Senior Cyber Security Engineer

Key areas of responsibility

Key skills, experience and behaviours

Responsibilities

• As a Senior Cyber Security Engineer you will be responsible for:
• Implementing and maintaining system security controls and operating procedures, ensuring alignment with MOD and Rowden standards.
• Supporting the delivery of cyber security assurance activities, including documentation, testing, and reporting.
• Collaborating with project teams and external partners to deliver on agreed security deliverables and schedules.
• Participating in security risk assessments, threat modelling, and vulnerability management for cloud, software, and far-edge deployments.
• Contributing to the security accreditation process, preparing evidence, managing asset registers and supporting audits as required.
• Assisting in the continuous improvement of security processes, incident response, and compliance monitoring.
• Engaging with supply chain partners to verify and assure security requirements throughout the capability lifecycle.
• Providing technical advice and hands-on support to engineering teams, acting as a security champion within agile delivery teams.
• Representing Rowden in internal and external security forums.
• As a Senior Cyber Security Engineer you will be responsible for: - Implementing and maintaining system security controls and operating procedures, ensuring alignment with MOD and Rowden standards. - Supporting the delivery of cyber security assurance activities, including documentation, testing, and reporting. - Collaborating with project teams and external partners to deliver on agreed security deliverables and schedules. - Participating in security risk assessments, threat modelling, and vulnerability management for cloud, software, and far-edge deployments. - Contributing to the security accreditation process, preparing evidence, managing asset registers and supporting audits as required. - Assisting in the continuous improvement of security processes, incident response, and compliance monitoring. - Engaging with supply chain partners to verify and assure security requirements throughout the capability lifecycle. - Providing technical advice and hands-on support to engineering teams, acting as a security champion within agile delivery teams. - Representing Rowden in internal and external security forums.

Skills

• Essential
• Proven experience in cyber security engineering, ideally within defence, government, or critical infrastructure environments.
• Strong understanding of Secure by Design, risk management, and MOD security standards.
• Hands-on experience with cloud security, software assurance, and network security controls.
• Familiarity with security accreditation processes (e.g., RMADS, JSP 440/604, NCSC guidance).
• Ability to interpret and deliver against SOWs and SORs, working collaboratively with external assurance providers.
• Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical stakeholders.
• Strong analytical, documentation, and problem-solving skills.
• Desirable
• Experience of tactical networked C4I systems, including Opnet.
• Knowledge of multi-domain systems and cross-domain solutions.
• Understanding of LOS & BLOS communication systems.
• Awareness of UK Government LETacCIS programmes and systems such as DSA, Morpheus, Trinity and Bowman.
• About you The ideal candidate will have a strong balance of technical skills and experience, and the behavioural competencies that we believe are key to success in the role are as follows:
• Extensive experience in software development environments and infrastructure delivery, with a solid engineering foundation, ideally in software engineering.
• In-depth knowledge of Secure by Design principles and their application in secure systems architecture.
• Proficiency in securing cloud infrastructure, software, far edge networking, and integrated systems.
• Strong analytical and risk management skills, with a focus on continuous security improvement.
• Ability to work within cross-functional teams to achieve secure, compliant solutions.