Principal Vulnerability Researcher

Step into a Principal position at the forefront of telecom security research, where you will shape not only how vulnerabilities are discovered, understood, and mitigated, but also how telecom security research evolves across the wider industry. As one of the organisation's leading technical experts, you will define strategic research priorities, influence national telecom security outcomes, and build capability within both the organisation and the broader security community.

You will provide hands-on technical leadership across complex research programmes, mentor and develop researchers, engage senior stakeholders, and represent the organisation as a recognised authority in telecom security and vulnerability research. Alongside hands-on research, you'll drive innovation, strengthen industry partnerships, and help shape the future of secure telecommunications.

• Shape Vulnerability Research Strategy – Define and drive vulnerability research across carrier-grade telecom systems. You will identify emerging technologies, prioritise strategic research opportunities, and ensure the organisation remains at the forefront of telecom security innovation. Your work will directly influence the resilience of critical national infrastructure and the UK's telecom security capabilities.
• Lead Complex Research Programmes – Provide technical leadership across large-scale research initiatives, guiding investigations into complex real-world technologies and uncovering previously unknown security vulnerabilities. You will tackle highly ambiguous challenges, connect insights across multiple domains, and help shape how future telecom systems are secured.
• Build Capability & Research Excellence – Act as a mentor and role model for researchers across the organisation, fostering a culture of curiosity, collaboration, and technical excellence. You will develop talent, establish best practices, review technical work, and help shape the future capability of the vulnerability research function.
• Apply AI to Advanced Security Research – There is the opportunity to lead the development and application of AI-enabled research capabilities using UKTL’s secure, on-premises AI hardware. You will use these resources to accelerate vulnerability discovery, automate complex analysis, and develop innovative tooling and models for telecom security research, while ensuring sensitive data and workloads remain within UKTL’s controlled environment.
• Build and Grow Technical Communities – Champion knowledge sharing and collaboration both internally and externally. You will establish and nurture research communities, facilitate technical exchanges, and create opportunities for learning and innovation across the telecom and cyber security ecosystem.
• Represent UKTL as a Thought Leader – Serve as a recognised expert within the telecom security community. You will present research findings at industry conferences, working groups, government forums, and technical communities, translating complex research into meaningful insights that influence decision-making and advance the state of the art.
• Engage Senior Stakeholders – Build trusted relationships with senior leaders, industry partners, academics, regulators, and government organisations. You will communicate complex technical topics clearly and effectively, helping stakeholders understand risks, opportunities, and strategic priorities.
• Work, Build & Experiment in a World-Class Lab – Operate within a cutting-edge research environment where exploration and experimentation are encouraged. You will have the freedom to deconstruct systems, challenge assumptions, discover new attack vectors, and develop innovative approaches that strengthen telecom security at scale.

Your Skills & Experience
• Recognised expert in vulnerability research with a track record of driving technical direction, influencing security strategy, and delivering impactful research outcomes.
• Extensive experience delivering and leading vulnerability research with influence across multiple organisations, programmes, or technical domains.
• Expertise in telecommunications technologies, including 4G/5G, fibre broadband, and carrier-grade network infrastructure, is highly desirable. Training will be provided to support further development in these areas.
• Demonstrated ability to rapidly develop expertise in new technologies, platforms, programming languages, and telecommunications domains.
• Deep understanding of hardware and software development lifecycles and how security risks emerge throughout system design, development, deployment, and operation.
• Applied knowledge of cryptographic algorithms, standards, authentication mechanisms, digital signatures, data structures, distributed systems, virtualisation, and containerisation technologies.
• Strong knowledge of embedded systems, operating systems, Linux internals, and hardware debugging and prototyping techniques.

Technical Leadership & Strategy
• Proven experience defining research roadmaps, setting technical direction, and leading complex research programmes in ambiguous and evolving environments.
• Ability to translate emerging threats, vulnerabilities, and research findings into strategic recommendations that influence organisational and national security outcomes.
• Experience leading multidisciplinary teams and providing technical leadership, mentoring, coaching, and development to researchers at all levels.
• Demonstrated ability to influence technical decision-making across multiple teams and stakeholder groups without direct authority.

Stakeholder Management & External Engagement
• Excellent stakeholder management skills, with the ability to communicate complex technical concepts and research findings to a technical audiences.
• Experience representing organisations externally as a subject matter expert in vulnerability research, telecommunications security, and cyber security.
• Proven ability to influence industry direction, contribute to standards discussions, and build partnerships that advance organisational objectives.

Community Building & Thought Leadership
• Track record of building, growing, and fostering technical communities, both internally and externally, creating environments that encourage collaboration, knowledge sharing, and innovation.
• Experience organising, leading, or contributing to research communities, working groups, special interest groups, open-source initiatives, or industry forums.
• Strong written and verbal communication skills, with experience producing high-quality technical papers, presentations, blogs, advisory reports, or research publications.
• Recognised as a trusted expert who actively contributes to the wider vulnerability research and telecom security community through speaking engagements, publications, mentoring, and collaboration.

• UKTL is building leading edge Telecoms testing facilities to keep our telecommunications networks safe, accelerate the roll-out of new technologies, and grow our world leading telecoms sector to maintain resiliency and security. 

  Read more about UKTL here!

  Successful candidates will join a state-of-the-art facility and be supporting the team conducting testing and research on the latest technologies and innovations in the industry. You will work alongside our infrastructure and Cybersecurity professionals to ensure that the UK’s world class Telecoms infrastructure grows in a resilient and secure manner underpinning growth in other industry sectors.

  As a trusted and independent national capability, UKTL interacts with standards bodies, Academia, and Government Departments as well as Communications Service Providers and equipment vendors.

  The National Physical Laboratory (NPL) is a world-leading centre of excellence that provides cutting-edge measurement science, engineering and technology to underpin prosperity and quality of life in the UK. Find out more about what it is like working here - The measure of us - Overview

  NPL and DSIT have strong commitments to diversity and equality of opportunity, and welcome applications from candidates irrespective of their background, gender, race, sexual orientation, religion, or age, providing they meet the required criteria. Applications from women, disabled and black, Asian and minority ethnic candidates in particular are encouraged. All disabled candidates (as defined by the Equality Act 2010) who satisfy the minimum criteria for the role will be guaranteed an interview under the Disability Confident Scheme. 

  At NPL, we believe our success is a result of the diversity and talent of our people. We strive to nurture and respect individuals to ensure everyone feels valued by treating everyone on the basis of their own individual merits and abilities regardless of their own or perceived identity, as part of our commitment to diversity & inclusion, we ensure we’re creating an environment where all our colleagues feel supported and welcome. More about this on our Diversity & Inclusion page.

  We offer a wealth of above industry standard benefits, such as enhanced pension scheme, flexible working, and more that can be found here rewards, benefits and recognition. Our values are at the heart of what we do, and they shape the way we interact, develop our people and celebrate success. To ensure everyone has an equal chance, we’re always willing to make reasonable adjustments to the recruitment process. If you would like to discuss, please contact us.