Cyber Security Engineer – Risk & Assurance in Christchurch

Location: Christchurch on site. We offer a range of flexible working arrangements – please speak to your recruiter about the options for this particular role.

Salary: Circa £56,000 depending on skills and experience.

Who we are: Join BAE Systems and you’ll be part of something bigger. As a valued member of our global colleague network, you’ll bring your unique skills and perspectives to help pioneer progress and protect what matters most. You’ll be trusted to play your part in delivering the advanced, technology-led defence, aerospace and security solutions of tomorrow, shaping a safer future for all of us.

Job Description: Our cyber security engineers work closely with security stakeholders from both the business and the customer communities, throughout the whole project lifecycle and at all classifications.

Core Duties:

• Help projects to understand the cyber security risk context.
• Work closely with stakeholders to identify and propose architectures, develop secure designs and identify and implement security controls which provide value driven risk reduction.
• Produce clear and concise technical documentation.
• Occasional travel to customer sites to support meetings and investigations.
• Identify cyber security risks and the commensurate controls and achieving assurance / accreditation at the highest classifications and within the UK defence domain.
• Understand the current trends and developments in cyber security.
• Ensure compliance with the NIST Risk Management Framework and NIST Cyber Security Framework or similar frameworks and be responsible for planning or participating in CHECK/penetration tests.

Essential Skills:

• You will have experience of MOD policy in JSP440 and knowledge of NCSC guidance.
• You will have experience of working on MoD Secure by Design (SbD) projects.
• You will have knowledge in one or more security processes – such as security risk assessment, risk treatment using security control baselines etc.
• You will have experience in applying security architecture principles to small or large integration projects.

The Cyber Security Team:

The Cyber Security Team supports the project and complements the existing 45 strong development team that provides support to a fully integrated command and control system for the MoD. This exciting systems & software programme covers many disciplines including design, development, installation, implementation, integration, acceptance, training and logistics support – it is run solely from our Christchurch site for delivery to our customer at various MoD locations.

Why BAE Systems?

Here you’ll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work, this is a place where you can grow your career with confidence and be empowered to be your best. You’ll be recognised for your contribution and enjoy rewards tailored to what’s most important to you and your family, support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strong sense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make.

A place where everyone can thrive:

We’re committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.

Closing Date: 28th April 2026. We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.