Cyber Security Engineer

SatVu is a rapidly expanding space technology company, backed by leading investors like Adara Ventures and Lockheed Martin. As the 'World’s Thermometer,' we deliver high-accuracy thermal datasets from space, providing invaluable insights across sectors. Our cutting-edge technology fuels significant growth in climate, sustainability, and defence & intelligence/national security markets, with HotSat-1 launched in 2023 and HotSat-2 and HotSat-3 planned for 2026.

At SatVu, we value Cybersecurity as the first—and last—line of defence, safeguarding our sensitive data from cyberattacks. We’re seeking an experienced and vigilant Cyber Security Engineer who can take full ownership of securing our entire digital estate, ensuring best practices are implemented across the board. This is a unique opportunity to join a dynamic, high-growth organisation and directly influence SatVu's future success. 

The Role 

As our Cyber Security Engineer, you will be at the forefront of protecting SatVu's critical data and systems. You will proactively monitor our digital infrastructure, identify and mitigate threats such as malware and ransomware, and implement robust solutions to address vulnerabilities, with a focus on prevention and swift remediation.  

You will have a deep understanding of cybersecurity standards, certifications, and the evolving tactics of cybercriminal groups, along with an unwavering determination to keep them out.   
 
This position sits within our dedicated DevSecOps team and offers the opportunity for professional growth and impact within a dynamic, high-growth organisation where you will directly influence SatVu's future success. You will report directly to the Senior DevOps Engineer and collaborate closely with both the DevSecOps and broader engineering teams. 

Candidate Profile  

We're looking for a proactive individual who is passionate about applying their broad cybersecurity skills and experience to make a tangible, positive difference to others through their work.  

You understand the immense responsibility the team has for securing mission-critical systems that could be targeted by agencies and criminal groups. You recognise that team strength is essential to achieving our objectives, leveraging  collective experience at all levels to provide world-class services.  You are a curious learner, eager to grow through study and experimentation. You’re willing to take the lead on projects when you understand topics the team finds challenging, sharing your knowledge along the way. This role presents a unique opportunity to build a strong security posture while deepening your expertise as  SatVu scales.  

You recognise that robust security involves more than just technical measures; it also requires thorough compliance and certification. You are skilled at producing comprehensive documentation that adheres to strict industry standards and legal requirements. 

Key Responsibilities  
Technical Operations (70%)  

• Develop and maintain security monitoring systems to enable real-time alerting of threats, breaches and vulnerabilities.  
• Proactively monitor SatVu’s environment for security events, leading swift, appropriate responses to maintain operational safety and integrity. 
• Conducting regular vulnerability testing to identify weaknesses and collaborating with the team to enhance defensive protocols as necessary.  
• Grant credentials to authorised users, monitor access-related activities, and check for unauthorised changes to information to maintain strict access control. 
• Work with the rest of the  DevSecOps team to maintain an overview of the SatVu estate and current threats to feed back into development teams.  
• Lead the execution and delivery of key technical security projects. 
• Collaborate with other members of the team to continuously develop and improve our cyber defences, ensuring we stay one step ahead of current and emerging cybercrime trends.  
• Design and implement robust, layered defences to protect all company data, especially sensitive information, from internal and external cyber threats. 
  

Project Management & Process Leadership (30%)  

• Take responsibility for managing the Cyber Security Risk Register on behalf of the business.  
• Prepare regular security reports for the management team outlining our current security risks and compliance progress.  
• Support in the development and execution of ongoing security training across the company.  
• Maintain security guidelines, procedures, standards and control documentation compliant with good industry practice and applicable laws.  
• Assist the business in achieving relevant Cyber accreditations and certifications. 
• Develop a professional network within the cybersecurity community and maintain working knowledge of the latest cybercrime tactics and countermeasures. 

