National Physical Laboratory

National Physical Laboratory in Birmingham is seeking a skilled security specialist to lead penetration testing and security assessments across complex systems. You will mentor junior team members while contributing to remediation strategies and improving security posture. The ideal candidate has solid experience in penetration testing and is comfortable in a collaborative environment. The position offers flexible working arrangements depending on business needs.

Dive Deep. Make an Impact. Build Secure Systems. You're driven by curiosity and a desire to understand how things really work - and how they can be made more secure. Whether dissecting telecoms protocols, exploring enterprise systems, or analysing hardware, you take a hands on, analytical approach to solving complex challenges. In this role, you'll join a collaborative and inclusive team where your expertise is valued, your ideas are heard, and your work directly contributes to strengthening real world systems. You'll have the freedom to explore, experiment, and grow - while helping shape the security of next generation networks. As a senior member of the team, you'll also play an important role in supporting and mentoring others, helping to develop the next generation of security testing specialists. What You'll Be Doing Lead and deliver security assessments across complex hardware, software, and telecoms systems. Conduct hands on penetration testing within a dedicated in house lab environment, ensuring safe and controlled testing. Apply advanced testing techniques - including both positive and negative approaches (e.g. fuzzing) - to rigorously assess network functions and protocols. Identify, investigate, and clearly articulate vulnerabilities and security risks to both technical and non technical audiences. Develop scripts and automate testing processes to improve efficiency, consistency, and scalability. Produce high quality, insightful technical reports that support remediation and strengthen security posture. Mentor and support junior team members through hands on guidance and knowledge sharing. Contribute to the development of test strategies and help shape the direction of security assessments. Requirements Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week. We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to hold an SC clearance with no restrictions. You are welcome to apply without already holding SC clearance; however, you will not be able to start in post until the clearance has been successfully granted. What You'll Thrive In Strong experience in penetration testing, with a solid understanding of exploitation techniques and how they apply in real world environments. Enjoy deep technical problem solving and working across complex, evolving systems. Bring a collaborative mindset - sharing knowledge, supporting others, and contributing fresh ideas. Are passionate about security testing and committed to continuous learning and staying ahead of emerging threats. Have a background in areas such as networking, infrastructure, software development, or telecoms (preferred but not essential). What You'll Learn You'll bring solid experience - and we'll help you take it even further. Whether you already have knowledge of telecoms protocols such as Diameter, HTTP/2, SCTP, and NGAP, or demonstrate a strong ability to learn them quickly, we'll support your growth every step of the way. You'll gain access to leading training platforms and work towards industry recognised certifications, helping you continuously develop your expertise. Benefits We strive to offer a great work life balance. Whether you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in.

What You'll Be Doing Conduct all security assessments within our dedicated in-house lab environment, ensuring safe and controlled testing conditions. Perform hands on penetration testing across hardware, software, and telecoms specific technologies to identify vulnerabilities in complex systems. Apply both positive and negative testing techniques to rigorously assess network functions, protocols, and system resilience. Develop scripts and automate testing processes to enhance efficiency, consistency, and repeatability-freeing up time for deeper, high impact research. Investigate and analyse security findings, clearly articulating technical risks to both technical and non technical stakeholders. Produce high quality, actionable technical reports that support remediation and strengthen overall security posture. Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week. We strive to offer a great work life balance - if you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in. You'll Thrive Here If You Have a background in infrastructure, networking, or software development and hands on penetration testing experience (this is not an entry level role). Enjoy deep technical problem solving and working in complex environments. Bring new ideas, collaborate well, and support others. Are passionate about security testing and committed to continuous learning. What You'll Learn You'll bring solid experience - and we'll help you take it even further. Whether you already have knowledge of telecoms protocols such as Diameter, HTTP/2, SCTP, and NGAP, or demonstrate a strong ability to learn them quickly, we'll support your growth every step of the way. You'll gain access to leading training platforms and work towards industry recognised certifications, helping you continuously develop your expertise. If this sounds like you, we'd love to hear from you - let's build something secure together. We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to hold an SC clearance with no restrictions. You are welcome to apply without already holding SC clearance; however, you will not be able to start in post until the clearance has been successfully granted.

