Senior Cyber Security Engineer

Rowden; West of England; Hybrid; GBP 75,000 - 90,000; Full time

Benefits offered by this job

Flexible working

Disability Confident Committed

Job summary

Rowden, headquartered in Bristol, seeks a Senior Cyber Security Engineer to design, implement, and maintain secure systems within agile delivery teams. You will work with the Technical Security Lead and external partners to define security requirements aligned with business needs.

This role emphasizes secure design, risk management, and hands-on security controls across cloud, software, and edge deployments.

Qualifications

• Proven experience in cyber security engineering, ideally in defence/government/critical infrastructure.
• Strong understanding of Secure by Design, risk management, and MOD security standards.
• Hands-on experience with cloud security, software assurance, and network security controls.
• Familiarity with security accreditation processes (e.g., RMADS, JSP 440/604, NCSC guidance).
• Ability to interpret and deliver against SOWs/SORs with external assurance providers.
• Excellent communication skills for technical and non-technical stakeholders.
• Strong analytical, documentation, and problem-solving skills.

Responsibilities

• Implement and maintain system security controls and operating procedures aligned with MOD and Rowden standards.
• Support cyber security assurance activities: documentation, testing, and reporting.
• Collaborate with project teams and external partners to deliver security deliverables and schedules.
• Contribute to security risk assessments, threat modelling, and vulnerability management for cloud, software, and far-edge deployments.
• Assist in security accreditation processes and audits as required.
• Drive continuous improvement of security processes, incident response, and compliance monitoring.
• Engage with supply chain partners to verify security requirements throughout the lifecycle.
• Provide technical advice and hands-on security support to agile delivery teams.

Skills

Cyber security engineering

Secure by design

Risk management

MOD security standards

Cloud security

Security controls

Security governance

Tools

RMADS

JSP 440/604

NCSC guidance

Job description

Senior Cyber Security Engineer

Department: Engineering

Employment Type: Permanent - Full Time

Location: Bristol, UK

Reporting To: Nikki Mason

Compensation: £75,000 - £90,000 / year

Description

We’re building the UK's next generation engineering powerhouse, providing critical technology that strengthens national security and resilience.

We specialise in turning advances in sensing, AI, and communications into operational capability for the edge, where connectivity may be degraded or denied. Our work focuses on accelerating the deployment of technology, improving decision-making for frontline teams, and protecting people and critical assets in demanding environments.

Headquartered in Bristol, Rowden employs around 200 people and operates over 20,000 square feet of engineering and manufacturing facilities. We have a growing international footprint and are one of Europe’s fastest-growing engineering businesses.

About the role

As a Senior Cyber Security Engineer at Rowden, you’ll collaborate closely with the wider engineering team to design, implement, and maintain secure systems and infrastructure. You will be embedded within a delivery team(s) and work closely with the Technical Security Lead and external partners to assess risks, define security requirements, and ensure technical solutions are pragmatic, proportionate, and aligned with both business and customer needs.

Your focus will span both strategic and tactical aspects of security engineering. At a strategic level, you’ll contribute to high‑level design and planning across areas such as secure network architecture, identity management, and cloud security. At a tactical level, you’ll be hands‑on with implementation, working directly with systems, tools, and configurations to apply and validate security controls, troubleshoot issues, and support secure delivery. You’ll collaborate with the wider engineering community to ensure agreed controls are effectively embedded, and that all systems are resilient, compliant, and aligned with current security standards.

The ideal candidate will bring knowledge of threat modelling, secure system design, and compliance frameworks including NIST, ISO 27001, and DefStan 05-139. We understand that even experienced professionals may not have expertise across every aspect of the role. If you bring relevant experience, sound technical judgement, and a passion for delivering secure solutions.

This role requires a minimum of 3 days per week on‑site at our Bristol HQ with occasional travel to customer sites.

Candidates must be eligible for SC clearance. Due to the nature of this role and the sensitivity of the work involved, applications are restricted to sole UK nationals.

More information about security clearance is available here: https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels

Key areas of responsibility

As a Senior Cyber Security Engineer you will be responsible for:

• Implementing and maintaining system security controls and operating procedures, ensuring alignment with MOD and Rowden standards.
• Supporting the delivery of cyber security assurance activities, including documentation, testing, and reporting.
• Collaborating with project teams and external partners to deliver on agreed security deliverables and schedules.
• Participating in security risk assessments, threat modelling, and vulnerability management for cloud, software, and far‑edge deployments.
• Contributing to the security accreditation process, preparing evidence, managing asset registers and supporting audits as required.
• Assisting in the continuous improvement of security processes, incident response, and compliance monitoring.
• Engaging with supply chain partners to verify and assure security requirements throughout the capability lifecycle.
• Providing technical advice and hands‑on support to engineering teams, acting as a security champion within agile delivery teams.
• Representing Rowden in internal and external security forums.

Key skills, experience and behaviours

Essential

• Proven experience in cyber security engineering, ideally within defence, government, or critical infrastructure environments.
• Strong understanding of Secure by Design, risk management, and MOD security standards.
• Hands‑on experience with cloud security, software assurance, and network security controls.
• Familiarity with security accreditation processes (e.g., RMADS, JSP 440/604, NCSC guidance).
• Ability to interpret and deliver against SOWs and SORs, working collaboratively with external assurance providers.
• Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical stakeholders.
• Strong analytical, documentation, and problem‑solving skills.

Desirable

• Experience of tactical networked C4I systems, including Opnet.
• Knowledge of multi‑domain systems and cross‑domain solutions.
• Understanding of LOS & BLOS communication systems.
• Awareness of UK Government LETacCIS programmes and systems such as DSA, Morpheus, Trinity and Bowman.

About you

• Extensive experience in software development environments and infrastructure delivery, with a solid engineering foundation, ideally in software engineering.
• In‑depth knowledge of Secure by Design principles and their application in secure systems architecture.
• Proficiency in securing cloud infrastructure, software, far edge networking, and integrated systems.
• Strong analytical and risk management skills, with a focus on continuous security improvement.
• Ability to work within cross‑functional teams to achieve secure, compliant solutions.

Working at Rowden

We are committed to building a flexible, inclusive, and enabling company. Our aim is to create a diverse team of talented people with unique skills, experience, and backgrounds.

We also recognise the importance of flexible working and support this wherever we can. We typically operate a flexible, hybrid‑working model, with an average 3 days in the office each week (dependent on the role). We welcome the opportunity to discuss flexibility, part‑time working requirements and/or workplace adjustments with all our applicants.

Rowden is a Disability Confident Committed company, and we actively encourage people with disabilities and health conditions to apply for our roles. Please let us know your requirements early on so that we can make sure you have everything you need up front to help make the recruitment process and experience as easy as possible.

Finally, if you feel that you don’t meet all the criteria included above but have transferable skills and relevant experience, we’d still love to hear from you!