{"id":2124577,"url":"https://alion.io/job/npl-principal-vulnerability-researcher-2","title":"Principal Vulnerability Researcher","company":{"id":1766463,"name":"National Physical Laboratory","domain":"npl.co.uk","url":"https://alion.io/company/npl-co-uk","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eploy","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Solihull, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":82000,"max_usd":145000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":28},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ghidra","optional":true},{"name":"IDA Pro","optional":true},{"name":"Linux","optional":true},{"name":"Scrum","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-01T00:59:16Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-27T07:47:25Z","board_verified":true,"closed_at":null,"days_open":26,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":26},"description":"About the Role\nStep into a Principal position at the forefront of telecom security research, where you will shape not only how vulnerabilities are discovered, understood, and mitigated, but also how telecom security research evolves across the wider industry. As one of the organisation's leading technical experts, you will define strategic research priorities, influence national telecom security outcomes, and build capability within both the organisation and the broader security community.\nYou will provide hands-on technical leadership across complex research programmes, mentor and develop researchers, engage senior stakeholders, and represent the organisation as a recognised authority in telecom security and vulnerability research. Alongside hands-on research, you'll drive innovation, strengthen industry partnerships, and help shape the future of secure telecommunications.\n\nShape Vulnerability Research Strategy - Define and drive vulnerability research across carrier-grade telecom systems. You will identify emerging technologies, prioritise strategic research opportunities, and ensure the organisation remains at the forefront of telecom security innovation. Your work will directly influence the resilience of critical national infrastructure and the UK's telecom security capabilities.\n\nLead Complex Research Programmes - Provide technical leadership across large-scale research initiatives, guiding investigations into complex real-world technologies and uncovering previously unknown security vulnerabilities. You will tackle highly ambiguous challenges, connect insights across multiple domains, and help shape how future telecom systems are secured.\n\nBuild Capability & Research Excellence - Act as a mentor and role model for researchers across the organisation, fostering a culture of curiosity, collaboration, and technical excellence. You will develop talent, establish best practices, review technical work, and help shape the future capability of the vulnerability research function.\n\nApply AI to Advanced Security Research - There is the opportunity to lead the development and application of AI-enabled research capabilities using UKTL’s secure, on-premises AI hardware. You will use these resources to accelerate vulnerability discovery, automate complex analysis, and develop innovative tooling and models for telecom security research, while ensuring sensitive data and workloads remain within UKTL’s controlled environment.\n\nBuild and Grow Technical Communities - Champion knowledge sharing and collaboration both internally and externally. You will establish and nurture research communities, facilitate technical exchanges, and create opportunities for learning and innovation across the telecom and cyber security ecosystem.\n\nRepresent UKTL as a Thought Leader - Serve as a recognised expert within the telecom security community. You will present research findings at industry conferences, working groups, government forums, and technical communities, translating complex research into meaningful insights that influence decision-making and advance the state of the art.\n\nEngage Senior Stakeholders - Build trusted relationships with senior leaders, industry partners, academics, regulators, and government organisations. You will communicate complex technical topics clearly and effectively, helping stakeholders understand risks, opportunities, and strategic priorities.\n\nWork, Build & Experiment in a World-Class Lab - Operate within a cutting-edge research environment where exploration and experimentation are encouraged. You will have the freedom to deconstruct systems, challenge assumptions, discover new attack vectors, and develop innovative approaches that strengthen telecom security at scale.\nAbout You\nYour Skills & Experience\nRecognised expert in vulnerability research with a track record of driving technical direction, influencing security strategy, and delivering impactful research outcomes.\nExtensive experience delivering and leading vulnerability research with influence across multiple organisations, programmes, or technical domains.