Principal Engineer Cyber Security

Cyber Security training courses; Frimley; Hybrid; GBP 52,000 - 62,000; Full time

Job summary

A leading cybersecurity solutions provider seeks a Principal Engineer in Cyber Security to define and implement cybersecurity requirements. The role involves in-depth cybersecurity analysis, producing security artefacts, and maintaining key documentation. Applicants should have a degree in a relevant STEM field and experience assessing risk in line with industry standards. This position also offers flexible working options, competitive benefits, and the chance to make a significant impact in cybersecurity.

Benefits

Competitive pension scheme

Employee share plans

Flexible discounted health benefits

Private health plans

Shopping discounts

Annual incentive eligibility

Qualifications

• Proven experience of assessing and managing risk in line with industry good practice.
• Significant experience with using security baselines, mitigations, and controls.
• Considerable familiarity with a life cycle phased approach.

Responsibilities

• Define and implement risk-based cybersecurity requirements.
• Conduct in-depth cybersecurity analysis and develop threat taxonomies.
• Produce and maintain key security artefacts and contribute to broader engineering documentation.

Skills

Degree in a relevant STEM subject or recognized Industry Security Qualifications (CCP, CISSP)

Experience assessing and managing risk (NIST, ISO 27001)

Familiarity with security baselines, mitigations, and controls

Life cycle phased approach experience

Education

Degree in a relevant STEM subject

Job description

Overview

Job Title: Principal Engineer - Cyber Security

Location: Frimley, Bristol, Weymouth, Portsmouth, Coventry. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role.

Salary: Up to £61,500 depending on skills and experience

Responsibilities

• Define and implement risk-based cybersecurity requirements for systems and subsystems, providing technical expertise and guidance across all aspects of cyber security and resilience
• Conduct in-depth cybersecurity analysis, including development of threat taxonomies, security architectures, security baselines, and risk mitigation strategies
• Develop and execute cybersecurity test plans and schedules, carrying out both informal and formal security testing activities
• Support engineering lifecycle reviews and design assurance processes to ensure security is embedded throughout system development
• Produce and maintain key security artefacts, including risk registers, security assurance cases, plans, and schedules, while contributing security input to broader engineering documentation

Your skills and experiences

Essential:

• Degree in a relevant STEM subject or maintaining recognised Industry Security Qualifications e.g., CCP, CISSP
• Proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001)
• Significant experience with using security baselines, mitigations and controls
• Considerable familiarity with a life cycle phased approach

Desirable:

• Experience in Product Security activities in a highly regulated environment
• Operational Technologies/ Industrial Control Systems experience

Benefits

As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive.

The Engineering Delivery team

The team designs, builds, integrates and provides through life support to all the Submarine Platforms in the Royal Naval fleet. You will ensure the submarine systems and products are developed to support the delivery of an appropriately secure and resilient product. Through application of your knowledge and experience, you shall identify, analyse, evaluate and manage information security risks associated with the products used on-board the submarine. Speaking knowledgably and credibly with customers, users and internal stakeholders you shall provide advice on the causes of the risks identified, their likelihood and potential operational impacts. We offer relocation support packages across all Submarines roles, subject to meeting eligibility criteria.

Why BAE Systems?

This is a place where you\'ll be able to make a real difference. You\'ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you\'ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.

Closing Date: 20th February 2026

We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.

#LI-AG1

#LI-Hybrid