Nuclear software assurance engineerSalary, qualifications, licensing and career path, 2026 edition
A nuclear software assurance engineer answers a critical question regulators demand: how do you know this software will perform the safety functions required by the nuclear quality assurance case, every time? Through independent verification and validation, static analysis, test-coverage evidence, configuration management, and qualification against IEC 60880 and 61508-3 standards, the role builds the strategic operating capability that lets safety-classified nuclear software systems be trusted with reactor protection. It is the quality assurance discipline behind every digital safety system in the nuclear and energy space.
Nuclear software assurance engineers earn a median of around $134,000 in the United States and roughly £52,000–£68,000 at mid to senior level in the UK, rising past £107,000 for a principal. Independent V&V and licensing-facing specialists sit at the top of the range.
No single licence is required. What gates the work is assurance competence and independence: SQEP designation or equivalent, security clearance, and the ability to produce software safety evidence a regulator will accept.
The role at a glance
Everything an employer will ask about in the first fifteen minutes of a screening call.
- Also called
- Software V&V engineer · IV&V engineer · software safety engineer · software qualification engineer · software quality engineer (nuclear) · quality assurance engineer
- Entry qualification
- BEng/BSc in computer science, software development, electronic or control engineering or a related technical field. Software development lifecycle knowledge and software engineering rigour are essential.
- Typical entry pay
- $81,000–$113,000 (US) · £31,000–£38,000 (UK graduate)
- Senior / principal pay
- $154,000–$212,000 (US) · £77,000–£107,000 (UK principal)
- Contract day rates
- £600–£790 for nuclear software assurance engineer roles; £720–£950 for independent V&V and safety-case work on Class 1E software outside IR35; $110–$175/hr on US assurance support
- Professional gate
- No licence. UK: SQEP designation for a defined assurance scope, often with CEng via the IET or BCS. Organisational independence from the development team and quality audits are integral components of the role.
- Security
- UK BPSS minimum, SC common, DV for some protection and defence work. US: unescorted access authorisation for site work; citizenship or lawful permanent resident status for DOE and naval programmes.
- Where the work sits
- I&C system suppliers, reactor vendors, independent assessment organisations, regulators and technical support organisations, or operating utilities. Strongly hybrid-friendly, since the work is analytical and involves project management and quality control.
- Travel
- Low. Assurance is largely desk-based, with audits, witness testing, internal audits and supplier assessments bringing occasional travel.
- TRX segments
- Large new build · New technology development · Operating fleet · Fusion · Fuel handling & fuel cycle · Radioactive waste management · Continuous improvement · Program development
Six versions of the same job title
"Software assurance engineer" changes with what is being assured: the protection-system software of a new reactor, a digital upgrade on an operating plant, or the tools and codes used to justify a design. Bar shows relative hiring volume across TRX's 2026 desk activity.
Large new build
Independent verification and validation of safety-classified software for a new reactor: protection systems, safety I&C and the digital platforms behind them, qualified to IEC 60880 and 61508-3 and defended in the safety case. Hinkley Point C, Sizewell C, AP1000 fleet.
New technology development
Software assurance for SMRs and advanced reactors, where more software-based safety systems, higher automation and newer platforms all need qualifying with less precedent to rely on. Rolls-Royce SMR, TerraPower, X-energy.
Operating fleet
Assuring the software in digital replacements installed on operating reactors, including platforms never originally designed for nuclear safety duty.
Fusion
Assurance for fusion machine-protection and control software, an area building its safety-software practice as devices grow toward power-producing scale. UKAEA, ITER, private fusion.
Fuel handling & fuel cycle
Assurance of safety-related software in fuel-cycle facilities, including criticality-related functions and the codes used in criticality and process safety analysis.
Radioactive waste management
Assurance of software in waste-facility safety and monitoring systems, and of the long-lived data systems these facilities depend on.
What the week actually looks like
A composite day for a mid-level software assurance engineer at a supplier, vendor or independent assessor, owning V&V for a safety-classified system. Desk-based and strongly hybrid, with audits and witness testing. Qualification milestones and regulatory submissions shape the rhythm — noted below.
What nuclear software assurance engineers are paid in 2026
Bars show the 25th to 90th percentile of base salary. The marker is the median. Switch currency to move between the US and UK markets, which behave differently.
How software assurance compares to adjacent roles
US figures. The nuclear engineer and software QA medians are BLS OEWS May 2025; the specialism ranges are TRX market analysis, because these are not separately coded by BLS.
| Occupation | Median | P10 | P90 | What moves the number |
|---|---|---|---|---|
| Nuclear software assurance engineer | $134,000 | $89,000 | $212,000 | Independent V&V of Class 1E software, IEC 60880, licensing, clearance |
| Software QA analysts and testers (all industries) | $102,610 | $63,000 | $165,000+ | The nuclear safety-software premium lifts assurance far above the general median |
| Reactor protection systems engineer | $135,000 | $90,000 | $214,000 | Designing the safety-classified trip system |
| Digital I&C modernisation engineer | $133,000 | $89,000 | $210,000 | Safety-system replacement, licensing-facing upgrades |
Sources: US BLS OEWS May 2025 for the coded occupations; TRX market analysis Q3 2026 for the specialism ranges. Nuclear software assurance engineers are coded under software QA analysts and testers or nuclear engineers by BLS, so no separate federal median exists. The gap against the general software QA median is the widest of any role in this family, and reflects how specialised nuclear safety-software assurance is.
