Job Description

We use cookies to offer you the best possible website experience. Your cookie preferences will be stored in your browser's local storage. This includes cookies necessary for the website's operation. Additionally, you can freely decide and change any time whether you accept cookies or choose to opt out of cookies to improve the website's performance, as well as cookies used to display content tailored to your interests. Your experience of the site and the services we are able to offer may be impacted if you do not accept all cookies. Let me choose
Reject additional cookies Accept additional cookies
Press Tab to Move to Skip to Content Link
SEARCH JOBS
APPLY NOW
Start
Please wait...
Principal Software Engineer

Job Requisition ID: 24723
Job Closing Date: 24/10/2025
Glasgow, GBR, G511DA
| London, GBR, W1A 1AA
| Salford, GBR, M50 2QH
JOB DETAILS
JOB BAND: D
CONTRACT TYPE: Permanent, Full-time
DEPARTMENT: Engineering Enablement
LOCATION: Cardiff, Salford, London, Glassgow - Hybrid
PROPOSED SALARY RANGE: up to 82,500 depending on relevant skills, knowledge and experience. The expected salary range for this role reflects internal benchmarking and external market insights.
We're happy to discuss flexible working. If you'd like to, please indicate your preference in the application - though there's no obligation to do so now. Flexible working will be part of the discussion at offer stage.
PURPOSE OF THE ROLE
Join the BBC's Engineering Enablement team to shape secure digital delivery at scale. As a Principal Software Engineer - Security Engineer, you'll embed secure-by-design practices across cloud platforms and applications, translating InfoSec strategy into real-world impact that protects trusted services reaching millions globally.
WHY JOIN THE TEAM
Join a high-trust role with real impact, working hands-on with engineering teams to deliver safely at scale. Be part of Engineering Enablement-a team that makes secure, high-velocity delivery possible through shared cloud platforms, developer tooling and guardrails. Enjoy excellent career progression, unrivalled training and development opportunities, and a culture that values openness, collaboration and learning. Help shape secure systems behind trusted BBC services reaching over 500 million people every week.
YOUR KEY RESPONSIBILITIES AND IMPACT:

• Drive secure-by-design implementation across infrastructure and applications, ensuring delivery aligns with BBC security policy and architectural guidance.
• Promote secure SDLC practices across engineering teams, collaborating with InfoSec on shared tooling, templates and enablement.
• Help teams adopt secure coding standards and integrate automated security checks (SAST, DAST, dependency scanning) into CI/CD pipelines.
• Act as a bridge between InfoSec and delivery teams - supporting direct collaboration, not acting as a gatekeeper.
• Champion secure development and operations practices, coaching teams and scaling adoption through reusable patterns and guidance.

YOUR SKILLS AND EXPERIENCE
ESSENTIAL CRITERIA:

• You have a strong track record in software engineering with a focus on application and infrastructure security, ideally in agile or DevOps environments.
• You're fluent in secure development concepts - comfortable with OWASP Top 10, CWE and common secure design patterns.
• You've helped teams adopt secure SDLC practices, working closely with central security or architecture groups.
• You've worked with complex, multi-tenant cloud platforms - ideally on AWS - and understand shared services, infra-as-code and central governance models.
• You collaborate naturally, earning trust from delivery teams and central stakeholders alike.

DESIRED BUT NOT REQUIRED:

• Facilitated or contributed to threat modelling sessions using frameworks like STRIDE or DFDs.
• Reviewed designs and code with a security lens and an eye for policy alignment.
• Navigated delivery in regulated, public service or high-trust environments.
• Been involved in incident response or risk assessment processes.

If you can bring some of these skills and experience, along with transferable strengths, we'd love to hear from you and encourage you to apply.
Before your start date, you may need to disclose any unspent convictions or police charges, in line with our Contracts of Employment policy. This allows us to discuss any support you may need and assess any risks. Failure to disclose may result in the withdrawal of your offer.
Disclaimer
This job description is a written statement of the essential characteristics of the job, with its principal accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved.
Please note: If you were to be offered this role, the BBC will conduct Employment screening checks which include Reference checks; Eligibility to work checks; and if applicable to the role, Safeguarding and Adverse media/Social media checks. Any offer made is conditional on these checks being satisfactory.
For any general queries, please contact:
Redeployment
The BBC is committed to redeploying employees seeking suitable alternative employment within the BBC and they will be given priority consideration ahead of other applicants. Priority consideration means for those employees seeking redeployment their application will be considered alongside anyone else at risk of redundancy, prior to any individuals being considered who are not at risk.
Information at a Glance
This is your BBC
At the BBC you can create and innovate in an inclusive environment while contributing to some of the world's best loved content, and the BBC's mission to inform, educate and entertain.
Life at BBC
Here you will benefit from:

• Fair pay and flexible benefits including a competitive salary package, a flexible 35-hour working week, 25 days annual leave with the option to buy an extra 5 days, a defined pension scheme and discounted dental, health care and gym.
• Excellent career and professional development.
• Support in your working life, including flexible working which you can discuss with us at any point during the application, selection or offer.
• A values-based organisation where the way we do things is important as what we do.

Benefits may vary if you are joining on an FTC basis.
Learn more about life at the BBC and our values in our candidate pack.
You belong
We have a working environment where we value and respect every individual's unique contribution, so all our employees feel that they can belong, thrive and achieve their full potential.
We want to attract the broadest range of talented people to join us. The more diverse our workforce, the better able we are to respond to and reflect our audiences in all their diversity.
We welcome applications from individuals, regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion and/or belief.
Find out more about diversity, inclusion and belonging in our strategy below.
Disability confident
We are a disability confident employer. If you need to discuss adjustments or access requirements for the interview process, or to carry out this role, please contact us via email and we'd be happy to discuss:
APPLY NOW
Start
Please wait...
#BBCPUBLICSERVICE
BBC Group and Public Services, Broadcasting House, Portland Place, London, United Kingdom, W1A 1AA. BBC Studios Distribution Limited, company no: 01420028, registered address: 1 Television Centre, 101 Wood Lane, London, United Kingdom W12 7FA.
x
Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Required Cookies
These cookies are required to use this website and can't be turned off.
Show More Details
Required Cookies Provider Description Enabled
SAP as service provider
We use the following session cookies, which are all required to enable the website to function:

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data centre
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
• "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another

Functional Cookies
These cookies provide a better customer experience on this site, such as by remembering your login details, optimising video performance or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies.
Show More Details
Functional Cookies Provider Description Enabled
Vimeo
Vimeo is a video hosting, sharing and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos.
YouTube
YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos.
Advertising Cookies
These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies.
Show More Details
Advertising Cookies Provider Description Enabled
LinkedIn
LinkedIn is an employment-oriented social networking service. We use the Apply with LinkedIn feature to allow you to apply for jobs using your LinkedIn profile. Opting out of LinkedIn cookies will disable your ability to use Apply with LinkedIn.

Skills Required