226 to 250 of 285 NCSC Jobs in the UK

several established European VCs, following an earlier seed round. Around 22m raised in total. Enterprise and defence customers including allied governments. Alumni of the NCSC for Startups programme. Around 20 people. This is frontier work, not a product team maintaining someone else's platform. THE ROLE, SECURITY RESEARCHER The clearest ...

Citation Cyber is a leading UK cyber security consultancy delivering penetration testing, certification, consultancy, training and managed services. We are a NCSC CHECK provider and CREST member expanding our penetration testing team. We welcome CTMs or experienced testers to join our growing practice. You will work as part ...

making, robust governance and continuous improvement. Working closely with internal stakeholders, government security partners and industry-leading organisations including the National Cyber Security Centre (NCSC) and National Protective Security Authority (NPSA), you will contribute to building a resilient and secure digital environment that supports UKHSA's critical mission. This role … mitigation plans, ensuring risks are accurately recorded and managed. Help maintain the Cyber Risk Management Framework and assess risks against recognised standards, including SPF, NCSC guidance, ISO 27001 and NIST-aligned approaches. Produce cyber risk reports, analysis and briefings for senior leaders and assurance forums. Support cyber assurance activities across ...

making, robust governance and continuous improvement. Working closely with internal stakeholders, government security partners and industry-leading organisations including the National Cyber Security Centre (NCSC) and National Protective Security Authority (NPSA), you will contribute to building a resilient and secure digital environment that supports UKHSA's critical mission. This role … mitigation plans, ensuring risks are accurately recorded and managed. Help maintain the Cyber Risk Management Framework and assess risks against recognised standards, including SPF, NCSC guidance, ISO 27001 and NIST-aligned approaches. Produce cyber risk reports, analysis and briefings for senior leaders and assurance forums. Support cyber assurance activities across ...

making, robust governance and continuous improvement. Working closely with internal stakeholders, government security partners and industry-leading organisations including the National Cyber Security Centre (NCSC) and National Protective Security Authority (NPSA), you will contribute to building a resilient and secure digital environment that supports UKHSA's critical mission. This role … mitigation plans, ensuring risks are accurately recorded and managed. Help maintain the Cyber Risk Management Framework and assess risks against recognised standards, including SPF, NCSC guidance, ISO 27001 and NIST-aligned approaches. Produce cyber risk reports, analysis and briefings for senior leaders and assurance forums. Support cyber assurance activities across ...

making, robust governance and continuous improvement. Working closely with internal stakeholders, government security partners and industry-leading organisations including the National Cyber Security Centre (NCSC) and National Protective Security Authority (NPSA), you will contribute to building a resilient and secure digital environment that supports UKHSA's critical mission. This role … mitigation plans, ensuring risks are accurately recorded and managed. Help maintain the Cyber Risk Management Framework and assess risks against recognised standards, including SPF, NCSC guidance, ISO 27001 and NIST-aligned approaches. Produce cyber risk reports, analysis and briefings for senior leaders and assurance forums. Support cyber assurance activities across ...

large-scale infrastructure, transformation or integration programmesPractical knowledge and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelinesExperience identifying sales opportunities and supporting Public Sector RFP/RFI/tender responses. Good knowledge of networking (switching, routing, firewalls)Experience ...

applications align with appropriate security standards and best practice Work with frameworks and standards including Cyber Essentials, ISO 27001, SOC 2, GDPR and NCSC guidance Apply security principles across network infrastructure, applications and systems Monitor and improve system resilience, performance and operational integrity Support log management, archiving and retention processes … with vulnerability management, patching and security remediation Knowledge of the MITRE ATT&CK Framework and common attack techniques Experience applying security standards such as NCSC guidance, CIS benchmarks or Microsoft Security Baselines Understanding of data classification, secure storage and access controls Experience working within an ITIL-aligned environment Strong networking ...

