Senior Cyber Security Engineer – Defence/Critical Infra

Rowden; Filton; Hybrid; GBP 95,000 - 120,000; Full time

Job summary

Rowden is seeking a Senior Cyber Security Engineer to design, implement and maintain secure systems within delivery teams at our Bristol HQ. You’ll assess risks, define security requirements, and ensure solutions meet business and customer needs.

The role combines strategic design with hands-on implementation, including cloud security, identity management, and network controls, with security accreditation and compliance focus. This is a hybrid role with on-site work and some travel.

Qualifications

• Proven experience in cyber security engineering, preferably in defence or critical infrastructure.
• Strong Secure by Design, risk management, and MOD security standards.
• Hands-on with cloud security, software assurance, and network security controls.
• Familiarity with accreditation processes (RMADS, JSP 440/604, NCSC).

Responsibilities

• Implement and maintain system security controls and procedures.
• Support cyber security assurance activities: documentation, testing, reporting.
• Collaborate with project teams and partners on security deliverables.
• Conduct security risk assessments, threat modelling, and vulnerability management.
• Assist in security accreditation: evidence, asset registers, audits.
• Improve security processes, incident response, and monitoring.
• Engage with supply chain partners on security requirements.
• Provide security guidance within agile delivery teams.

Skills

Cyber security engineering

Secure by Design

Cloud security

Network security

Risk management

Documentation

Communication

Tools

RMADS

JSP 440/604

NCSC guidance

Job description

Rowden is seeking a Senior Cyber Security Engineer to design, implement and maintain secure systems within delivery teams at our Bristol HQ. You’ll assess risks, define security requirements, and ensure solutions meet business and customer needs.

The role combines strategic design with hands-on implementation, including cloud security, identity management, and network controls, with security accreditation and compliance focus. This is a hybrid role with on-site work and some travel.