Cyber Research Engineer

Job summary

MI5 keeps the country safe from serious threats such as terrorism and attempts by states to harm the UK, its people and way of life. We carry out investigations by obtaining, analysing and assessing intelligence, and then work with a range of partners, including MI6 and GCHQ, to disrupt these threats. Through our protective security arm, we provide advice and guidance to government, businesses and other organisations on how to keep themselves safe. A role in MI5 means you'll do unique and challenging work in a supportive and encouraging environment, making a real difference to UK national security.

Job description

As a Cyber Research Engineer based in MI5’s Cyber Collections team, the work is at the forefront of Cyber Security and contributes to the development of novel capabilities that directly support investigations. Your work focuses on gathering intelligence from computers, networks and devices used by hostile individuals, including terrorists, who pose serious threats to national security.

Working within a small, diverse team of security specialists, this role focuses on solving complex and often novel technical challenges. Day-to-day activities involve researching, developing, and testing innovative techniques and capabilities, as well as exploring and analysing systems to identify vulnerabilities and determine effective mitigations. The work spans open-source research and practical testing. Activities range from writing Python and decompiling Java, to conducting network penetration testing. You’ll also develop bespoke tooling to demonstrate findings, alongside building pipeline tools that improve efficiency, repeatability and scalability.

This is a project-based operational role with a strong cross-team ethos, focused on applying technical expertise to challenging problems and sharing techniques and approaches across teams. Clear documentation and presentation of findings are a key part of the work, supporting the development of innovative capabilities that are integral to protecting the country.

Close engagement with customers across the business is required to understand requirements, with success measured by tangible improvements in security outcomes. Knowledge sharing is a core expectation of the work, including teaching and mentoring colleagues, spreading new ideas, and enabling expertise and workloads to be shared effectively. The role involves writing both code and supporting documentation in equal measure. While there are opportunities to mentor others, this is not a line management position.

Collaboration with other UK agencies also forms part of the work. There is potential for infrequent national and overseas travel, including to partner organisations, conferences and workshops, though this is optional rather than mandatory.

Person specification

You have genuine interest in cyber security, developed through study, professional experience or personal projects, and a curiosity for solving complex problems and uncovering practical solutions. You’ll have some experience of programming in at least one higher-level application language for example Python or Java, and preferably some exposure to low-level systems programming languages such as C/C++ or Rust.

You’ll have awareness of, and interest in security research, reverse engineering, or operating system internals (including Windows, Linux, Android, iOS, and macOS), combined with a solid understanding of networking fundamentals such as TCP/IP. This understanding may have been gained through a relevant degree, training, or practical experience, and we welcome applications from candidates at different stages of their careers.

Effective collaboration skills are essential, as the work relies on teamwork and constructive engagement with others who may have different approaches or perspectives. A genuine motivation to build technically interesting solutions that deliver real value, alongside a willingness to share knowledge with others explaining concepts, contributing ideas or supporting colleagues in different ways, will be important for success in this role. You’ll help maintain professional standards while being considerate of different needs. Self-awareness, flexibility and openness to constructive feedback are important.

Benefits

Training and development
When you join, you’ll get a comprehensive induction to the organisation, including an introduction to your immediate team and the wider Cyber Collections area. Induction is delivered primarily within the team, alongside the wider departmental familiarisation days that introduce you to different teams and functions across the office. From day one, you’ll be supported by a dedicated buddy and have access to mentoring, largely provided within the team itself.

We offer an inclusive and supportive working environment and are committed to supporting colleagues to develop both professionally and personally. Given the pace of change in security research and protective mitigations, continued learning is essential. You’ll be supported through structured training pathways and dedicated funding, aligned to different stages of development.

You’ll receive a bespoke training package tailored to your personal development needs and the requirements of the role. Training typically covers core computer and technology topics in a professional context, delivered largely through external courses. This may include working towards professional qualifications such as cloud certifications, systems administration, or network administration. You’ll also develop in more specialist areas such as forensics, reverse engineering, specific programming languages, or bespoke hardware. Training is delivered through a combination of external and internal courses.

You’ll have access to a dedicated development budget, funding for professional certifications based on business need and an allocation of development days to support learning and through formal training or independent research. There is also funding available for conferences, including both external industry events and internal conferences, providing opportunities for learning, networking and, where appropriate, presenting work to colleagues across the organisation.

As skills develop and are maintained, there is the opportunity to progress through additional pay points. You can apply for recognition that your skills have reached a higher level at regular intervals, when you and your line manager agree you are ready.

Rewards and benefits
You’ll receive a starting salary of £44,190 - £52,972 plus other benefits including:

• 25 days’ annual leave, rising automatically to 30 days after 5 years' service, plus an additional 10.5 days of public and privilege holidays
• opportunities to be recognised through our employee performance scheme
• an interest-free season ticket loan
• a dedicated development budget
• an excellent pension scheme
• a cycle to work scheme
• facilities such as a subsidised gym, restaurant, and on-site coffee bars (at some locations)
• paid parental and adoption leave

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and in