51 to 75 of 75 NCSC Jobs in England

hardware, software or embedded system solutions. Desirable INCOSE CSEP or ESEP accreditation. Experience acting as a technical Subject Matter Expert (SME). Knowledge of NCSC security processes and associated security artefacts. What's on Offer Salary of £75,000–£95,000 Annual bonus scheme Private medical insurance Pension contribution ...

Deep experience with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security, or equivalent Desirable ...

Deep experience with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security, or equivalent Desirable ...

continued evolution of our Local Digital Cyber Risk capability, helping to mature reporting processes, strengthen risk insights, and enhance the use of the NCSC Cyber Assessment Framework (CAF) to support informed decision-making across the sector. You will be a fundamental member of the team, responsible for leading cyber risk … Supporting the continued development and maturity of the Local Digital Cyber Risk function through the enhancement of metrics, reporting frameworks, and governance structures. Analysing NCSC Cyber Assessment Framework (CAF) returns to identify themes, trends, and actionable risk insights that inform decision-making and prioritisation. Planning and executing assessments to determine ...

triage, escalation, investigation and case management. Develop evidence management processes and structured incident lifecycles. Align workflows with Cyber Operations requirements, industry best practice and NCSC-aligned incident response processes. Test, refine and optimise workflows to improve operational efficiency. Essential Skills Strong experience implementing and configuring ServiceNow Security Incident Response ...

Design, NIST 800 series and security risk assessments. Experience producing security documentation and managing security assurance activities. Familiarity with Defence Security Standards and NCSC/CESG guidance is desirable. Desirable Skills: DevSecOps Risk Management Defence or MOD experience ...

access management requirements for shipboard systems. Support the definition and validation of secure architecture patterns across onboard and supporting environments. Apply relevant MOD, NCSC, defence, and maritime security frameworks to support assurance, accreditation, and compliance activities. Maintain and support security risk registers, ensuring risks are clearly articulated, owned, treated, tracked … Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer/Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF-related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would ...

access management requirements for shipboard systems. Support the definition and validation of secure architecture patterns across onboard and supporting environments. Apply relevant MOD, NCSC, defence, and maritime security frameworks to support assurance, accreditation, and compliance activities. Maintain and support security risk registers, ensuring risks are clearly articulated, owned, treated, tracked … Suitable qualifications may include BSc, MSc, CISSP, CISM, CRISC, CISA, CCP, ISO 27001 Lead Implementer/Lead Auditor, Security+, CySA+, SABSA, TOGAF, IEC 62443, NCSC CAF‐related experience or equivalent professional experience. Experience working within UK MOD, defence, maritime, shipbuilding, naval, critical national infrastructure or operationally critical environments would ...

major technology company, or relevant government department. Ability to engage credibly with, executive stakeholders across UK government departments (e.g. DSIT, MOD, NCSC, Cabinet Office), NATO, Five Eyes partners, and key European counterparts. Excellent written and verbal communication skills, with the ability to translate complex technical concepts for policy audiences ...

available to enable decision making Engage with IAG group peers, the wider aviation industry and UK critical infrastructure and government bodies such as NCSC Manage and deliver on threat intelligence requirements and end to end intelligence lifecycle Engage collaboratively and pragmatically with BA/IAG stakeholders to undertake cyber threat ...

available to enable decision making Engage with IAG group peers, the wider aviation industry and UK critical infrastructure and government bodies such as NCSC Manage and deliver on threat intelligence requirements and end to end intelligence lifecycle Engage collaboratively and pragmatically with BA/IAG stakeholders to undertake cyber threat ...

available to enable decision making Engage with IAG group peers, the wider aviation industry and UK critical infrastructure and government bodies such as NCSC Manage and deliver on threat intelligence requirements and end to end intelligence lifecycle Engage collaboratively and pragmatically with BA/IAG stakeholders to undertake cyber threat ...

