Security Engineer – Satcom
Location: Redhill, Surrey
Type: Full-Time, Permanent
Industry: Satellite Communications / Secure Connectivity
Working Pattern: Full-time, Permanent
Reporting To: Head of Network Infrastructure / Security Operations
Hybrid Framework: First 6 months fully onsite in Redhill, then up to 6 remote working days per month.
The Opportunity: This role suits a technically strong Security Engineer with a deep background in data communications, IP networking, network protection, and satellite-terrestrial integration.
The successful candidate will act as a core guardian of the organisation's secure connectivity networks. You will support internal teams, security operations, and defence/enterprise clients across multiple geographies.
Key Responsibilities:
Network Security & Infrastructure Protection:
- Act as the technical security champion for satellite communications, airtime, and secure infrastructure.
- Configure, deploy, and maintain enterprise-grade security appliances, firewalls (e.g., Fortinet, Cisco), secure gateways, and VPN tunnels over satellite links.
- Understand how supplier security technologies integrate into the wider network infrastructure and global corporate services.
Lifecycle, Vulnerability & Incident Management:
- Support the full security lifecycle of infrastructure from deployment through to active monitoring, software updates, and hardening.
- Monitor global network traffic for anomalies, manage internal security incidents, and implement threat mitigation strategies.
- Work with Systems Engineering teams on security product evaluations, penetration testing feedback, and secure infrastructure rollouts.
- Capture technical requirements for internal and external secure software or network development projects.
- Manage in-house security-related projects while balancing priorities during high-demand or critical incident periods.
Technical Documentation & Compliance:
- Translate complex security features and vulnerability assessments into clear, technical compliance reports and remediation guides.
- Keep technical teams and wider business functions updated on current threat landscapes, security capabilities, and system updates.
- Ensure network infrastructure aligns with maritime security frameworks, UK government policies, and defence-level operational standards.
- Produce internal technical documentation, secure configuration guides, FAQs, and incident response process layouts.
Support & Internal Training:
- Provide tier-3 technical security support in high-level engineering meetings, troubleshooting calls, and customer architecture reviews.
- Deliver internal security awareness training and technical handovers for network engineers, support staff, and back-office teams.
- Coordinate Technical Security Bulletin distribution alongside local management to address emergent CVEs or critical software patches.
- Carry out regular security audits and product vulnerability comparisons.
What We're Looking For:
Essential Experience:
- Proven Security Engineering experience is strictly essential.
- Deep knowledge of IP networking, routing protocols (BGP, OSPF), and data communications.
- Experience within satellite communications, telecoms, network security, or a highly secure data environment.
- Experience managing security vendors and assessing hardware/software protection capabilities.
- Experience producing technical security documentation, architecture diagrams, or network policies.
- Incident response experience with a methodical approach to tracking and eliminating vulnerabilities.
Core Skills & Attributes:
- Strong technical certifications are expected (e.g., CCNA Security, Fortinet NSE, CCNP, or equivalent security credentials).
- Familiarity with Microsoft enterprise systems (e.g., identity access management, secure messaging, Active Directory).
- Self-motivated team player with a professional, calm under pressure, and security-focused approach.
- Comfortable handling sensitive data and applying sound, analytical judgement.
- Willingness and ability to learn quickly and support emergency escalation hours if required.
Desirable Criteria:
- Familiarity with modern digital satellite communications, VSAT networks, and teleport infrastructure.
- Hands-on exposure to Linux and Windows Server secure operating system environments.
- Experience supporting international network infrastructure or government/defence contracts.
- Experience working across cross-functional infrastructure, engineering, and support teams.
Mandatory Eligibility Requirements: Due to the nature of the organisation’s work and secure customer base, candidates must meet the following criteria:
- Background: Must come from a NATO country background.
- Residency: Must have lived and worked in the UK for the most recent 5 consecutive years.
- Vetting: Must be eligible and ready to undergo UK security vetting (DV - Developed Vetting / SC - Security Check) where required.
Package & Benefits:
- Salary: Competitive compensation depending on experience.
- Tools: Company laptop and mobile phone provided.
- Environment: Opportunity to work on advanced, highly secure satellite communications and global network nodes.
- Exposure: Direct engagement with specialist engineers, enterprise suppliers, and high-security government clients.
- Career: Long-term career opportunity within a specialist technical security environment.
Application Process: To apply, please submit your CV detailing your relevant security engineering, data communications, IP networking, and firewalls/infrastructure experience. Applications will be reviewed on a rolling basis, so early submissions are encouraged.
Equal Opportunity Employer: We value diversity and are committed to creating an inclusive work environment. We encourage applicants from all backgrounds to apply, provided the role-specific eligibility requirements are met.
Contact: Elvis Eckardt