The National Physical Laboratory in Birmingham seeks skilled professionals for security assessments and penetration testing roles. Applicants should have a background in infrastructure, networking, or software development, along with hands-on penetration testing experience. Successful candidates will conduct assessments, develop testing scripts, and analyze security findings. Responsibilities include ensuring safe testing conditions and producing actionable reports. SC clearance is mandatory, but applications can be submitted prior to obtaining it.

Join the UK Telecoms Lab (UKTL) and play a critical role in strengthening the security, interoperability, and resilience of the UK's telecoms ecosystem. We are looking for a skilled and inquisitive Access Engineer with strong experience in fixed and mobile access systems to support cutting edge testing and validation work. About the Role In this role, you'll work across a range of telecoms technologies, supporting the integration, testing, and validation of Devices Under Test (DUTs) alongside associated systems and tools. You'll contribute to the review of supplier designs and ensure that testing outputs are robust, well documented, and aligned with UKTL's security and operational standards. Key Responsibilities Support the review of supplier designs, and the integration, acceptance, testing, maintenance and operation of devices and systems under test. Build, integrate and support access Devices Under Test, including RF systems and test environments. Assist with Radio Access Network (RAN) installation activities, ensuring user equipment (UEs) readiness. Develop, document and execute test cases and test strategies, ensuring clarity on scope, limitations, and impact. Record and analyse test results, producing clear insights and recommendations for security, standards, and policy. Diagnose and resolve connectivity, hardware and software issues within test environments. Perform regular RF sweeps, ensuring compliance with safety thresholds and escalating where required. Provision and manage SIM configurations across different core network identities. Collaborate with stakeholders to ensure meaningful interoperability testing and sufficient coverage. Represent UKTL at industry and standards events, championing secure by design principles. Support continuous improvement of processes aligned to UKTL's security posture. Coordinate cross team and project activities. Requirements Strong knowledge of 4G/5G radio technologies, SIMs, UEs, and fixed access systems (NTN experience desirable). Experience with Kubernetes container environments and OpenStack based hypervisors. Proficiency with test tools and environments, including administration and troubleshooting. Hands on experience in functional testing, analysis, and reporting. Strong problem solving skills with proven fault finding methodologies. Experience working in Agile environments, with sprint planning and delivery tracking. Experience or awareness of 4G/5G core architectures and security testing techniques is desirable; we actively support upskilling and will provide training to help you build these capabilities. Must be able to commute to the UKTL offices in Birmingham at least twice a week. To work in this role, you will need to hold an SC clearance with no restrictions. You are welcome to apply without already holding SC clearance; however, you will not be able to start in post until the clearance has been successfully granted. We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others.

The National Physical Laboratory in Birmingham is seeking an Access Engineer to strengthen the UK's telecom security and interoperability. This role involves testing, validation, and integration of telecom devices, with a focus on 4G/5G technologies. Candidates should possess strong problem-solving skills and experience in Agile environments. They must be able to commute to the office regularly and secure SC clearance for the position.

