Security Engineer

Security Engineer – Gloucester, UK

Key highlights:

• Hardware and embedded security focus
• Hybrid working – two days onsite
• Salary up to £90,000 depending on experience
• Advanced research programmes with real‑world impact

About the client:

A specialist organization at the cutting edge of cyber security research. They work on complex, high‑assurance challenges combining deep technical expertise with long‑term research and development.

Benefits:

• 37 hour working week with early finish on Fridays
• 25 days holiday plus public holidays, options to buy/sell/carry over
• Contributory pension scheme and discretionary bonus
• Enhanced sick pay and family‑friendly policies
• Access to a flexible benefits platform

Role Overview:

As a Security Engineer you will conduct in‑depth technical investigations into hardware and embedded systems, exploring emerging threats, designing rapid prototypes, and contributing to novel vulnerabilities and attack techniques. The role requires close collaboration with multidisciplinary teams and clear documentation of research outcomes.

Key responsibilities:

• Hardware teardown, characterisation, and reverse engineering
• Data extraction from flash memory technologies (NAND, eMMC, SPI)
• Conducting side channel attacks: timing analysis, voltage glitching, power analysis
• Developing hardware and software prototypes to test new concepts
• Analyzing network protocols and system behaviour to identify weaknesses
• Producing clear technical documentation for varied audiences

Requirements & qualifications:

• Experience with hardware development and prototyping
• Hands‑on experience extracting data from flash storage
  
  Proficient with logic analyzers and oscilloscopes
• Strong soldering and desoldering skills
• Understanding of side channel attack techniques
• Proficiency in C, C++ or Python
• Good working knowledge of Linux environments
• Eligibility for, or existing, eDV clearance
• Reverse engineering skills using tools such as Ghidra, IDA Pro, Binary Ninja
• Embedded software development on ARM, AVR, or MIPS
• Vulnerability research, exploit development, or mitigation bypass experience
• Exposure to RF systems, SDRs, or mobile network technologies

Seniority Level: Mid‑Senior

Employment type: Full‑time

Location: Gloucester, England, United Kingdom