Cyber Security Engineer

Job Title\: Cyber Security Engineer – Risk & Assurance

Location\: Christchurch - on site

Referral Bonus\: £1,000

Grade\: GG10

You’re expected to have completed 12 months in role prior to applying for an advertised vacancy and you should also discuss the internal opportunity with your line manager to ensure sustained business continuity and to further support your career development.

We know there may be exceptional individual circumstances that impact this, in the first instance please discuss this with your line manager.

If you don’t feel you can talk to your line manager, you can contact your HRBP.

PLEASE NOTE\: Should you be invited for interview; you acknowledge that the Recruitment team will contact you and your line manager regarding your application for this opportunity.

Job Description\:

Our cyber security engineers work closely with security stakeholders from both the business and the customer communities, throughout the whole project lifecycle and at all classifications.

Core Duties\:

• Help projects to understand the cyber security risk context
• Work closely with stakeholders to identify and propose architectures, develop secure designs and identify and implement security controls which provide value driven risk reduction
• Produce clear and concise technical documentation
• Occasional travel to customer sites to support meetings and investigations
• Identify cyber security risks and the commensurate controls and achieving assurance / accreditation at the highest classifications and within the UK defence domain
• Understand the current trends and developments in cyber security
• Ensure compliance with the NIST Risk Management Framework and NIST Cyber Security Framework or similar frameworks and be responsible for planning or participating in CHECK/penetration tests

Essential Skills\:

• You will have experience of MOD policy in JSP440 and knowledge of NCSC guidance
• You will have experience of working on MoD Secure by Design (SbD) projects
• You will have knowledge in one or more security processes – such as security risk assessment, risk treatment using security control baselines etc
• You will have experience in applying security architecture principles to small or large integration projects

The Cyber Security Team\:

The Cyber Security Team supports the project and complements the existing 45 strong development team that provides support to a fully integrated command and control system for the MoD. This exciting systems & software programme covers many disciplines including design, development, installation, implementation, integration, acceptance, training and logistics support – it is run solely from our Christchurch site for delivery to our customer at various MoD locations.

Why BAE Systems?

Here you’ll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work, this is a place where you can grow your career with confidence and be empowered to be your best. You’ll be recognised for your contribution and enjoy rewards tailored to what’s most important to you and your family, support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strong sense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make.

A place where everyone can thrive\:

We’re committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do.

We welcome applications from all suitably qualified people, who are BAE Systems employees and have been in their current role for 12 months or longer.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.

Closing Date\: 21st July 2026