What You'll Be Doing Step into the front line of telecom security research. Find new vulnerabilities Together - Take a deep dive into our carrier grade telecom systems, exploring how complex technologies really work in practice. You'll discover vulnerabilities in a thoughtful, research led way, with the time and support to carry out meaningful work that contributes to stronger, more secure systems. Innovate - you'll work within broad problem spaces with the autonomy to follow your curiosity and pursue the most exciting discoveries. Design, prototype, and experiment with your own tools-whether that's advanced fuzzers, custom software radio solutions, or something entirely new. Learn Relentlessly - Develop a deep understanding of telecom systems by exploring how they behave, where they can fail, and how they can be improved. Each project is an opportunity to grow your expertise, supported by a team with a wide range of experience. You'll learn from colleagues, share knowledge, and collaborate with trusted partners to drive long term improvements in telecom security. Work, Build & Experiment in a World Class Lab - you're trusted to explore freely: to take systems apart, understand them deeply, and build them back better. You'll have the freedom to push boundaries, learn through experimentation, and make a genuine impact-breaking things to improve them, not just to test them. Alongside this, you'll design, build, and evolve the infrastructure that supports your research, creating bespoke environments that enable meaningful, hands on technical discovery at scale. If you're driven by curiosity, thrive on solving complex problems, and want to make a real impact in telecom security-this is where you belong. Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week. About You Curious, driven, and passionate about uncovering how things work-and how they break. Thrive in complex technical environments and enjoy pushing boundaries to discover vulnerabilities others overlook. Comprehend what protocols are doing beneath the surface and can break down how systems communicate. Apply structured research methodologies to explore novel technologies and uncover hidden risks. Bring applied knowledge of cryptographic algorithms-encryption, authentication, signatures-and know how they can be misused. Comfortable with data structures, distributed systems, and modern infrastructure like virtualisation and containerisation. Understand network protocols and how software works-from low level assembly to high level interpreted languages. Familiar with memory corruption bugs and know how attackers bypass protections like ASLR, stack canaries, and heap guards. Know your way around Linux internals and can pick up any programming language when given the right resources. Used ethical exploitation tools and techniques across both low level software and web platforms. Got reverse engineering experience and confident using tools like IDA Pro, Ghidra, or even just source code analysis. We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to have a DV clearance with no restrictions, or you must have the ability to obtain a DV clearance.

Dive Deep. Make an Impact. Build Secure Systems. You're driven by curiosity and a desire to understand how things really work - and how they can be made more secure. Whether dissecting telecoms protocols, exploring enterprise systems, or analysing hardware, you take a hands on, analytical approach to solving complex challenges. In this role, you'll join a collaborative and inclusive team where your expertise is valued, your ideas are heard, and your work directly contributes to strengthening real world systems. You'll have the freedom to explore, experiment, and grow - while helping shape the security of next generation networks. As a senior member of the team, you'll also play an important role in supporting and mentoring others, helping to develop the next generation of security testing specialists. What You'll Be Doing Lead and deliver security assessments across complex hardware, software, and telecoms systems. Conduct hands on penetration testing within a dedicated in house lab environment, ensuring safe and controlled testing. Apply advanced testing techniques - including both positive and negative approaches (e.g. fuzzing) - to rigorously assess network functions and protocols. Identify, investigate, and clearly articulate vulnerabilities and security risks to both technical and non technical audiences. Develop scripts and automate testing processes to improve efficiency, consistency, and scalability. Produce high quality, insightful technical reports that support remediation and strengthen security posture. Mentor and support junior team members through hands on guidance and knowledge sharing. Contribute to the development of test strategies and help shape the direction of security assessments. Requirements Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week. We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to hold an SC clearance with no restrictions. You are welcome to apply without already holding SC clearance; however, you will not be able to start in post until the clearance has been successfully granted. What You'll Thrive In Strong experience in penetration testing, with a solid understanding of exploitation techniques and how they apply in real world environments. Enjoy deep technical problem solving and working across complex, evolving systems. Bring a collaborative mindset - sharing knowledge, supporting others, and contributing fresh ideas. Are passionate about security testing and committed to continuous learning and staying ahead of emerging threats. Have a background in areas such as networking, infrastructure, software development, or telecoms (preferred but not essential). What You'll Learn You'll bring solid experience - and we'll help you take it even further. Whether you already have knowledge of telecoms protocols such as Diameter, HTTP/2, SCTP, and NGAP, or demonstrate a strong ability to learn them quickly, we'll support your growth every step of the way. You'll gain access to leading training platforms and work towards industry recognised certifications, helping you continuously develop your expertise. Benefits We strive to offer a great work life balance. Whether you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in.