Independent V&V of Class 1E software
Assuring software that performs a safety function is the most demanding assurance work in nuclear, and the engineers who can do it credibly are very scarce.
Licensing-facing assurance
Producing evidence that a regulator accepts, and defending it under challenge, is a rare skill that sits at the top of the range.
Tool and platform qualification
Qualifying development tools, compilers and pre-existing platforms for safety use is specialised, unglamorous and consistently short of people.
Three ways in, and only one of them starts with a nuclear degree
Software assurance draws from two directions: software engineers who move toward safety, and I&C engineers who move toward software. It is also one of the strongest crossovers from other safety-critical software sectors, where the standards differ but the discipline is the same.
Graduate, United Kingdom
Four to eight years to chartered and SQEP.
Graduate, United States
Four to eight years to senior.
Career changer
Six to twenty-four months, from safety-critical software or from I&C.
Are you actually ready to compete for a software assurance role?
Everything above tells you what the market pays and what it asks for. It does not tell you how your CV reads against the other engineers applying for the same V&V or assurance post, and in a field where safety-standard experience and accepted evidence decide offers, that is the part that costs candidates the job.
Free resume scoring on avua, TRX's job search and application platform. Your score is yours; it is not shared with employers.A strong QA CV can still miss the shortlist if it does not show safety-standard V&V rather than general software testing. The gap is the part you can fix.
Illustrative figures based on TRX shortlisting patterns across software assurance vacancies. Your own score is generated by avua from your CV and the role you are targeting.
The credentials that actually gate the work
Software assurance is not a licensed profession, but it carries a requirement no other role in this family has: formal independence from the team that wrote the software. Authority comes from competence assessment and that independence.
| Credential | Jurisdiction | Required for | Time | Notes |
|---|---|---|---|---|
| Organisational independence | All | Performing independent V&V | Structural | Not a credential but a formal requirement; assurance cannot report to development. |
| IEC 60880 / 61508-3 familiarity | All | Any safety-classified software assurance | Ongoing | The core nuclear software standards; deep knowledge is a hard expectation. |
| Assurance sign-off authority | US / UK | Approving V&V and qualification evidence | Role-specific | Internal, granted once competence for a defined scope is demonstrated. |
| SQEP designation | UK | Signing or approving assurance deliverables | Role-specific | Employer-assessed against a defined scope; not portable without reassessment. |
| CEng registration | UK / Commonwealth | Senior technical grades; expected for a principal | 4–7 yrs | Via the IET or BCS; competence report plus professional review. |
| Cross-sector safety standards | International | Recognised transferable competence | Varies | DO-178C, EN 50128 or ISO 26262 experience is valued and portable. |
| BPSS / SC / DV clearance | UK | Site access; protection and defence software | 2–20 wk | DV can take five months; safety-system software work often needs SC or DV. |
| Unescorted access authorisation | United States | Witness testing and site work | 4–10 wk | 10 CFR 73 background check; needed less often than for site roles. |
Requirements change with programme and site. Confirm the specific scope with the employer before assuming a credential transfers.
What appears on a 2026 nuclear software assurance engineering shortlist
Drawn from the software assurance requirement specifications TRX has worked in the last twelve months, ordered by how often each is a hard filter.
Named on the specification
- Verification and validation — The structured evidence that software meets its requirements and complies with nuclear quality assurance standards
- Safety software standards — IEC 60880, 61508-3, 61513, and ASME NQA-1-2015
- Requirements traceability — Every safety requirement traced through design, code, and test to support affordable nuclear energy
- Static analysis — Proving properties of code without running it, essential for lead auditor reviews
- Test coverage — What was exercised, what was not, and what that means for software safety justification
- Software engineering — Enough depth to review real code and real designs credibly, ensuring compliance with nuclear regulations
What decides between two shortlisted candidates
- Class 1E software V&V — Assurance of software performing a safety function, critical for legally authorized nuclear operations
- Licensing-facing assurance — Evidence a regulator accepts, defended under challenge during the hiring process
- Tool and platform qualification — Specialised and persistently short of people with a master's degree or equivalent experience
- Cross-sector standards — DO-178C, EN 50128 or ISO 26262 experience, highly portable and valued for qualified candidates
- Writing — In this discipline the documented argument is the entire deliverable, reflecting the ideal candidate's communication skills
- Formal methods — Mathematical proof of critical properties, rare and highly valued
The 2026 demand map
Assurance demand follows safety-classified software, so it tracks new build, the SMR wave and the fleet's digital upgrades. The work is analytical, so these are among the most location-flexible roles in the sector.
