Principal Engineer – Cyber Security

hackajob; Camberley; Hybrid; GBP 55,350 - 67,650; Full time

Benefits offered by this job

Competitive pension scheme

Employee share plans

Flexible discounted health benefits

Green car scheme

Private health plans

Shopping discounts

Annual incentive

Job summary

A prominent tech recruitment firm in the UK is seeking a Principal Engineer – Cyber Security, responsible for defining and implementing cybersecurity requirements across various systems. The candidate should have a degree in a relevant STEM field and significant experience in risk management. This role offers a competitive salary of up to £61,500 and hybrid working arrangements. Applicants will also benefit from an extensive range of flexible health and lifestyle benefits.

Qualifications

• Degree in a relevant STEM subject or recognised industry security qualifications such as CCP, CISSP.
• Proven experience assessing and managing risk in line with industry good practice (NIST, ISO 27001).
• Significant experience with using security baselines, mitigations and controls.
• Considerable familiarity with a life-cycle phased approach.

Responsibilities

• Define and implement risk‑based cybersecurity requirements for systems.
• Conduct in‑depth cybersecurity analysis, including development of threat taxonomies.
• Develop and execute cybersecurity test plans.
• Support engineering lifecycle reviews and design assurance processes.
• Produce and maintain key security artefacts, including risk registers.

Job description

Principal Engineer – Cyber Security

Hackajob is collaborating with BAE Critical Skills to connect with exceptional tech professionals for this role.

Location

Frimley, Bristol, Weymouth, Portsmouth, Coventry – hybrid and flexible arrangements available.

Salary

Up to £61,500 depending on skills and experience.

What You’ll Be Doing

• Define and implement risk‑based cybersecurity requirements for systems and subsystems, providing technical expertise and guidance across all aspects of cyber security and resilience.
• Conduct in‑depth cybersecurity analysis, including development of threat taxonomies, security architectures, security baselines, and risk mitigation strategies.
• Develop and execute cybersecurity test plans and schedules, carrying out both informal and formal security testing activities.
• Support engineering lifecycle reviews and design assurance processes to ensure security is embedded throughout system development.
• Produce and maintain key security artefacts, including risk registers, security assurance cases, plans, and schedules, while contributing security input to broader engineering documentation.

Essential

• Degree in a relevant STEM subject or recognised industry security qualifications such as CCP, CISSP.
• Proven experience assessing and managing risk in line with industry good practice (NIST, ISO 27001).
• Significant experience with using security baselines, mitigations and controls.
• Considerable familiarity with a life‑cycle phased approach.

Desirable

• Experience in Product Security activities in a highly regulated environment.
• Operational Technologies/Industrial Control Systems experience.

Benefits

Competitive pension scheme, employee share plans, extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts. Eligible for an annual incentive.

The Engineering Delivery Team

The team designs, builds, integrates and supports all Submarine Platforms in the Royal Naval fleet. You will ensure submarine systems and products are secure and resilient. You will identify, analyse, evaluate and manage information security risks associated with the products on board. You will provide advice to customers, users and stakeholders, and we offer relocation support across all submarine roles subject to eligibility.

Why BAE Systems

Inclusive culture that values diversity, rewards integrity and merit, and empowers you to fulfil your potential. We welcome people from all backgrounds and offer reasonable adjustments for disability or health conditions.

Security & Vetting

Roles may be subject to security and export control restrictions. Applicants must achieve Baseline Personnel Security Standard and may require higher levels of National Security Vetting, typically with 5‑10 years continuous UK residency depending on the role.

Closing Date

4th November 2025. The vacancy may close early if we receive sufficient applications.