Principal Security Engineer

Synoptix; Stoke Gifford; On-site; GBP 100,000 - 125,000; Full time

Job summary

A Cyber Security Solutions provider in the UK is seeking a Principal Security Engineer to lead cyber security work packages and ensure secure system architecture for defense and commercial clients. The ideal candidate will have extensive experience in system security engineering and will work collaboratively with multidisciplinary teams. This role offers competitive benefits including flexible working arrangements, professional development, and performance bonuses.

Benefits

Annual Company Bonus

25 Days holiday

Competitive pension contribution

Access to online Udemy training facility

Flexible working arrangements

Bike to work scheme

Electric car scheme

Private health care

Qualifications

• 5+ years of experience in system security engineering.
• Practical experience in security in software and/or system development environments.
• Effective communication skills and teamwork.

Responsibilities

• Lead Cyber Security work packages to clients.
• Risk identification and management.
• Capture, validate, and verify requirements.

Skills

Knowledge of Secure by Design principles

Experience in system security engineering

Familiarity with MOD, NCSC, and ISO standards

Competence in requirements engineering

Effective communication and report-writing skills

Ability to work independently and collaboratively

Education

CISSP, CISM, or relevant NCSC-certified qualifications

Job description

Overview

Principal Security Engineer role at Synoptix. We are expanding our Cyber Security capability by applying Systems Thinking to deliver Cyber Security Solutions to defence and commercial clients. The role supports the development, implementation, and assurance of secure system architectures and solutions within the Secure by Design capability, for both internal development projects and external client engagements. The team contributes to security requirements definition, risk assessments, technical security design, and security documentation for internal platforms and client systems. Dynamic Working: a blend of home and office-based working is encouraged.

Key Responsibilities

• Lead and deliver Cyber Security work packages to clients, applying Systems Engineering methodologies to Cyber solutions.
• Risk identification and management
• Requirements capture, validation, and verification
• Be responsible for the technical content of client deliverables, for example:
• Security Management Plans
• Security Case Report following Secure by Design through‑life principles
• Verification Plans
• Validation Test Schedules and Reporting
• Penetration Test Remedial Action Plans
• Managing risk appetite and risk analysis assessments
• Support the Sales and Business Development team in winning work through proposal generation and client meeting support
• Represent Synoptix at conferences, symposia, and trade shows
• Lead cyber security research programmes with Academia
• Represent the client and Synoptix at internal and external customer-facing security working groups
• Deliver Key Management in accordance with agreed management plans
• Assist in the further development of the Synoptix cyber security capability

Skills Required

Essential:

• Knowledge of Secure by Design principles
• Experience in system security engineering, ideally in defence, space, or critical infrastructure
• Familiarity with MOD, NCSC, and ISO standards (e.g. ISO 27001/2, NIST 800-series, JSP 604)
• Competence in requirements engineering and systems thinking
• Practical experience with security in software and/or system development environments
• Effective communication and report-writing skills
• Ability to work independently as well as collaboratively within multidisciplinary teams

Desirable:

• CISSP, CISM, or relevant NCSC-certified qualifications
• Experience with model-based systems engineering (MBSE)
• Experience supporting formal security assurance processes
• Understanding of space system architectures or satellite communications
• DevSecOps awareness or experience with security automation

Benefits

• Annual Company Bonus
• 25 Days holiday not including bank holidays with the option to buy/sell up to 5 days
• Competitive pension contribution
• Continuous professional development including incentives
• Access to online Udemy training facility
• Flexible working arrangements
• Bike to work scheme
• Electric car scheme
• Private health care
• Job well done scheme

Please note that due to the nature of our projects we can only accept Sole UK National candidates who will need to be eligible to obtain UK Security Clearance.

Data and Privacy

By applying for this position, you are confirming that you consent to the retention of your personal data. Your data is held securely on our own premises and under the terms of the Data Protection Act (2018). It will be treated as confidential, and will not be transferred to any third party, or to any other jurisdiction without your consent. We will not hold any data for any longer than is necessary for us to fulfil our obligations and will remove any data at your written request.