shared engineering responsibility rather than a specialist handover at the end of a sprint. Navigate UK government security standards with confidence. Apply the NCSC Cyber Assessment Framework, GovAssure, Cyber Essentials, HMG Security Policy Framework, and relevant legislation (UK GDPR, NIS Regulations) proportionately across engagements — framing standards as guardrails that enable … expect every candidate to bring all of these. Certifications Certified in Risk and Information Systems Control (CRISC) Certified Information Security Manager (CISM) NCSC Certified Cyber Professional (CCP) Capabilities and experience Experience establishing and operating vulnerability management programmes at organisational scale — including risk-based prioritisation using EPSS, KEV, and asset criticality ...

across multiple critical systems Specify, interpret and assess compliance with technical and organisational security controls Conduct and support cyber security risk assessments Apply the NCSC Cyber Assessment Framework and relevant government assurance standards Support GovAssure activities, including evidence gathering and compliance assessment Produce clear risk reports, assurance documentation and recommendations … hands-on engineer Current SC or DV clearance You will be customer facing Desirable Experience Critical National Infrastructure, government, defence or national security experience NCSC Cyber Assessment Framework GovAssure Security accreditation methodologies and documentation Cloud security across Microsoft Azure or AWS Secure architecture and enterprise security frameworks Useful qualifications ...

complex Operational Technology (OT/SCADA) environments. Embeds "security by design" across critical national infrastructure while aligning controls with ISO 27001, NIST, and NCSC CAF standards. About the Role My client is recruiting a experienced Cyber Security Architect to lead the design and evolution of secure technology solutions across … network engineering, and OT teams to ensure security patterns are pragmatic and operational. Align controls with recognised frameworks including ISO 27001, NIST CSF, and NCSC Cyber Assessment Framework (CAF). What We Are Open To Proven experience in technical security architecture within enterprise or industrial settings. Strong grasp of network ...

principles, ensuring collaboration on shared tooling, intelligence and incident coordination. - Represent the Trust and ICS on regional and national cyber forums, ensuring alignment with NCSC, NHS England Cyber Operations Centre (CSOC) and DHSC guidance. Operational Management - Lead and develop the Cyber Security Team to deliver proactive monitoring, detection, response … including vulnerability management, penetration-testing remediation, phishing simulations and user awareness campaigns. - Maintain robust incident-response plans compliant with Data Security Protection Toolkit and NCSC guidance, ensuring all major incidents are logged, triaged and reported within mandated timescales. - Coordinate technical response during cyber events, acting as joint Incident Manager ...

network environments. Working alongside infrastructure, network and systems engineering teams, you will ensure solutions are secure by design and compliant with MOD and NCSC security standards. You'll play a key role in security assurance, risk management and accreditation activities throughout the project lifecycle. Responsibilities Design and develop security architectures … Support security assurance, accreditation and governance activities. Work closely with infrastructure, network and engineering teams to embed security throughout delivery. Ensure compliance with MOD, NCSC and industry security standards. Provide technical guidance on secure infrastructure, identity, cryptography and boundary protection technologies. Essential Skills & Experience Proven experience as a Security Architect ...

that leaves things better than you found them. You'll translate threat intelligence into actionable detections, align your work to frameworks like the NCSC Cyber Assessment Framework and GovAssure, and communicate clearly with client security stakeholders who need to understand what's happening and why it matters. You'll help … into improved detection content, hardening, or runbook coverage; Align security operations to UK public sector standards - ensure investigations, evidence handling, and detection coverage reflect NCSC CAF Objective C, GovAssure requirements, and lawful-monitoring obligations; feed gaps back into risk governance. Mentor junior analysts and raise team standards - pair deliberately ...