Kingston Smith is seeking an experienced Cyber Security Consultant specialising in penetration testing to join our client-facing advisory team. You will join an NCSC-recognised cyber security team within our Risk Advisory practice, supporting a diverse portfolio of clients across multiple sectors. This is a hands-on role focused … CK.Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting clients through to certification in line with current NCSC and IASME scheme requirements. Deliver wider technical security assessments, including vulnerability assessments, cloud security reviews, and build and configuration reviews against CIS Benchmarks and vendor ...

validation and re-testing efforts. You will contribute to internal tooling, research and knowledge sharing, and pursue continued professional development within a CREST/NCSC-aligned environment. Hybrid working is offered. #J-18808-Ljbffr ...

tests, produce high-quality reports, and present remediation guidance to clients while supporting vulnerability validation and re-testing. As a CREST and NCSC CHECK provider, the role offers ongoing professional development, exposure to varied projects (public, defence and private sector), and #J-18808-Ljbffr ...

security activity. Develop and expand the use of the TPRM platform for supplier onboarding, assessment and ongoing monitoring. Assess third-party suppliers against the NCSC Cyber Assessment Framework (CAF), the client's internal Security Controls Framework, physical security requirements and internal risk standards. Evaluate supplier risk, identify gaps and agree … ideally in the public sector, CNI or another regulated environment. A strong grounding in information and cyber security risk management. Working knowledge of the NCSC CAF and of security controls frameworks such as ISO 27001, NIST or Cyber Essentials. Experience in a 2LoD or assurance function, including governance, oversight ...

gapped or low-bandwidth environments. High-Assurance Security Architecture: Implement Zero-Trust network topologies, Private Google Access, Service Controls, and IAM policies aligned with NCSC Cloud Security Principles , JSP 604 , and MoD Secure by Design (SbD) frameworks. Air-Gapped & Edge Deployments: Operate fully disconnected, sovereign cloud nodes ( GDC air-gapped … Defence (MoD, CSOC, DE&S), Intelligence, or National Security environments. Working knowledge of UK Government Security Classifications (OFFICIAL-SENSITIVE/SECRET/TOP SECRET), NCSC guidelines, and JSP 604 accreditation loops. 2. GCP & Infrastructure Automation 3+ years of production experience operating Google Cloud Platform (GCP) . Expertise in Terraform ...

willingness to undergo clearance prior to commencement Desirable Familiarity with TOGAF, ArchiMate or other enterprise architecture frameworks Experience of security architecture principles including NCSC guidelines and secure-by-design frameworks Knowledge of data architecture, data governance and data platform design within government contexts Experience supporting or leading GDS service assessments … equivalent Technical Skills Cloud Platforms: AWS, Azure, GCP Architecture Frameworks: TOGAF, ArchiMate, C4 Model Integration: REST APIs, event-driven architecture, message queuing, microservices Security: NCSC guidelines, secure-by-design, identity and access management Tooling: Confluence, Jira, Miro, Azure DevOps, Lucidchart or equivalent Standards: GDS Service Standard, TCoP, GDPR, WCAG 2.2 ...

supportive, inclusive environment. Your Role Design secure, scalable multi‐cloud solutions tailored to clients including UK government requirements, ensuring compliance with standards such as NCSC and GDPR. Lead the technical aspects of pre‐sales engagements, including opportunity qualification, solution design, and client presentations. Stay current with cloud technologies and industry … sector. Certifications & Knowledge: Familiarity with cloud certifications and a strong understanding of cloud platforms. Security & Compliance Awareness: Knowledge of UK government frameworks such as NCSC and GDPR, with a focus on secure design. Communication Skills: Ability to explain complex technical concepts to both technical and non‐technical audiences. Client Engagement ...

supportive, inclusive environment. Your Role Design secure, scalable multi-cloud solutions tailored to clients including UK government requirements, ensuring compliance with standards such as NCSC and GDPR. Lead the technical aspects of pre-sales engagements, including opportunity qualification, solution design, and client presentations. Stay current with cloud technologies and industry … sector. Certifications & Knowledge: Familiarity with cloud certifications and a strong understanding of cloud platforms. Security & Compliance Awareness: Knowledge of UK government frameworks such as NCSC and GDPR, with a focus on secure design. Communication Skills: Ability to explain complex technical concepts to both technical and non-technical audiences. Client Engagement ...

