Senior Cyber Security Engineer

This vacancy is open to permanent and fixed-term BAE Systems employees only. While agency workers have access to relevant permanent opportunities, this role has been designated as an internal opportunity and therefore only permanent and fixed-term employees of BAE Systems are eligible to apply.

You’re expected to have completed 12 months in role prior to applying for an advertised vacancy and you should also discuss the internal opportunity with your line manager to ensure sustained business continuity and to further support your career development.

We know there may be exceptional individual circumstances that impact this, in the first instance please discuss this with your line manager.

If you don’t feel you can talk to your Line Manager, you can contact your HRBP.

PLEASE NOTE\: Should you be invited for interview; you acknowledge that the Recruitment team will contact you and your line manager regarding your application for this opportunity.

Senior Cyber Security Engineer

Would you like to act as lead engineer for Firewall Security Policy reviews, Vulnerability Management and Atlassian Technologies from a technical and leadership perspective. We currently have a vacancy for a Senior Cyber Security Engineer to be based ideally in the Preston or Frimley area.

Your main responsibilities as Senior Cyber Security Engineer\:

· Manage firewall governance, including rule reviews, approvals, recertification activities, and enforcement of least-privilege network access principles.

· Own and drive firewall rule hygiene activities, ensuring rule sets remain secure, compliant, and optimised through regular reviews and recertification.

· Lead the vulnerability scanning activities across servers, workstations, network devices, cloud assets, and applications, validating scan results, investigating false positives, and ensuring comprehensive asset coverage.

· Provide technical leadership and support across the Atlassian Stack, including Linux server administration, PostgreSQL database management, platform upgrades, configuration management, performance optimisation, troubleshooting, and maintaining a secure, highly available environment

· Drive continuous improvement through process optimisation, automation, security metrics reporting, team development, and enhancement of the organisation's overall security posture.

· Act as a technical escalation point and deputy team lead, providing guidance, mentoring, workload prioritisation, and management support while ensuring the effective delivery of cyber security services and operational objectives.

Your skills and qualifications\:

o Advanced understanding of network security architecture and controls, including TCP/IP, routing, firewall technologies, VPNs, network segmentation, and intrusion detection and prevention systems (IDPS), with the ability to assess and mitigate associated security risks.

o Proven experience leading firewall governance and rule management activities, ensuring compliance with security standards, adherence to least-privilege principles, and the continuous improvement of network security controls.

o Advanced knowledge of Linux operating systems including installation, configuration, maintenance, performance tuning, and issue resolution.

o Strong analytical and problem-solving capabilities, with the ability to interpret complex technical data, assess cyber risks, and deliver clear, risk-based recommendations to stakeholders.

o Understanding of vulnerability scanning principles, including vulnerability identification, prioritisation, remediation tracking, and validation of security improvements across enterprise environments.

o Awareness of Microsoft 365 security capabilities, including identity and access management, data protection, security monitoring, compliance controls, and threat protection technologies.

Location\: Ideally located close to Preston or Frimley offices

Grade\: GG11

Shared Services

If you’d like to make a real difference where it counts, BAE Systems is the place for you.

From keeping soldiers, sailors and pilots safe to helping countries prosper, from developing the next generation of supersonic aircraft to investing in the next generation of super-smart talent – at BAE Systems, we work together to give our customers an essential edge in protecting the things that really matter. Lives, livelihoods, ways of life.

As part of the Shared Services team, you’ll be at the heart of this endeavour – working closely with our air, maritime, land and cyber and intelligence businesses to support our customers around the world.

Join us and you’ll be encouraged and rewarded to excel in this important work. Apply your talent where it counts.

We are committed to supporting work life balance for all our employees and embrace a range of modern working practices, which aim to enhance flexibility for individuals whilst also enabling business performance. Flexibility provisions vary by role, but include; hybrid working arrangements, flexible working patterns and shift working.

We want to be the leading employer in defence and security for valuing diversity and inclusion. We care about difference in all forms and want to create an inclusive environment where everyone can be themselves and reach their full potential.

We welcome candidates from all backgrounds and particularly from sections of the community who are currently under-represented within our industry, including women, people from ethnic minorities, people with disabilities and LGBTQ+ individuals. We also want to be a preferred home for veterans and reservists.

For more information on our Diversity & Inclusion work, please click here.

We welcome applications from all suitably qualified people, who are BAE Systems employees and who have been in their current role for 12 months or longer

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Click here for more information on national security vetting levels.