Senior Cyber Vulnerability Researcher

Job summary

Are you passionate about understanding how software and systems really work? Do you enjoy taking apart complex technologies, uncovering vulnerabilities and solving challenging technical problems that others cannot?

Why join us?

Dstl is seeking a Senior Cyber Vulnerability Researcher to join a specialist team delivering world-class vulnerability research, reverse engineering and technical analysis in support of national security and defence outcomes. In this role, you will apply advanced technical skills to analyse software, firmware and embedded systems, identifying vulnerabilities, assessing risks and providing expert advice that directly informs critical decision-making.

Working alongside experts from a range of scientific, engineering and cyber disciplines, you will investigate complex technologies, develop innovative research techniques and contribute to some of the most challenging technical problems in the cyber domain. You will combine deep technical expertise with strong analytical thinking to understand system behaviour, identify weaknesses and develop evidence-based assessments that stand up to rigorous scrutiny.

As a senior member of the team, you will also help shape future capability, providing technical leadership, mentoring colleagues and sharing knowledge to strengthen the organisation's cyber research expertise. This role offers a unique opportunity to work at the forefront of cyber vulnerability research while contributing to work of national importance.

Job description

What you'll do;

• Conduct software reverse engineering, vulnerability research and technical assessments across software, hardware and embedded systems.
• Apply static and dynamic analysis techniques to understand system functionality and identify vulnerabilities.
• Investigate emerging technologies, products and capabilities to understand technical risks, opportunities and potential mitigations.
• Provide authoritative technical advice and evidence-based assessments to customers and stakeholders.
• Develop and enhance tools, techniques and methodologies to improve vulnerability research capability and efficiency.
• Lead technical work packages and coordinate complex research activities, ensuring high-quality outputs are delivered to agreed standards and timescales.
• Produce clear technical reports, briefings and documentation for both technical and non-technical audiences.
• Work collaboratively across multidisciplinary teams and partner organisations to solve complex technical challenges.
• Mentor and support the development of less experienced engineers and researchers, helping to build organisational capability.

Person specification

What we're looking for

• A degree in a STEM subject such as Electronic Engineering, Embedded Systems, Computer Science, Physics or Mathematics, or equivalent experience.
• Experience using reverse engineering tools such as Ghidra or IDA.
• Practical experience applying static and dynamic analysis techniques.
• Knowledge of at least one assembly language such as ARM or x86.
• Strong programming skills in C and/or C++.
• A sound understanding of common software vulnerabilities and experience identifying them.
• Experience solving complex technical problems and making robust technical assessments from incomplete or disparate information.
• Experience leading or contributing to multidisciplinary teams delivering challenging technical outcomes.
• Experience coaching, mentoring and supporting the development of others.
• Excellent analytical, communication and problem-solving skills.

Please review the attached job description for more detailed information

Behaviours

We'll assess you against these behaviours during the selection process:

• Delivering at Pace
• Communicating and Influencing
• Working Together
• Changing and Improving

Benefits

Alongside your salary of £41,431, Defence Science and Technology Laboratory contributes £12,002 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

Benefits

Dstl’s full range of great benefits can be found in the information pack which includes:

• Financial: An excellent pension scheme starting from 26% employer contribution (find out more here). In Year Rewarding Achievement bonuses and thank you vouchers. Rental deposit scheme and cycle to work scheme.
• Allowances: This role is eligible for an additional specialist allowance of £2758 annually subject to meeting extended onboarding requirements. The role may be eligible for additional skills allowances depending on the skills and experience of the applicant.
• Flexible working: Options include alternative working patterns such as; compressed hours (e.g. working a 4 day week/ 9 day fortnight), job shares and annualised hours (agreed number of hours per annum paid monthly i.e. working term-time only).
• Working hours: Flexibility around your working day (e.g. start time, finish time). Ability to bank hours in a 12 month reference period including the ability to accrue and use 3 days per calendar month.

• Where you work: Depending on your role, blended working may be available including remote working to suit you and your team. This can be discussed at interview.
• Annual leave: 25 days pro rata (rising to 30 after 5 years) plus 8 public holidays with the ability to buy/sell 5 additional days per annum.
• Family: Maternity, adoption or shared parental leave of up to 26 weeks with full pay, an additional 13 weeks statutory pay and a further 13 weeks unpaid
• Learning and Development: Dstl encourages and supports charterships, accreditations and provides employees access to fully funded apprenticeships up to level 7 (Masters Degree). Dstl will pay for 2 memberships with relevant bodies/institutions. Employees also have access to Civil Service Learning.
• Facilities: Onsite parking, EV Charging points, restaurants, cafés and gyms.

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours and Experience.

We want you to have your best chance of success in our recruitment process, so If at any stage of the application process you would like help or assistance please contact the Dstl Recruitment Team dstlrecruitment@dstl.gov.uk and we will do all we can to support you.

Sifting will take place week commencing the 2nd of November with interviews taking place from the 9th of November.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is developed vetting (opens in a new window).

See our vetting charter (opens in a new window).People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

Open to UK nationals only.

This job is not open to candidates who hold a dual nationality.

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see theCivil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

Apply and further information

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact :

• Name : Cyber Recruitment Team
• Email : cyberrecruitment@dstl.gov.uk

Recruitment team

• Email : dstlrecruitment@dstl.gov.uk

Further information

Should you wish to raise a formal complaint about the Dstl recruitment process you should email dstlrecruitment@dstl.gov.uk stating the nature of the issue. We will respond within 5 working days.

Attachments

Senior Cyber Vulnerability Researcher_L5 Opens in new window (pdf, 185kB)Candidate Information Pack Opens in new window (pdf, 4978kB)