Key Requirements: 

• You don’t need to tick every box to apply—we value curiosity, learning, and the ability to add impact. These are some of the ways you may bring value:  
• The ability to attain SC (Security Check) or DV (Developed Vetting) clearance, as required for our operations and customer requirements, is mandatory due to the highly sensitive nature of our work.  Unfortunately, Candidates unable to obtain this clearance will be ruled out of the selection process.  
• Excellent verbal and written communication skills to be able to work with all levels within our company, our technology partners and customers.  
• A degree in cybersecurity, information systems, information technology, or equivalent practical experience. 
• 3-5 years of hands-on cybersecurity experience, including GDPR compliance, ideally within a small- to medium-sized business or in a relevant government or policing agency.  
• Our primary stack lives in the AWS cloud ecosystem, so experience of working with and securing AWS is essential. Experience with Azure, particularly Defender products, is highly advantageous. 
• Proficiency in Python scripting for tooling development and experience with shell scripting (Windows/Linux) in developer environments. 
• Strong foundational knowledge of IT infrastructure, including hardware, software, and networking principles. 
• A meticulous eye for detail and proven ability to multitask effectively in a fast-paced environment.  
• Willingness to participate in an on-call rotation as part of the DevSecOps team, sharing responsibility for 24/7 data and system security, integrity, and safety. 

Desirable Qualifications and Experience: 

While not all are mandatory, these qualifications and experiences would be a significant advantage: 

• Familiarity with Cyber Essentials Plus, NIST 171-800 and CMMC cybersecurity frameworks, or other similar internationally recognised frameworks.  
• Strong critical thinking, problem-solving, logic, and forensics skills.  
• Ability to work successfully in both individual and team settings.  
• A proactive mindset with the ability to 'think like a hacker' to identify and counter potential threats. 
• Experience utilising Datadog for security data aggregation and discovery.  
• Experience working directly with development teams to help explain security requirements in an understandable and relatable way.  
• Proven ability to produce clear and concise security progress reports. 
• A good understanding of IPv4 and IPv6 networking, VPN connectivity, and best practices for network isolation and routing. 
• An understanding of satellite operations is an advantage, providing valuable context for our unique environment. 

Why Join SatVu 

• The opportunity to shape the future of one of the UK’s most ambitious space start-ups – developing a completely new and cutting-edge technology, for a large and accessible market. 
• Work in a dynamic, collaborative and high-growth environment.  
• Collaborate with and learn from a team of experienced and talented individuals. 
• Make a significant impact on urgent global themes—defence and climate tech. 
• SatVu follows a hybrid work model, requiring employees to be in our London office two days a week (Wednesday and Thursday). 

Interview Process 

1. Initial Phone screen: Call with our People Director to discuss the role in more detail as well as your own wants and needs (approx. 30 minutes). 
2. First stage interview: Video call with the Senior DevOps Engineer to discuss the role in more detail, as well as your experience (approx. 30 minutes) 
3. Technical Assessment: Interview with the DevSecOps Team (approx. 60 minutes). This stage may be conducted either in-person or via a remote video call, based on availability. 
4. Final stage: Interview with CIO and Co-Founder (approx. 30 minutes). This stage may be conducted either in-person or via a remote video call, based on availability. 

Benefits

• Competitive base salary
• Share options
• 25 Days Holiday + Birthday Off
• Hybrid office / remote (Wednesdays and Thursdays in the office in Central London)
• 6 weeks Work from Anywhere
• Home Office Budget
• Learning and development allowance
• Life insurance
• Wellbeing days
• Yulife perks and rewards
• Generous parental leave policies
• Family friendly policies
• Employee Assistance Programme (EAP)
• Cycle to Work scheme
• Workplace Nursery Benefit scheme
• Contribution towards switching to a renewable energy provider at home
• Regular lunch & learn sessions
• Office perks; regular team lunches

As part of our pre-employment screening process, we may undertake background checks on applicants who receive an offer of employment. We have in place appropriate policies and safeguards which we are required by law to maintain when processing vetting data.

SatVu in the news:

https://www.bbc.co.uk/news/science-environment-67010377

Equality, diversity and inclusion at SatVu

SatVu is committed to eliminating discrimination and encouraging diversity within our team. We strive to provide equality and fairness for all job applicants and employees, and never discriminate on the basis of gender, marital status, age, race, ethnicity, religion, or physical differences. We are opposed to all forms of unlawful treatment and discrimination.

Our ambition is for our team and its Board to be representative of the diversity in society, and for every employee to feel respected and able to bring their best selves to work.