Principal Cyber Vulnerability Researcher

At Dstl, our vision is to have a modern way of working efficiently, accommodating and enabling our people to create, collaborate and deliver. To do this successfully in this job will require attendance at a Dstl location, Government Departments including wider MoD or Delivery and Mission Partner premises for at least 80% of your working time.

About the job Job summary

Are you an experienced cyber security specialist with a passion for reverse engineering, vulnerability research and solving some of the UK's most complex technical challenges?

We are seeking a Principal Cyber Vulnerability Researcher to provide technical leadership in the identification, analysis and exploitation of vulnerabilities across software, hardware and embedded systems. Working at the forefront of cyber research, you will lead high-impact investigations that help inform critical operational decisions, influence future capability development and strengthen national security.

Why join us?

This is a senior technical role where you will apply your expertise in reverse engineering, vulnerability assessment and software analysis to tackle challenging and often ambiguous problems. You will work collaboratively with multidisciplinary teams, customers and partner organisations, providing authoritative technical advice and delivering robust, evidence-based outcomes.

Alongside leading technical delivery, you will shape research approaches, develop innovative tools and methodologies, and play a key role in mentoring and developing less experienced engineers and researchers.

If you thrive in a highly technical environment, enjoy solving complex problems and want to make a meaningful impact through cutting-edge cyber research, we would like to hear from you.

This role is eligible for an additional specialist allowance of £2758 annually subject to meeting extended onboarding requirements. The role may be eligible for additional skills allowances depending on the skills and experience of the applicant.

Job description

What you'll do

• Lead complex cyber vulnerability research activities across software, hardware and embedded systems.
• Conduct software reverse engineering using industry-standard tools and techniques.
• Identify, assess and exploit software vulnerabilities and security weaknesses.
• Provide authoritative technical advice and recommendations to a range of technical and non-technical stakeholders.
• Develop and improve vulnerability research tools, techniques and methodologies.
• Lead technical investigations and coordinate specialist activities to deliver high-quality outcomes.
• Produce clear technical reports, assessments and evidence-based recommendations.
• Work closely with multidisciplinary teams, government customers and external partners.
• Provide technical leadership, coaching and mentoring to engineers and researchers.
• Support the growth of organisational capability through knowledge sharing and continuous improvement.
• Maintain high standards of security, safety and professional conduct in all aspects of work.

Person specification

What we're looking for

• Degree in a relevant STEM subject such as Computer Science, Electronic Engineering, Embedded Systems, Physics or Mathematics, or equivalent relevant experience.

Technical Knowledge and Skills

• Strong experience using reverse engineering tools such as Ghidra, IDA Pro or equivalent.
• Experience conducting static and dynamic software analysis.
• Knowledge of assembly languages, including x86 and/or ARM.
• Strong programming capability in C and/or C++.
• Experience identifying, assessing and exploiting software vulnerabilities.
• Ability to evaluate complex technical problems and communicate risk-based recommendations effectively.
• Experience selecting and applying vulnerability research methodologies to new and challenging problems.
• Ability to provide technical leadership within multidisciplinary teams.

Experience

• Leading complex software reverse engineering and vulnerability research activities.
• Using advanced analysis tools and techniques to understand software behaviour and identify vulnerabilities.
• Producing authoritative technical assessments and recommendations.
• Leading teams to deliver complex technical outcomes.
• Coaching, mentoring and developing less experienced colleagues.
• Building strong collaborative relationships across diverse stakeholder groups.

Please review the attached job description for more detailed information

Important Information:

Our work in defence, security and intelligence requires our employees to be UK Nationals who are able to gain a high level of security clearance to undertake the projects we are involved in to protect us from security threats.

For this reason, only UK Nationals will be able to apply for this role. If you are an international or dual-national candidate, and you think you have the skills we need, please consider applying to any of our government, security or defence partners.

This role will require Develop Vetting and you should have resided in the UK for the past 10 years.

Qualifications

Relevant STEM-based degree such as Electronic Engineering, Embedded Systems, Computer Science, Physics or Mathematics. Individual with equivalent skills qualifications or experience are also actively encouraged to apply.

Behaviours

We'll assess you against these behaviours during the selection process:

• Delivering at Pace
• Communicating and Influencing
• Working Together
• Changing and Improving
• Leadership

Benefits

Alongside your salary of £51,568, Defence Science and Technology Laboratory contributes £14,939 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

Benefits

Dstl's full range of great benefits can be found in the information pack which includes:

• Financial: An excellent pension scheme starting from 26% employer contribution ( find out more here ). In Year Rewarding Achievement bonuses and thank you vouchers. Rental deposit scheme and cycle to work scheme.
• Flexible working : Options include alternative working patterns such as; compressed hours, job shares and annualised hours (agreed number of hours per annum paid monthly i.e. working term-time only).
• Working hours: Flexibility around your working day (e.g. start time, finish time). Ability to bank hours in a 12 month reference period including the ability to accrue and use 3 days per calendar month.
• Where you work: This role requires a minimum of 80% on site attendance.
• Annual leave: 25 days pro rata (rising to 30 after 5 years) plus 8 public holidays with the ability to buy/sell 5 additional days per annum.
• Family: Maternity, adoption or shared parental leave of up to 26 weeks with full pay, an additional 13 weeks statutory pay and a further 13 weeks unpaid
• Learning and Development: Dstl encourages and supports charterships, accreditations and provides employees access to fully funded apprenticeships up to level 7 (Masters Degree). Dstl will pay for 2 memberships with relevant bodies/institutions. Employees also have access to Civil Service Learning.
• Facilities: Onsite parking, EV Charging points, restaurants, cafés and gyms.