The National Physical Laboratory in Birmingham seeks skilled professionals for security assessments and penetration testing roles. Applicants should have a background in infrastructure, networking, or software development, along with hands-on penetration testing experience. Successful candidates will conduct assessments, develop testing scripts, and analyze security findings. Responsibilities include ensuring safe testing conditions and producing actionable reports. SC clearance is mandatory, but applications can be submitted prior to obtaining it.

The National Physical Laboratory is looking for a passionate researcher in telecommunications and cybersecurity. This full-time position in Solihull offers flexible work arrangements, focusing on innovative research areas like 5G, AI, and software/hardware prototyping. Successful candidates will demonstrate strong capabilities in complex problem solving and technical communication. An understanding of security protocols and SC clearance eligibility is required.

What You'll Be Doing Conduct all security assessments within our dedicated in-house lab environment, ensuring safe and controlled testing conditions. Perform hands on penetration testing across hardware, software, and telecoms specific technologies to identify vulnerabilities in complex systems. Apply both positive and negative testing techniques to rigorously assess network functions, protocols, and system resilience. Develop scripts and automate testing processes to enhance efficiency, consistency, and repeatability-freeing up time for deeper, high impact research. Investigate and analyse security findings, clearly articulating technical risks to both technical and non technical stakeholders. Produce high quality, actionable technical reports that support remediation and strengthen overall security posture. Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week. We strive to offer a great work life balance - if you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in. You'll Thrive Here If You Have a background in infrastructure, networking, or software development and hands on penetration testing experience (this is not an entry level role). Enjoy deep technical problem solving and working in complex environments. Bring new ideas, collaborate well, and support others. Are passionate about security testing and committed to continuous learning. What You'll Learn You'll bring solid experience - and we'll help you take it even further. Whether you already have knowledge of telecoms protocols such as Diameter, HTTP/2, SCTP, and NGAP, or demonstrate a strong ability to learn them quickly, we'll support your growth every step of the way. You'll gain access to leading training platforms and work towards industry recognised certifications, helping you continuously develop your expertise. If this sounds like you, we'd love to hear from you - let's build something secure together. We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to hold an SC clearance with no restrictions. You are welcome to apply without already holding SC clearance; however, you will not be able to start in post until the clearance has been successfully granted.

What You'll Be Doing As an Associate Vulnerability Researcher in Telecommunications, you'll be dedicated to deepening your knowledge and sharpening your skills in securing telecom systems. You'll be joining a team that's not only excellent at what they do but also committed to supporting your growth and helping you build on your background in the cybersecurity and Vulnerability research communities. Here's what your role will involve: Learn Continuously - You won't need to come in with all the skills-this is a space where you'll build them. You'll start by exploring systems to understand how and why they fail, learning the fundamentals of security along the way. Each project will be a chance to grow your expertise and apply newly acquired skills to drive meaningful, long term improvements in security. Exploring the World of Telecom System -You'll have the time and autonomy to investigate carrier grade telecom infrastructure, working towards discovering vulnerabilities that others might overlook. Your work will be thorough, precise, and impactful. Work Within Flexible Frameworks -Instead of rigid task lists, you'll operate within broad themes and scopes. This flexibility allows you to shift focus as new insights emerge and opportunities arise, encouraging innovation and adaptability. Prototype Your Own Tools -You'll have time to work with and adapt and experiment with custom tooling-such as novel fuzzers or software radio interfaces-often using obscure frameworks and languages to push the boundaries of what's possible in telecom security. As a trusted and independent national capability, UKTL interacts with standards bodies, Academia, and Government Departments as well as Communications Service Providers and equipment vendors. Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week. We strive to offer a great work life balance - if you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in. About You You're someone who thrives on uncovering the unknown and enjoys the challenge of exploring systems for novel vulnerabilities. Whether through professional experience or personal projects, you demonstrate a strong aptitude and passion for security research. You have a solid understanding of how software and networks operate - from low-level assembly to high-level interpreted languages - and can navigate the intricacies of network protocols with confidence. Your appreciation for Linux OS internals and cryptography is matched by your ability to quickly learn new programming languages when given the right resources. You're familiar with common vulnerability types such as memory corruption bugs (e.g., stack/heap/integer overflows, format strings), and you're curious about the techniques attackers use to bypass modern security protections like NX, stack canaries, heap protection, and ASLR. Experience with embedded systems, operating systems, or hardware level debugging and prototyping is a strong asset, and you're comfortable working close to the metal when needed. Please note: Applications will be reviewed, and interviews conducted throughout the duration of this advert therefore we may at any time bring the closing date forward. We encourage all interested applicants to apply as soon as practical. We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to have a DV clearance with no restrictions, or you must have the ability to obtain a DV clearance.

