1 to 25 of 80 NCSC Jobs in the UK excluding London

Container & DevSecOps - Kubernetes (EKS, Tanzu), Terraform, Ansible, CI/CD security, image scanning, container hardening Architecture Frameworks - TOGAF, ArchiMate, SABSA, Zachman, MODAF, JSP standards, NCSC architectural patterns HLD/LLD authoring, Security Patterns, Reference Architectures, Bill of Materials, Crypto Plans and JSP-compliant documentation Design Authority leadership, Technical Security Boards ...

security qualification such as CISSP, CCSK or CCSP. It would be great if you had: Knowledge of security architecture frameworks and methodologies, including: NIST. NCSC guidance. SABSA. Understanding of Secure by Design principles. Experience across one or more security domains, such as: Identity & Access Management (IAM). Infrastructure. Security. Data ...

Conduct security assessments, vulnerability reviews, and compliance audits against corporate and government security standards. Support risk treatment planning and remediation activities. Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable. Support incident response investigations affecting classified systems. Assist with vulnerability management, patch management ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+, CEH, CKS, CKA or similar certifications Please note: Active SC Clearance is essential for this position, along with ...

complex security solution, writing high level designs encompassing both cloud and on premise environments. Understanding and awareness of industry frameworks such as NIST, NCSC CAF, CIS, IEC 62443. Plus knowledge of the NIS-R Directive and PCI DSS would be advantageous. Ability to evaluate and propose solutions and technologies within ...

measurable value for clients. Essential qualifications and experience: ~You should have experience developing cyber security policies, standards and procedures. ~Strong knowledge of ISO 27001, NCSC CAF, NIST and Cyber Essentials/Cyber Essentials Plus. ~Experience in security governance, risk management and assurance. ~Good understanding of data protection and privacy principles. ...

security qualification such as CISSP, CCSK or CCSP. It would be great if you had: Knowledge of security architecture frameworks and methodologies, including: NIST. NCSC guidance. SABSA. Understanding of Secure by Design principles. Experience across one or more security domains, such as: Identity & Access Management (IAM). Infrastructure. Security. Data ...

mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC) Ensure architectural traceability from requirements through to controls and implementation Develop and lead the security architecture practice Mentor, coach, and upskill security architects and consultants Define ...

emphasis on balancing security needs with useability and reducing user friction. Technical Mastery: Knowledge of security frameworks (e.g. ISO 27001, NIST, and/or NCSC guidance), security risk management, security architecture, and best practices for safeguarding sensitive assets. Regulatory Compliance: Familiarity with UK legislation, standards, and protocols. Incident Management: Demonstrable ...

project lifecycle from bid through delivery and into service.### ### Desirable Experience* Post-Quantum Cryptography (PQC) planning and migration.* Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards.* Scripting and automation using PowerShell, Python, or Bash.* Identity & Access Management (IAM) integration.* Critical National Infrastructure (CNI) or Operational ...

architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D You will ideally hold CISM/CISSP or similar higher ...

support the implementation of proportionate remediation and security improvements. Knowledge of recognised cyber security frameworks, standards and guidance, such as DSPT, CAF, CIS Controls, NCSC guidance or NIST, and experience of supporting compliance or assurance activity. Ability to communicate technical cyber security information clearly to a range of audiences ...

small security budget. Essential experience/skills Cyber security leadership/management experience within a public sector, regulated, or complex enterprise environment. Knowledge of NCSC-aligned security principles and practical governance/assurance approaches. Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks ...

Chartered Institute of Information Security (CIISec) - highly desirable. · Chartered or Principal status via the UK Cyber Security Council for Secure Systems Architecture. · NCSC Certified Cyber Professional in Security Architecture. · IEng or CEng registered with UK Engineering body. · Chartership through the British Computer Society. · SABSA Chartered Security Architect Other Information Market ...

mitigate or remediate findings. Working knowledge of container and Kubernetes security, image hardening, admission controls, runtime protection. Familiarity with UK government security frameworks (GovAssure, NCSC Cyber Assessment Framework, HMG SPF) Experience contributing reusable security patterns, tooling, or paved-road templates back into an engineering practice. Evidence of mentoring engineers ...

security technologies including Identity & Access Management, remote access solutions, SIEM, software‐defined networking or data integration platforms. Awareness of industry standards including IEC 62443, NCSC Cyber Assessment Framework (CAF), NIS/NIS2 and related frameworks. Experience with architecture modelling tools such as Bizzdesign or similar. TOGAF or equivalent architecture methodology. ...

programmes, such as AWS APN and Azure Partners Experience with well‐architected frameworks Knowledge of UK public‐sector technology guidance and frameworks, such as NCSC’s Cyber Assessment Framework (CAF) and the Technology Code of Practice (TCoP) Familiarity with Python, Bash and JavaScript Agile practices such as Scrum ...

/CD pipeline design (e.g., Jenkins, GitHub Actions). Security Knowledge: Comprehensive understanding of secure‐by‐design principles, cloud security guidance (e.g., NCSC), and government security classifications (OFFICIAL, OFFICIAL‐SENSITIVE). Communication & Artefacts: A proven track record of producing high‐quality architectural artefacts (C4 models, ADRs) and confidently translating complex ...

programs, such as AWS APN and Azure Partners Experience with well-architected frameworks Knowledge of UK public sector technology guidance and frameworks, such as NCSC's Cyber Assessment Framework (CAF) and the Technology Code of Practice (TCoP) Familiarity with Python, Bash and JavaScript Agile practices such as Scrum ...

communication skills are key for this role, and you'll have a knowledge of security standards and processes such as ISO 27001 standards, (NCSC) CAF, Cyber Essentials, NIST and Cyber Essentials/Plus. We'll also look for your experience in: ● Developing cyber policy and procedures ● Data protection and privacy ...

architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire to work ...

architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire to work ...

architecture, cyber transformation and regulatory compliance for cyber. Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2. Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk. Desire to work ...