Associate Security & Privacy Researcher

About the Role

What You’ll Be Doing
As an Associate Vulnerability Researcher in Telecommunications, you’ll be dedicated to deepening your knowledge and sharpening your skills in securing telecom systems. You’ll be joining a team that’s not only excellent at what they do but also committed to supporting your growth and helping you build on your background in the cybersecurity and Vulnerability research communities.

Here’s what your role will involve:

• Learn Continuously - You won’t need to come in with all the skills—this is a space where you’ll build them. You’ll start by exploring systems to understand how and why they fail, learning the fundamentals of security along the way. Each project will be a chance to grow your expertise and apply newly acquired skills to drive meaningful, long-term improvements in security.
  
• Exploring the World of Telecom System - You’ll have the time and autonomy to investigate carrier-grade telecom infrastructure, working towards discovering vulnerabilities that others might overlook. Your work will be thorough, precise, and impactful.
  
• Work Within Flexible Frameworks - Instead of rigid task lists, you’ll operate within broad themes and scopes. This flexibility allows you to shift focus as new insights emerge and opportunities arise, encouraging innovation and adaptability.
  
• Prototype Your Own Tools - You’ll have time to work with and adapt and experiment with custom tooling—such as novel fuzzers or software radio interfaces—often using obscure frameworks and languages to push the boundaries of what’s possible in telecom security.

As a trusted and independent national capability, UKTL interacts with standards bodies, Academia, and Government Departments as well as Communications Service Providers and equipment vendors.

Successful Applicants must be able to commute to the UKTL offices in Birmingham at least twice a week

We strive to offer a great work life balance - if you are looking for full time, part time or flexible options, we will try to make this work where business possible. This will be dependent on the kind of role you do and part of the business you work in.

About You

About You

• You’re someone who thrives on uncovering the unknown and enjoys the challenge of exploring systems for novel vulnerabilities. Whether through professional experience or personal projects, you demonstrate a strong aptitude and passion for security research.
  
• You have a solid understanding of how software and networks operate — from low-level assembly to high-level interpreted languages — and can navigate the intricacies of network protocols with confidence. Your appreciation for Linux OS internals and cryptography is matched by your ability to quickly learn new programming languages when given the right resources.
  
• You’re familiar with common vulnerability types such as memory corruption bugs (e.g., stack/heap/integer overflows, format strings), and you’re curious about the techniques attackers use to bypass modern security protections like NX, stack canaries, heap protection, and ASLR.
  
• Experience with embedded systems, operating systems, or hardware-level debugging and prototyping is a strong asset, and you’re comfortable working close to the metal when needed.
  

Please note: Applications will be reviewed, and interviews conducted throughout the duration of this advert therefore we may at any time bring the closing date forward. We encourage all interested applicants to apply as soon as practical.

We actively recruit citizens of all backgrounds, but the nature of our work in this specific area means that nationality, residency and security requirements are more tightly defined than others. To work in this role, you will need to have a DV clearance with no restrictions, or you must have the ability to obtain a DV clearance.

About Us

.

The National Physical Laboratory (NPL) is a world-leading centre of excellence that provides cutting-edge measurement science, engineering and technology to underpin prosperity and quality of life in the UK. Find out more about what it is like working here - The measure of us - Overview

NPL and DSIT have strong commitments to diversity and equality of opportunity, and welcome applications from candidates irrespective of their background, gender, race, sexual orientation, religion, or age, providing they meet the required criteria. Applications from women, disabled and black, Asian and minority ethnic candidates in particular are encouraged. All disabled candidates (as defined by the Equality Act 2010) who satisfy the minimum criteria for the role will be guaranteed an interview under the Disability Confident Scheme.

At NPL, we believe our success is a result of the diversity and talent of our people. We strive to nurture and respect individuals to ensure everyone feels valued by treating everyone on the basis of their own individual merits and abilities regardless of their own or perceived identity, as part of our commitment to diversity & inclusion, we ensure we’re creating an environment where all our colleagues feel supported and welcome. More about this on our Diversity & Inclusion page.

We offer a wealth of above industry standard benefits, such as enhanced pension scheme, flexible working, and more that can be found here rewards, benefits and recognition . Our values are at the heart of what we do, and they shape the way we interact, develop our people and celebrate success. To ensure everyone has an equal chance, we’re always willing to make reasonable adjustments to the recruitment process. If you would like to discuss, please contact us.