Security Engineer – Satcom

Security Engineer – Satcom Location: Redhill, Surrey Salary: £50,000 + Benefits Type: Full-Time, Permanent Industry: Satellite Communications / Secure Connectivity Working Pattern: Full-time, Permanent Reporting To: Head of Network Infrastructure / Security Operations Hybrid Framework: First 6 months fully onsite in Redhill, then up to 6 remote working days per month. The Opportunity: This role suits a technically strong Security Engineer with a deep background in data communications, IP networking, network protection, and satellite-terrestrial integration. The successful candidate will act as a core guardian of the organisation's secure connectivity networks. You will support internal teams, security operations, and defence/enterprise clients across multiple geographies. Key Responsibilities: Network Security & Infrastructure Protection: Act as the technical security champion for satellite communications, airtime, and secure infrastructure. Configure, deploy, and maintain enterprise-grade security appliances, firewalls (e.g., Fortinet, Cisco), secure gateways, and VPN tunnels over satellite links. Understand how supplier security technologies integrate into the wider network infrastructure and global corporate services. Lifecycle, Vulnerability & Incident Management: S upport the full security lifecycle of infrastructure from deployment through to active monitoring, software updates, and hardening. Monitor global network traffic for anomalies, manage internal security incidents, and implement threat mitigation strategies. Work with Systems Engineering teams on security product evaluations, penetration testing feedback, and secure infrastructure rollouts. Capture technical requirements for internal and external secure software or network development projects. Manage in-house security-related projects while balancing priorities during high-demand or critical incident periods. Technical Documentation & Compliance: Translate complex security features and vulnerability assessments into clear, technical compliance reports and remediation guides. Keep technical teams and wider business functions updated on current threat landscapes, security capabilities, and system updates. Ensure network infrastructure aligns with maritime security frameworks, UK government policies, and defence-level operational standards. Produce internal technical documentation, secure configuration guides, FAQs, and incident response process layouts. Support & Internal Training: Provide tier-3 technical security support in high-level engineering meetings, troubleshooting calls, and customer architecture reviews. Deliver internal security awareness training and technical handovers for network engineers, support staff, and back-office teams. Coordinate Technical Security Bulletin distribution alongside local management to address emergent CVEs or critical software patches. Carry out regular security audits and product vulnerability comparisons. What We're Looking For: Essential Experience: Proven Security Engineering experience is strictly essential. Deep knowledge of IP networking, routing protocols (BGP, OSPF), and data communications. Experience within satellite communications, telecoms, network security, or a highly secure data environment. Experience managing security vendors and assessing hardware/software protection capabilities. Experience producing technical security documentation, architecture diagrams, or network policies. Incident response experience with a methodical approach to tracking and eliminating vulnerabilities. Core Skills & Attributes: Strong technical certifications are expected (e.g., CCNA Security, Fortinet NSE, CCNP, or equivalent security credentials). Familiarity with Microsoft enterprise systems (e.g., identity access management, secure messaging, Active Directory). Self-motivated team player with a professional, calm under pressure, and security-focused approach. Comfortable handling sensitive data and applying sound, analytical judgement. Willingness and ability to learn quickly and support emergency escalation hours if required. Desirable Criteria: Familiarity with modern digital satellite communications, VSAT networks, and teleport infrastructure. Hands-on exposure to Linux and Windows Server secure operating system environments. Experience supporting international network infrastructure or government/defence contracts. Experience working across cross-functional infrastructure, engineering, and support teams. Mandatory Eligibility Requirements: Due to the nature of the organisation’s work and secure customer base, candidates must meet the following criteria: Background: Must come from a NATO country background. Residency: Must have lived and worked in the UK for the most recent 5 consecutive years. Vetting: Must be eligible and ready to undergo UK security vetting (DV - Developed Vetting / SC - Security Check) where required. Package & Benefits: Salary: Competitive compensation depending on experience. Tools: Company laptop and mobile phone provided. Environment: Opportunity to work on advanced, highly secure satellite communications and global network nodes. Exposure: Direct engagement with specialist engineers, enterprise suppliers, and high-security government clients. Career: Long-term career opportunity within a specialist technical security environment. Application Process: To apply, please submit your CV detailing your relevant security engineering, data communications, IP networking, and firewalls/infrastructure experience. Applications will be reviewed on a rolling basis, so early submissions are encouraged. Equal Opportunity Employer: We value diversity and are committed to creating an inclusive work environment. We encourage applicants from all backgrounds to apply, provided the role-specific eligibility requirements are met. Contact: Elvis Eckardt