What You'll Be Doing As an Associate Vulnerability Researcher in Telecommunications, you'll be dedicated to deepening your knowledge and sharpening your skills in securing telecom systems. You'll be joining a team that's not only excellent at what they do but also committed to supporting your growth and helping you build on your background in the cybersecurity and Vulnerability research communities. Here's what your role will involve: Learn Continuously - You won't need to come in with all the skills-this is a space where you'll build them. You'll start by exploring systems to understand how and why they fail, learning the fundamentals of security along the way. Each project will be a chance to grow your expertise and apply newly acquired skills to drive meaningful, long term improvements in security. Exploring the World of Telecom System -You'll have the time and autonomy to investigate carrier grade telecom infrastructure, working towards discovering vulnerabilities that others might overlook. Your work will be thorough, precise, and impactful. Work Within Flexible Frameworks -Instead of rigid task lists, you'll operate within broad themes and scopes. This flexibility allows you to shift focus as new insights emerge and opportunities arise, encouraging innovation and adaptability. Prototype Your Own Tools -You'll have time to work with and adapt and experiment with custom tooling-such as novel fuzzers or software radio interfaces-often using obscure frameworks and languages to push the boundaries of what's possible in telecom security. As a trusted and independent national capability, UKTL interacts with standards bodies, Academia, and Government Departments as well as Communications Service Providers and equipment vendors. Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week. We strive to offer a great work life balance - if you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in. About You You're someone who thrives on uncovering the unknown and enjoys the challenge of exploring systems for novel vulnerabilities. Whether through professional experience or personal projects, you demonstrate a strong aptitude and passion for security research. You have a solid understanding of how software and networks operate - from low-level assembly to high-level interpreted languages - and can navigate the intricacies of network protocols with confidence. Your appreciation for Linux OS internals and cryptography is matched by your ability to quickly learn new programming languages when given the right resources. You're familiar with common vulnerability types such as memory corruption bugs (e.g., stack/heap/integer overflows, format strings), and you're curious about the techniques attackers use to bypass modern security protections like NX, stack canaries, heap protection, and ASLR. Experience with embedded systems, operating systems, or hardware level debugging and prototyping is a strong asset, and you're comfortable working close to the metal when needed. Please note: Applications will be reviewed, and interviews conducted throughout the duration of this advert therefore we may at any time bring the closing date forward. We encourage all interested applicants to apply as soon as practical. We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to have a DV clearance with no restrictions, or you must have the ability to obtain a DV clearance.

