeholders to achieve agreement and buy-in.
- Developing and maintaining security architecture including requirement derivation and definition.
- Produce and support key Product Security deliverables, including Security Strategies, Threat assessments and Security Case artefact.
- Collaborate with other engineering disciplines such as Safety Engineering to ensure and assure that the cyber interface is understood and risk aware.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Skills:
- Degree or equivalent experience in a relevant STEM, Information Security, Cyber Security or related discipline.
- Experience of Product Security, Information Assurance or Cyber Security within Critical National Infrastructures such as Defence/Financial services.
- Recognised Industry Security Qualifications for example CCP, CISSP, CISM or similar (or able to achieve).
- Able to support and influence senior stakeholders by bridging technical engineering and cyber risk to support product outcomes and decisions.
The Product Security Team:
As a member of the Product Security Team, you will be responsible for managing product security and information risk across the lifecycle of BAE Systems' complex products and systems. You will provide specialist security expertise to engineering and project teams, ensuring that security risks are identified, assessed and appropriately managed from system design through delivery, operation and through-life support. We offer relocation support packages across all Submarines roles, subject to meeting eligibility criteria.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
A place where everyone can thrive:
We’re committed to building an inclusive workplace where everyone feels valued and supported. We welcome applications from all suitably qualified people and encourage discussion of reasonable adjustments where needed.
Please be aware that many roles at BAE Systems are subject to security and export control restrictions. Applicants must meet Baseline Personnel Security Standard, and many roles require higher levels of National Security Vetting, including 5–10 years continuous UK residency depending on the role.
Why BAE Systems?
Here you’ll build a career with purpose and limitless possibilities. Lifelong learning, meaningful work, and a supportive culture enable you to grow with confidence. You’ll be recognised for your contribution and supported with rewards that matter most to you.
Closing Date: 15th October 2026
We reserve the right to close this vacancy early if we receive sufficient applications. If you are interested, please apply as early as possible.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London