\nExpertise in telecommunications technologies, including 4G/5G, fibre broadband, and carrier-grade network infrastructure, is highly desirable. Training will be provided to support further development in these areas.\nDemonstrated ability to rapidly develop expertise in new technologies, platforms, programming languages, and telecommunications domains.\nDeep understanding of hardware and software development lifecycles and how security risks emerge throughout system design, development, deployment, and operation.\nApplied knowledge of cryptographic algorithms, standards, authentication mechanisms, digital signatures, data structures, distributed systems, virtualisation, and containerisation technologies.\nStrong knowledge of embedded systems, operating systems, Linux internals, and hardware debugging and prototyping techniques.\nTechnical Leadership & Strategy\nProven experience defining research roadmaps, setting technical direction, and leading complex research programmes in ambiguous and evolving environments.\nAbility to translate emerging threats, vulnerabilities, and research findings into strategic recommendations that influence organisational and national security outcomes.\nExperience leading multidisciplinary teams and providing technical leadership, mentoring, coaching, and development to researchers at all levels.\nDemonstrated ability to influence technical decision-making across multiple teams and stakeholder groups without direct authority.\nStakeholder Management & External Engagement\nExcellent stakeholder management skills, with the ability to communicate complex technical concepts and research findings to a technical audiences.\nExperience representing organisations externally as a subject matter expert in vulnerability research, telecommunications security, and cyber security.\nProven ability to influence industry direction, contribute to standards discussions, and build partnerships that advance organisational objectives.\nCommunity Building & Thought Leadership\nTrack record of building, growing, and fostering technical communities, both internally and externally, creating environments that encourage collaboration, knowledge sharing, and innovation.\nExperience organising, leading, or contributing to research communities, working groups, special interest groups, open-source initiatives, or industry forums.\nStrong written and verbal communication skills, with experience producing high-quality technical papers, presentations, blogs, advisory reports, or research publications.\nRecognised as a trusted expert who actively contributes to the wider vulnerability research and telecom security community through speaking engagements, publications, mentoring, and collaboration.\nPlease note: Applications will be reviewed, and interviews conducted throughout the duration of this advert therefore we may at any time bring the closing date forward. We encourage all interested applicants to apply as soon as practical.\nFlexible Working\nSuccessful applicants will be expected to attend our Birmingham office a minimum of two days per week. Our state-of-the-art facilities provide an excellent environment for collaboration, and we encourage colleagues to make the most of our on-site workspace.\nWe are committed to fostering a positive work-life balance and welcome applications from candidates seeking full-time, part-time, or flexible working arrangements, subject to business needs.\n\nLocation\nOur site is conveniently located within easy reach of Birmingham, with excellent transport links. We are accessible by rail, with the nearest being Birmingham International station, and are also served by local bus routes. Free on-site parking is available for those travelling by car.\n\nWhy Join UKTL?\nAt UKTL, you'll be part of a mission that has real national impact, helping to strengthen the security, resilience, and future of the UK's telecommunications networks.\nWe are committed to investing in our people, providing opportunities to develop your technical expertise, broaden your experience, and build a rewarding long-term career. Whether you're an experienced specialist or looking to grow your skills in a new area, you'll benefit from:\nMeaningful work that helps shape the future security of UK telecommunications.\nAccess to industry-leading training, professional development, and certification opportunities.\nHands-on experience with cutting-edge technologies across telecoms, cyber security, research, and testing.\nCollaboration with recognised experts in a highly skilled and supportive environment.\nOpportunities to work on unique projects that drive innovation and influence industry best practice.\nA culture that encourages continuous learning, knowledge sharing, and career progression.\nSecurity Clearance\nWe actively recruit citizens from all backgrounds; however, due to the sensitive nature of the work in this area, nationality, residency, and security requirements are more tightly defined than in other roles. To work in this position, you will need to meet the necessary security standards. The role requires DV clearance with no restrictions, though you are able to start in post with SC clearance while your DV clearance is in progress. You are welcome to apply without already holding the required clearance, but you will not be able to start in post until the appropriate level-SC -has been successfully granted.