| Programme | Location | Phase in 2026 | Engineering demand |
|---|---|---|---|
| Hinkley Point C / Sizewell C | UK | Design, V&V and commissioning | Very high; protection and safety I&C software qualification |
| SMR fleet (Rolls-Royce SMR, X-energy, TerraPower) | UK, US & Canada | Design and licensing | Growing sharply; more software-based safety systems |
| US operating fleet | Nationwide | Digital upgrades | Continuous qualification work for replacement systems |
| I&C suppliers (Framatome, Westinghouse, Rolls-Royce) | Global | Cross-programme | In-house V&V teams across every programme above |
| Independent assessment organisations | UK & global | Cross-programme | Independent V&V and regulatory technical support |
| Regulators and TSOs (ONR, NRC support) | UK & US | Assessment | Assessing licensee software safety submissions |
| Engineering consultancies | Global | Cross-programme | Assurance engineers supplied across programmes |
| UKAEA / fusion | UK | Design and R&D | Machine-protection and control software assurance |
| Fuel-cycle facilities | Global | Operations and projects | Safety-related and criticality software assurance |
| Naval and defence programmes | UK & US | Sustained | Safety-software assurance (clearance-gated) |
Programme phases move. Confirm current status before making a relocation decision; TRX tracks these weekly.
Demand grows with every line of safety software.
Nuclear is steadily replacing analogue safety equipment with software-based systems, and every one of those systems needs qualifying, so assurance demand rises structurally rather than cyclically. SMRs intensify this further, since they lean harder on software-based safety and higher automation than the fleet they will join, and each new design needs its software argument built largely from scratch.
Why experienced assurance engineers have leverage.
This role needs genuine software depth combined with nuclear safety-case understanding, and that pairing is rare in both directions: most software engineers have never met a safety case, and most I&C engineers are not software specialists. With new build, the SMR wave and fleet upgrades all demanding qualified software at once, experienced nuclear software assurance engineers have strong and rising leverage.
Adjacent and onward roles
Assurance sits deliberately apart from the teams whose work it examines, but it connects to all of them. These are the moves TRX sees most often.
Questions we get asked every week
How much does a nuclear software assurance engineer earn in 2026?
In the United States the market runs from about $81,000 for a graduate to $134,000 at the median, with principals past $212,000. In the UK it runs from £31,000–£38,000 for a graduate to £82,000–£107,000 for a principal. That median sits far above the general software QA market, reflecting how specialised nuclear safety-software assurance engineer roles are, and contract engineers bill £720–£950 a day outside IR35 for Class 1E software V&V.
Do you need a licence to work as a nuclear software assurance engineer?
No profession-wide licence exists, and this role has an unusual requirement instead: formal independence from the team that developed the software. Beyond that, deep IEC 60880 / 61508-3 knowledge is essential, and in the UK SQEP designation for a defined assurance scope is the practical gate. Familiarity with ASME NQA-1-2015 and regulatory frameworks is also critical.
Can you become a nuclear software assurance engineer without a nuclear degree?
Yes, and there are two strong routes in. Safety-critical software engineers from aerospace (DO-178C), rail (EN 50128), automotive (ISO 26262) or medical devices convert well, because the discipline is the same even though the standards differ. I&C engineers with software depth also convert, bringing plant knowledge that pure software engineers lack. The nuclear-specific part is IEC 60880 and how software claims fit a nuclear safety case, including understanding DOE O 414.1D and DOE G 414.1-4 quality assurance guidance.
Is nuclear software assurance a good career in 2026?
It is one of the more structurally growing careers in the nuclear industry, because nuclear keeps replacing analogue safety equipment with software-based systems and every one needs qualifying, while SMRs lean on software-based safety even harder. The honest caveat: it is evidence-driven, document-heavy work, and it means examining other engineers' work rather than creating systems yourself, which suits people who enjoy rigour and regulatory compliance more than design.
What is the difference between a software assurance engineer and a reactor protection systems engineer?
A reactor protection systems engineer designs the safety-classified system that trips the reactor, including its architecture, logic and redundancy. A nuclear software assurance engineer independently verifies and validates the software inside such systems and builds the evidence that it will perform its safety function. Put simply, one builds the safety system and the other proves its software can be trusted. The separation is deliberate and often formally required: assurance must be independent of development, so the people writing safety software cannot be the only ones judging whether it is adequate.
Which software assurance skills are most in demand in 2026?
Independent V&V of Class 1E software leads, because software performing safety functions is the hardest thing in nuclear to justify. Close behind is licensing-facing assurance and tool and platform qualification, which is persistently short of people. V&V, the safety software standards (IEC 60880, 61508-3), requirements traceability and static analysis are the near-universal hard filters. Knowledge of defect management and nuclear regulatory compliance frameworks like 10 CFR Part 50 Appendix B is increasingly sought.
We only recruit in nuclear. That is the whole point.
TRX works across large new build, fusion, new technology development, decommissioning, radioactive waste management and nuclear medicine, in 14+ countries. Send us your CV and we will tell you honestly which assurance path your experience actually fits, and what it is worth.