that leaves things better than you found them. You'll translate threat intelligence into actionable detections, align your work to frameworks like the NCSC Cyber Assessment Framework and GovAssure, and communicate clearly with client security stakeholders who need to understand what's happening and why it matters. … consistency without removing human judgement where it matters. Align security operations to UK public sector standards - ensure investigations, evidence handling, and detection coverage reflect NCSC CAF Objective C, GovAssure requirements, and lawful-monitoring obligations; feed gaps back into risk governance. Mentor junior analysts and raise team standards - pair deliberately ...

delivering experience with leading security and healthcare assurance frameworks, including the NHS Data Security and Protection Toolkit and Cyber Assessment Framework (DSPT-CAF), National Cyber Security Centre Cyber Assessment Framework (NCSC CAF), ISO27001:2013/2022, NIST Cyber Security Framework and other relevant regulatory or assurance requirements. Advising healthcare organisations ...

technical interface for client security stakeholders, translating what the SOC is seeing into the language that informs decisions. You'll align your work to NCSC guidance, the Cyber Assessment Framework, and OFFICIAL handling requirements not because compliance is the goal, but because those frameworks reflect the real risk environment your … help grow a bench of analysts who can operate at the same standard. Own the threat-landscape narrative for your engagement turn intelligence from NCSC advisories, sector feeds, and threat actor reporting into hunt themes, coverage gap analysis, and detection priorities that the SOC and client stakeholders can act on. ...

what the SOC is seeing into the language that informs decisions. The UK public sector context matters here. You'll align your work to NCSC guidance, the Cyber Assessment Framework, and OFFICIAL handling requirements - not because compliance is the goal, but because those frameworks reflect the real risk environment your … train L1/L2 analysts to write and tune detections themselves. Own the threat-landscape narrative for your engagement - turn intelligence from NCSC advisories, sector feeds, and threat actor reporting into hunt themes, coverage gap analysis, and detection priorities that the SOC and client stakeholders can act on. ...

technical domains. Design end-to-end solutions spanning networks, cloud, identity, endpoint, backup, security, safeguarding, compliance and operational monitoring using reference architectures and DfE, NCSC and KCSIE guardrails. Produce and defend high-quality proposal content including solution overviews, HLDs, diagrams, SOWs, scope, assumptions, responsibilities and acceptance criteria. Present recommendations confidently … part of a wider "One Team". Nice to have: Previous experience working in or closely aligned to the education sector with understanding of NCSC, DfE and KCSIE standards. If not, your ability to understand educational outcomes and translate them into effective IT solutions is what counts. What we offer ...

Assessments. Framework Breadth: Good, Practical Understanding of IASME Cyber Essentials/CE+, Cyber Assurance & ISO 27001. You should also be comfortable Mapping Controls against NCSC Cyber Assessment Framework (CAF) & NIST Guidelines for more Complex Client Environments. Policy Writing: You can write Clear, Practical Security Policies that reflect how people actually … Cyber Essentials, Cyber Essentials+, IASME Cyber Assurance Assessments & ISO 27001 projects. Conduct Thorough Gap Analyses & Internal Audits, seamlessly Cross-Referencing Standards like NIST & NCSC CAF where appropriate. Learn & Grow: Partner with the Founders on Complex Accounts. They will Provide Dedicated Mentorship, Sharing their Insights to Sharpen Your Consulting Expertise. Guide ...

What You’ll Bring Hashands‐on experienceofdevelopingrobustsecurity riskmanagement system for complex high integrity electronics systems. Familiarity with Legislation – e.g.IPA, DPA, Official Secrets Act. Registered NCSC Certified Professional at lead level, or equivalent NCSC recognised qualification. Knowledge of UK/NATOInformation Assurancestandards, procedures & systems, including HMGSecurity PolicyFramework, ISOsecurity standards, DO326A. Familiarity … with the principles of incident investigation and how to implement an investigation process. Practical experience of NCSC andCommon Criteriasecurity evaluation techniques. Knowledge of current Crypto technologies,Key ManagementSystems & practicalCOMSECimplementations. Regularly delivered training courses within a Company and delivered awareness presentations to other groups. Awareness of product security implications relating ...