Overview This Role Speaks to You If You've always been curious about how things work-especially when it comes to telecoms systems like 5G, fibre broadband. You may know IP/TCP/HTTP but here you will work with SCTP/NGAP/5G SBI in carrier grade implementations that offer this level of access. Whether you've worked in the field professionally or you've been exploring open source projects in your spare time, you're someone who enjoys breaking things down, testing their limits, and uncovering security flaws others might miss. You're not just interested in tech-you're passionate about it and enjoy the challenge of understanding complex systems, building, testing, and sometimes even breaking things (ethically) to make them better. Successful Applicants must be able to commute to the UKTL offices in Solihull, Birmingham at least twice a week. We strive to offer a great work life balance. If you are looking for full time, part time or flexible options, we will try to make this work where possible. This will be dependent on the kind of role you do and part of the business you work in. What You'll Bring We are interested in evidence of experience or strong interest in one or more of the following research areas: Cybersecurity research within telecoms systems RF and Software Defined Radio (SDR) Artificial intelligence / Machine learning applied to networks or security Formal modelling and verification of protocols or systems Cryptography Hardware or software prototyping SIM / JavaCard technologies Non-terrestrial networks Alongside this, you'll be able to evidence: Strong research capability, with experience investigating complex technical problems The ability to work both independently and collaboratively Experience developing software or hardware prototypes, turning concepts into working solutions Clear technical communication, including writing reports to a professional or publication standard Confidence working with Linux environments and quickly adopting new programming languages An understanding of development lifecycles and their impact on security The ability to navigate and apply academic literature and publicly available sources Bonus points if you have experience with reverse engineering tools such as IDA Pro or Ghidra Having curiosity and a strong research mindset is key. Please note: Applications will be reviewed, and interviews conducted throughout the duration of this advert; therefore we may at any time bring the closing date forward. We encourage all interested applicants to apply as soon as practical. We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to hold an SC clearance with no restrictions. You are welcome to apply without already holding SC clearance; however, you will not be able to start in post until the clearance has been successfully granted.

National Physical Laboratory in Birmingham is seeking a skilled security specialist to lead penetration testing and security assessments across complex systems. You will mentor junior team members while contributing to remediation strategies and improving security posture. The ideal candidate has solid experience in penetration testing and is comfortable in a collaborative environment. The position offers flexible working arrangements depending on business needs.

National Physical Laboratory is offering a challenging role in Birmingham focused on telecom security research. You will explore telecom systems to identify vulnerabilities, innovate new tools, and collaborate with experienced colleagues to enhance telecom security. The ideal candidate is driven by curiosity and a solid understanding of cryptography and network protocols. Successful applicants must be able to commute to the Birmingham office at least twice a week and have or be able to obtain a DV clearance.

The National Physical Laboratory is seeking a senior researcher in telecom security in Birmingham. You will lead advanced vulnerability research into telecom systems, shape the technical strategy, and mentor a team of researchers. Candidates must have proven experience with telecom technologies and a deep understanding of software and hardware security risks. This role offers flexible work arrangements.

What You'll Be Doing Step into a senior position at the forefront of telecom security research. In this role, you won't just explore vulnerabilities-you'll define how they are discovered, understood, and mitigated across complex telecom ecosystems. You will lead high-impact research initiatives, guide technical direction, and mentor others while continuing to push the boundaries of your own expertise. Lead Vulnerability Research - and take ownership of advanced vulnerability research across carrier grade telecom systems. You'll drive investigations into complex, real world technologies, uncovering deep and previously unknown security weaknesses. Your work will directly influence the resilience of critical national infrastructure. Set Technical Direction & Strategy - Shape the vision for vulnerability research within the organisation. Define priorities, methodologies, and tooling approaches, ensuring research efforts remain innovative, relevant, and impactful. You will provide technical leadership across multiple domains, guiding teams through ambiguous and complex problem spaces. Innovate & Build at Scale - Design and develop advanced research tooling and environments. Whether creating bespoke fuzzers, software defined radio solutions, or entirely new frameworks, you'll enable large scale experimentation and discovery. You'll lead by example - prototyping, iterating, and pushing technical boundaries. Mentor & Elevate the Team - Support and develop other researchers by sharing knowledge, reviewing work, and fostering a culture of curiosity and technical excellence. You'll help build capability across the team, raising standards and accelerating collective impact. Deepen Expertise & Drive Insight - Apply structured research methodologies to understand complex systems-how they behave, where they fail, and how they can be secured. You'll connect insights across domains (hardware, software, and networks) to solve real world security challenges. Work, Build & Experiment in a World Class Lab - Operate within a cutting edge research environment where experimentation is encouraged. You'll have the freedom to deconstruct systems, explore their limits, and rebuild them more securely-at scale. Alongside this, you'll design and evolve the infrastructure that underpins advanced telecom security research. Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week Location & Availability We strive to offer a great work life balance-options include full time, part time, or flexible arrangements, depending on the role and business needs. Skills & Experience Proven experience leading or contributing to advanced vulnerability research initiatives across multiple roles or organisations Strong expertise across telecom technologies such as 4G/5G, fibre broadband, and OpenRAN Deep understanding of hardware and software development lifecycles, and how they introduce security risks Practical knowledge of cryptographic systems, including encryption, authentication, and digital signatures Solid grasp of data structures, distributed systems, virtualisation, and containerisation Expert level understanding of network protocols and software internals, from low level assembly to high level languages Experience with embedded systems, OS internals, and hardware debugging techniques Strong knowledge of Linux internals, with the ability to quickly adopt new programming languages Demonstrated experience identifying and exploiting memory corruption vulnerabilities, including bypassing modern protections (ASLR, stack canaries, etc.) Proficiency in reverse engineering, using tools such as IDA Pro, Ghidra, or equivalent Skilled in using debugging tools (e.g., GDB) and advanced exploitation techniques Experience building custom tools, research platforms, or test environments to support vulnerability discovery Security Clearance The role requires DV clearance with no restrictions. You can start with SC clearance while your DV clearance is in progress. You are welcome to apply without already holding the required clearance, but you will not be able to start in post until SC clearance has been successfully granted.

