Security Engineer – Satcom

Security Engineer - Satcom

Location: Redhill, Surrey

Type: Full-Time, Permanent

Industry: Satellite Communications / Secure Connectivity

Working Pattern: Full-time, Permanent

Reporting To: Head of Network Infrastructure / Security Operations

Hybrid Framework: First 6 months fully onsite in Redhill, then up to 6 remote working days per month.

The Opportunity: This role suits a technically strong Security Engineer with a deep background in data communications, IP networking, network protection, and satellite-terrestrial integration.

The successful candidate will act as a core guardian of the organisation's secure connectivity networks. You will support internal teams, security operations, and defence/enterprise clients across multiple geographies.

Key Responsibilities:

Network Security & Infrastructure Protection:

• Act as the technical security champion for satellite communications, airtime, and secure infrastructure.
• Configure, deploy, and maintain enterprise-grade security appliances, firewalls (e.g., Fortinet, Cisco), secure gateways, and VPN tunnels over satellite links.
• Understand how supplier security technologies integrate into the wider network infrastructure and global corporate services.

Lifecycle, Vulnerability & Incident Management:

• Support the full security lifecycle of infrastructure from deployment through to active monitoring, software updates, and hardening.
• Monitor global network traffic for anomalies, manage internal security incidents, and implement threat mitigation strategies.
• Work with Systems Engineering teams on security product evaluations, penetration testing feedback, and secure infrastructure rollouts.
• Capture technical requirements for internal and external secure software or network development projects.
• Manage in-house security-related projects while balancing priorities during high-demand or critical incident periods.

Technical Documentation & Compliance:

• Translate complex security features and vulnerability assessments into clear, technical compliance reports and remediation guides.
• Keep technical teams and wider business functions updated on current threat landscapes, security capabilities, and system updates.
• Ensure network infrastructure aligns with maritime security frameworks, UK government policies, and defence-level operational standards.
• Produce internal technical documentation, secure configuration guides, FAQs, and incident response process layouts.

Support & Internal Training:

• Provide tier-3 technical security support in high-level engineering meetings, troubleshooting calls, and customer architecture reviews.
• Deliver internal security awareness training and technical handovers for network engineers, support staff, and back-office teams.
• Coordinate Technical Security Bulletin distribution alongside local management to address emergent CVEs or critical software patches.
• Carry out regular security audits and product vulnerability comparisons.

What We're Looking For:

Essential Experience:

• Proven Security Engineering experience is strictly essential.
• Deep knowledge of IP networking, routing protocols (BGP, OSPF), and data communications.
• Experience within satellite communications, telecoms, network security, or a highly secure data environment.
• Experience managing security vendors and assessing hardware/software protection capabilities.
• Experience producing technical security documentation, architecture diagrams, or network policies.
• Incident response experience with a methodical approach to tracking and eliminating vulnerabilities.

Core Skills & Attributes:

• Strong technical certifications are expected (e.g., CCNA Security, Fortinet NSE, CCNP, or equivalent security credentials).
• Familiarity with Microsoft enterprise systems (e.g., identity access management, secure messaging, Active Directory).
• Self-motivated team player with a professional, calm under pressure, and security-focused approach.
• Comfortable handling sensitive data and applying sound, analytical judgement.
• Willingness and ability to learn quickly and support emergency escalation hours if required.

Desirable Criteria:

• Familiarity with modern digital satellite communications, VSAT networks, and teleport infrastructure.
• Hands-on exposure to Linux and Windows Server secure operating system environments.
• Experience supporting international network infrastructure or government/defence contracts.
• Experience working across cross-functional infrastructure, engineering, and support teams.

Mandatory Eligibility Requirements: Due to the nature of the organisation’s work and secure customer base, candidates must meet the following criteria:

• Background: Must come from a NATO country background.
• Residency: Must have lived and worked in the UK for the most recent 5 consecutive years.
• Vetting: Must be eligible and ready to undergo UK security vetting (DV - Developed Vetting / SC - Security Check) where required.

Package & Benefits:

• Salary: Competitive compensation depending on experience.
• Tools: Company laptop and mobile phone provided.
• Environment: Opportunity to work on advanced, highly secure satellite communications and global network nodes.
• Exposure: Direct engagement with specialist engineers, enterprise suppliers, and high-security government clients.
• Career: Long-term career opportunity within a specialist technical security environment.

Application Process: To apply, please submit your CV detailing your relevant security engineering, data communications, IP networking, and firewalls/infrastructure experience. Applications will be reviewed on a rolling basis, so early submissions are encouraged.

Equal Opportunity Employer: We value diversity and are committed to creating an inclusive work environment. We encourage applicants from all backgrounds to apply, provided the role-specific eligibility requirements are met.

Contact: Elvis Eckardt