Senior Cyber Security Engineer

Rowden; Filton; Hybrid; GBP 95,000 - 120,000; Full time

Job summary

Rowden is seeking a Senior Cyber Security Engineer to design, implement and maintain secure systems within delivery teams at our Bristol HQ. You’ll assess risks, define security requirements, and ensure solutions meet business and customer needs.

The role combines strategic design with hands-on implementation, including cloud security, identity management, and network controls, with security accreditation and compliance focus. This is a hybrid role with on-site work and some travel.

Qualifications

• Proven experience in cyber security engineering, preferably in defence or critical infrastructure.
• Strong Secure by Design, risk management, and MOD security standards.
• Hands-on with cloud security, software assurance, and network security controls.
• Familiarity with accreditation processes (RMADS, JSP 440/604, NCSC).

Responsibilities

• Implement and maintain system security controls and procedures.
• Support cyber security assurance activities: documentation, testing, reporting.
• Collaborate with project teams and partners on security deliverables.
• Conduct security risk assessments, threat modelling, and vulnerability management.
• Assist in security accreditation: evidence, asset registers, audits.
• Improve security processes, incident response, and monitoring.
• Engage with supply chain partners on security requirements.
• Provide security guidance within agile delivery teams.

Skills

Cyber security engineering

Secure by Design

Cloud security

Network security

Risk management

Documentation

Communication

Tools

RMADS

JSP 440/604

NCSC guidance

Job description

We're building the UK's next generation engineering powerhouse, providing critical technology that strengthens national security and resilience.

We specialise in turning advances in sensing, AI, and communications into operational capability for the edge, where connectivity may be degraded or denied. Our work focuses on accelerating the deployment of technology, improving decision-making for frontline teams, and protecting people and critical assets in demanding environments.

Headquartered in Bristol, Rowden employs around 200 people and operates over 20,000 square feet of engineering and manufacturing facilities. We have a growing international footprint and are one of Europe’s fastest-growing engineering businesses.

About The Role

As a Senior Cyber Security Engineer at Rowden, you'll collaborate closely with the wider engineering team to design, implement, and maintain secure systems and infrastructure. You will be embedded within a delivery team(s) and work closely with the Technical Security Lead and external partners to assess risks, define security requirements, and ensure technical solutions are pragmatic, proportionate, and aligned with both business and customer needs.

Your focus will span both strategic and tactical aspects of security engineering. At a strategic level, you'll contribute to high-level design and planning across areas such as secure network architecture, identity management, and cloud security. At a tactical level, you'll be hands-on with implementation, working directly with systems, tools, and configurations to apply and validate security controls, troubleshoot issues, and support secure delivery. You'll collaborate with the wider engineering community to ensure agreed controls are effectively embedded, and that all systems are resilient, compliant, and aligned with current security standards.

The ideal candidate will bring knowledge of threat modelling, secure system design, and compliance frameworks including NIST, ISO 27001, and DefStan 05-139. We understand that even experienced professionals may not have expertise across every aspect of the role. If you bring relevant experience, sound technical judgement, and a passion for delivering secure solutions, we encourage you to apply.

This role requires a minimum of 3 days per week on-site at our Bristol HQ with occasional travel to customer sites.

Candidates must be eligible for SC clearance. Due to the nature of this role and the sensitivity of the work involved, applications are restricted to sole UK nationals.

More information about security clearance is available here: https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels

Key areas of responsibility

• Implementing and maintaining system security controls and operating procedures, ensuring alignment with MOD and Rowden standards.
• Supporting the delivery of cyber security assurance activities, including documentation, testing, and reporting.
• Collaborating with project teams and external partners to deliver on agreed security deliverables and schedules.
• Participating in security risk assessments, threat modelling, and vulnerability management for cloud, software, and far-edge deployments.
• Contributing to the security accreditation process, preparing evidence, managing asset registers and supporting audits as required.
• Assisting in the continuous improvement of security processes, incident response, and compliance monitoring.
• Engaging with supply chain partners to verify and assure security requirements throughout the capability lifecycle.
• Providing technical advice and hands-on support to engineering teams, acting as a security champion within agile delivery teams.
• Representing Rowden in internal and external security forums.

Essential

• Proven experience in cyber security engineering, ideally within defence, government, or critical infrastructure environments.
• Strong understanding of Secure by Design, risk management, and MOD security standards.
• Hands-on experience with cloud security, software assurance, and network security controls.
• Familiarity with security accreditation processes (e.g., RMADS, JSP 440/604, NCSC guidance).
• Ability to interpret and deliver against SOWs and SORs, working collaboratively with external assurance providers.
• Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical stakeholders.
• Strong analytical, documentation, and problem-solving skills.

Desirable

• Experience of tactical networked C4I systems, including Opnet.
• Knowledge of multi-domain systems and cross-domain solutions.
• Understanding of LOS & BLOS communication systems.
• Awareness of UK Government LETacCIS programmes and systems such as DSA, Morpheus, Trinity and Bowman.

About you

Skills

• Extensive experience in software development environments and infrastructure delivery, with a solid engineering foundation, ideally in software engineering.
• In-depth knowledge of Secure by Design principles and their application in secure systems architecture.
• Proficiency in securing cloud infrastructure, software, far edge networking, and integrated systems.
• Strong analytical and risk management skills, with a focus on continuous security improvement.
• Ability to work within cross-functional teams to achieve secure, compliant solutions.

Working at Rowden

We are committed to building a flexible, inclusive, and enabling company. Our aim is to create a diverse team of talented people with unique skills, experience, and backgrounds, so please apply and come as you are! We also recognise the importance of flexible working and support this wherever we can. We typically operate a flexible, hybrid-working model, with an average 3 days in the office each week (dependent on the role). We welcome the opportunity to discuss flexibility, part-time working requirements and/or workplace adjustments with all our applicants. Rowden is a Disability Confident Committed company, and we actively encourage people with disabilities and health conditions to apply for our roles. Please let us know your requirements early on so that we can make sure you have everything you need up front to help make the recruitment process and experience as easy as possible. Finally, if you feel that you don't meet all the criteria included above but have transferable skills and relevant experience, we'd still love to hear from you!