The National Physical Laboratory in Birmingham is seeking a Senior Software Engineer to lead the design and architecture of systems that support security testing. This hands-on role requires expertise that directly impacts national security by ensuring the delivery of secure software. Ideal candidates will possess strong technical skills across various languages and frameworks, familiarity with DevOps practices, and a dedication to mentoring and collaboration. The position supports continuous learning and growth in a highly inclusive environment.

At UKTL, your work directly strengthens the UK's technological, cyber, and national resilience. You'll collaborate with expert engineers, government partners, and industry specialists to detect, understand, and counter emerging threats. If you're looking for meaningful work in an inclusive environment that values curiosity, teamwork, and continuous learning, you'll thrive here. What this role means for you As a Senior Software Engineer, you'll be at the heart of projects that matter. You'll help design and shape the architecture of systems that support security testing and research that protects critical national infrastructure, influencing how we deliver secure and high quality software. This is a hands on technical role where your expertise drives real outcomes. Work across multiple languages, frameworks, and platforms to solve complex challenges Help define and improve engineering best practices, branching and deployment strategies Review pull requests, guide colleagues, and raise code quality across teams Champion innovation and bring new ideas that help us stay ahead of emerging threats Collaborate with both technical and non technical stakeholders to shape priorities and deliver meaningful solutions You'll join a wider technical community that shares knowledge, encourages experimentation, and supports your growth. Requirements Successful applicants must be able to commute to the UKTL offices in Birmingham at least twice a week. Qualifications and Skills Operates confidently at a deep technical level across a variety of technologies; comfortable making informed architectural and engineering decisions. Genuine enthusiasm for discovering and applying new engineering techniques and assessing new technologies with a focus on good engineering practice (maintainability, longevity, and available market resources). Experience leading or mentoring a team, or acting as a technical expert within a high performing group. Technology agnostic; polyglot programmer using Linux and open source technologies day to day. Experience working in Agile teams. Understands and applies DevOps/DevSecOps practices. Uses strong software testing techniques (e.g., TDD/BDD) and writes high quality tests. Translates user or business needs into robust technical solutions. Enjoys solving complex, often novel, engineering problems. Communicates clearly and collaborates effectively. Brings curiosity, adaptability, and a commitment to continuous learning. Comfortable with multiple programming languages and willing to learn new ones. Produces high quality technical documentation. Evaluates new technologies and creates compelling business cases for their adoption. Holds an SC clearance with no restrictions (or is willing to obtain it before starting). We actively recruit citizens of all backgrounds.