Researcher Ref. 2933
At GCHQ, we unlock the complex world of data and communications to keep the UK and its citizens safe, both in the real world and online. Working closely with our British Intelligence partners in MI5 and MI6, we protect the UK from threats including serious organised crime, terrorism, and cyber-attacks. A role in GCHQ means you’ll have varied and fascinating work in a supportive and encouraging environment that puts the emphasis on teamwork.
This is a chance to join a specialist team investigating non-Western technology stacks. As a Researcher, you’ll be trained to design research tasks and explore features, characteristics, and dependencies within global software, focusing on non-Western software.
The field of software analysis is large, and there’s scope to bring your own area of interest to the advancement of software analysis techniques. Your work will add to our understanding of the non-Western software ecosystem, including cultures, practices, and technical capabilities. With this insight, we can make informed decisions about potential future direction and intentions.
Day-to-day, you’ll be designing and implementing techniques for software analysis; conducting experiments on data using cloud technology; and evaluating tools and techniques. Some roles are focused on mobile devices, so you could also be analysing eSIM capabilities. Whether working independently, with colleagues, with international research agencies, or with industry partners, you’ll share findings, and stay up to date with research in the field.
We accommodate hybrid flexible working; however, you will need to be office based at least 2-3 days per week. We may also ask you to travel occasionally to overseas and domestic locations for workshops, conferences, training, and meetings. Longer stays (up to around 8 weeks) for workshops may be possible at international locations.
This is a junior role, and we’re committed to providing all the training you need. However, you must have an interest in either software/firmware analysis techniques or mobile enabled embedded devices (for eSIM research). Additional expertise in any of the following would also be beneficial.:
- Software testing using static and dynamic analysis tools
- Reverse engineering and vulnerability research
- Mobile devices (apps and kernels) and Network protocols
- SDKs for embedded hardware development
You’ll need a STEM degree (Bachelors, Masters or PhD) or equivalent professional experience, plus programming and software development skills in a modern language (e.g. Python, Java, C, C++). You’ll approach work innovatively but with a disciplined approach to developing and testing ideas.
Perhaps you’ve worked in software testing, reverse engineering, synthetic data generation, or vulnerability research. Whatever your background, you’ll bring a questioning mindset and a gift for critical thinking.
Training and Development
Join us, and you can expect a full welcome pack and introduction to our team. We also offer ‘early days’ training to help you get up to speed in specific areas (e.g. software reverse engineering, data science, cloud development). In our multi-disciplinary team, you’ll enjoy on-the-job training in new areas, while sharing your own expertise. We’ll even give you a buddy or mentor to help you settle in.
We offer an extensive range of training and development courses, as well as support for external courses/online learning and workshops. To help you expand your knowledge into other areas of cybersecurity, there may be the chance to attend industry conferences. All training is tailored to your specific requirements, thanks to your continuous personal development programme. There’s also the potential to gain qualifications if they’ll help you in your role.
You’ll receive a starting salary of between £32,092 - £35,234 with potential to qualify for specialist skill payment of up to £7,800 per annum in the future. You will receive an additional one-off recruitment bonus, plus other benefits including:
- 25 Days' Annual Leave automatically rising to 30 days after 5 years' service, and an additional 10.5 days public and privilege holidays
- Opportunities to be recognised through our employee performance scheme
- Interest-free season ticket loan
- Excellent pension scheme
- Cycle to work scheme
- Facilities such as a gym, restaurant and on-site coffee bars (at some locations)
- Paid parental and adoption leave.
At GCHQ, diversity and inclusion are critical to our mission. To protect the UK, we need a truly diverse workforce that reflects the society we serve. This includes diversity in every sense of the word: those with different backgrounds, ages, ethnicities, gender identities, sexual orientations, ways of thinking and those with disabilities or neurodivergent conditions. We therefore welcome and encourage applications from everyone, including those from groups that are under-represented in our workforce such as women, those from an ethnic minority background, people with disabilities and those from low socio-economic backgrounds.
Find out more about our culture, working environment and diversity on our website:
We’re Disability Confident
GCHQ are proud to have achieved Leader status within the DWP’s Disability Confident scheme. This is aimed at encouraging employers to think differently about disability and take action to improve how they recruit, retain and develop disabled people. Being Disability Confident, we aim to offer a person-to-person interview to any candidate who self-identifies as disabled and meets the essential criteria for the role. This is our ‘Offer of Interview’ (OOI). To secure an interview for this vacancy, the essential criteria (in order of application process) are:
- STEM graduate qualification, 2:2 or above, or equivalent period of professional experience
- Post graduate experience, or an extended period of professional experience : in a relevant field to software analysis
- Able to demonstrate proficiency in high level language programming (e.g. skills in Python, C, C++ or Java)
- Able to demonstrate interest and/or experience in software/firmware analysis techniques
- Able to demonstrate effective communication with a range of people
What to Expect
Our recruitment process is fair, transparent, and based on merit. Here is a brief overview of each stage, in order:
• Application sift, looking at your skills, experience, expertise and knowledge in relation to the essential criteria
• Interview, looking at your motivation for the role and the organisation and diving deeper into your previous experience and what skills and experience you would bring to the role
• If successful, you will receive a conditional offer of employment, subject to vetting
Please note, you must successfully pass each stage of the process to progress to the next. Your application may take around 6 - 9 months to process including vetting, so we advise you continue any current employment until you have received your final job offer.
Before You Apply
To work at GCHQ, you need to be a British citizen or hold dual British nationality. You can read our full eligibility criteria here.
This role requires the highest security clearance, known as Developed Vetting (DV). It’s something everyone in the UK Intelligence Community undertakes. You can find out more about the vetting process here.
Please note we have a strict drugs policy, so once you start your application, you can’t take any recreational drugs and you’ll need to declare your previous drug usage at the relevant stage.
The role is based in Cheltenham, so you’ll need to live within a commutable distance of one of those locations. Please consider any financial implications and practicalities before submitting an application, as we do not offer relocation costs.
Please note, you should only launch your application from within the UK. If you are based overseas, you should wait until you visit the UK to launch an application. Applying from outside the UK will impact on our ability to progress your application. You should not discuss your application, other than with your partner or a close family member.
Right to Withdraw Statement:
Please be aware that we reserve the right to bring forward the closing date for this role from the original closing date once a certain number of applications have been received. Please be mindful of this and submit your application at your earliest convenience to avoid disappointment.
This Program / Vacancy is closed to applications.