\nSalary\nSalary for UKTL specialist roles is benchmarked against the external market and may include additional compensation to recognise in-demand technical expertise.\nWe recruit based on capability, technical excellence and potential rather than simply years of experience. As a result, candidates may be considered for different grades depending on their skills, experience and technical depth.\nDuring the interview process, we'll discuss how your experience aligns with our grading framework and provide an indication of the salary range associated with the most appropriate level. This ensures you have a clear understanding of expectations and opportunities from an early stage.\nOur technical assessment process is designed to evaluate your expertise in greater detail and will ultimately determine the grade and salary offered. We are committed to offering competitive, market-aligned reward packages that recognise the value and impact our specialists bring to UKTL.\nOur Benefits\nAt UKTL-NPL, we recognise that our people are key to our success. That's why we offer a comprehensive benefits package designed to support your wellbeing, career development and financial security. Benefits include: [uktl.org.uk], [npl.co.uk]\nCompetitive pension scheme with employer contributions of up to 12%.\nLife assurance providing cover of three times your annual salary.\nGenerous annual leave entitlement, sick pay and shared parental leave.\nEnhanced maternity, adoption and surrogacy leave, including up to 39 weeks' full pay.\nPrivate GP service with confidential phone and video appointments.\nEmployee Assistance Programme offering free and confidential advice and counselling.\nGroup Income Protection for additional financial security during periods of long-term illness.\nInterest-free loans for season tickets, rental deposits, house purchase deposits and other qualifying purchases.\nMyLifestyle benefits platform, providing discounts across retail, supermarkets, entertainment, travel and fitness providers.\nCSSC membership offering access to additional leisure, travel and lifestyle benefits.\nEmployee referral bonus scheme.\nProfessional development opportunities including technical training, mentoring, coaching and leadership development.\nSupport towards professional accreditation and chartered status.\nAnnual salary reviews and market benchmarking to ensure competitive and fair pay.\nAccess to wellbeing initiatives, employee networks, social clubs and community activities.\nWe are committed to helping our people th...","description_format":"text","description_chars":15417,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Continuous learning","Flexible schedule","Parental leave","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Testing, Inspection & Certification","Research Institutes","Standards & Industry Bodies"],"lifecycle":[{"event":"open","at":"2026-10-09T00:28:14Z"},{"event":"close","at":"2026-10-17T19:07:14Z"},{"event":"reopen","at":"2026-10-18T01:49:27Z"},{"event":"close","at":"2026-10-18T08:24:26Z"},{"event":"reopen","at":"2026-10-18T11:59:11Z"},{"event":"close","at":"2026-10-18T15:17:23Z"},{"event":"reopen","at":"2026-10-18T18:27:38Z"},{"event":"close","at":"2026-10-19T04:29:16Z"},{"event":"reopen","at":"2026-10-19T16:35:55Z"},{"event":"close","at":"2026-10-19T20:28:01Z"},{"event":"reopen","at":"2026-10-20T00:18:05Z"},{"event":"close","at":"2026-10-20T17:31:57Z"},{"event":"reopen","at":"2026-10-21T05:02:25Z"},{"event":"close","at":"2026-10-21T15:21:48Z"},{"event":"reopen","at":"2026-10-21T20:08:43Z"},{"event":"close","at":"2026-10-22T03:39:53Z"},{"event":"reopen","at":"2026-10-22T07:04:29Z"},{"event":"close","at":"2026-10-22T14:30:46Z"},{"event":"reopen","at":"2026-10-23T02:33:28Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-27T06:21:15+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":33,"band":"fade","label":"Fading","p_open":1,"p_active":0.722,"p_room":0.45,"age_days":26,"expected_fill_days":17,"reasons":["conf:2","velocity","win:tail"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/npl-principal-vulnerability-researcher-2","json_url":"https://alion.io/job/npl-principal-vulnerability-researcher-2.json","meta":{"generated_at":"2026-10-27T10:14:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11747,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1766463},"rest":"https://alion.io/mcp/rest/get_company?id=1766463"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnpl-principal-vulnerability-researcher-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnpl-principal-vulnerability-researcher-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnpl-principal-vulnerability-researcher-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/npl-principal-vulnerability-researcher-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnpl-principal-vulnerability-researcher-2"}]}