continuity, and operational readiness. Demonstrated experience delivering projects aligned to security and governance frameworks such as Secure by Design, Cyber Essentials Plus (CE+), the NCSC Cyber Assessment Framework (CAF), and GovAssure. Ability to define architecture deliverables (HLD/LLD), guide engineering teams, and engage effectively with technical, business, and programme … cloud and infrastructure architectures, with strong Microsoft Azure capability. Candidates should have a good understanding of security within architecture, including Secure by Design, the NCSC Cyber Assessment Framework (CAF), Cyber Essentials Plus (CE+), and GovAssure, alongside demonstrated experience delivering projects within relevant security and governance requirements. Experience owning formal accreditation ...

continuity, and operational readiness. Demonstrated experience delivering projects aligned to security and governance frameworks such as Secure by Design, Cyber Essentials Plus (CE+), the NCSC Cyber Assessment Framework (CAF), and GovAssure. Ability to define architecture deliverables (HLD/LLD), guide engineering teams, and engage effectively with technical, business, and programme … cloud and infrastructure architectures, with strong Microsoft Azure capability. Candidates should have a good understanding of security within architecture, including Secure by Design, the NCSC Cyber Assessment Framework (CAF), Cyber Essentials Plus (CE+), and GovAssure, alongside demonstrated experience delivering projects within relevant security and governance requirements. Experience owning formal accreditation ...

management, and platform security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. … endpoint security, EDR, vulnerability management, and platform hardening. Experience designing secure solutions for offline/air-gapped networks. Excellent understanding of MOD security policies, NCSC guidance, JSP 440/604, Secure by Design, and the NIST Cybersecurity Framework. Experience supporting security assurance, risk management, and accreditation activities. Strong stakeholder engagement ...

management, and platform security controls. Deliver secure solutions for air-gapped environments, including patching, signature updates, and secure data transfer. Ensure compliance with MOD, NCSC, JSP and NIST security standards. Develop vulnerability management processes, security assurance activities, and accreditation documentation. Produce HLDs, LLDs, security documentation, SOPs, and penetration testing scope. … endpoint security, EDR, vulnerability management, and platform hardening. Experience designing secure solutions for offline/air-gapped networks. Excellent understanding of MOD security policies, NCSC guidance, JSP 440/604, Secure by Design, and the NIST Cybersecurity Framework. Experience supporting security assurance, risk management, and accreditation activities. Strong stakeholder engagement ...

that leaves things better than you found them. You will translate threat intelligence into actionable detections, align your work to frameworks such as the NCSC Cyber Assessment Framework and GovAssure, and communicate clearly with client security stakeholders who need to understand what is happening and why it matters. You will … consistency without removing human judgement where it matters. Align security operations to UK public sector standards — ensure investigations, evidence handling, and detection coverage reflect NCSC CAF Objective C, GovAssure requirements, and lawful‐monitoring obligations; feed gaps back into risk governance. Mentor junior analysts and raise team standards — pair deliberately ...

security assurance authorities to demonstrate product compliance. Apply MOD Secure by Design principles throughout the engineering lifecycle. Work with external security authorities, including the NCSC, to support assurance of security solutions. Advise engineering teams on platform lockdown, configuration and appropriate product security controls. Support penetration testing, analyse findings and develop … policy, risk management and accreditation experience. Knowledge of threat intelligence sources. Knowledge of quantum cryptography and quantum key management. Experience engaging with UK Government, NCSC or NATO security authorities. ...

Support network infrastructure (LAN, WAN, VPN, and firewall configurations) in collaboration with network specialists. Ensure systems are configured and maintained securely in compliance with NCSC Cyber Assessment Framework (CAF) and NIS Regulations. Help implement security controls, monitoring tools, and access management processes. Work with the Cyber Security team to find … technologies (TCP/IP, VLANs, DNS, DHCP, VPN, and Firewalls) Backup, disaster recovery, and business continuity solutions Understanding of cyber security principles and frameworks (NCSC CAF, ISO 27001). Familiarity with ITIL processes and service management best practice. Desirable Skills & Certifications Professional certifications such as CompTIA Network+/Security+, Microsoft ...

MITRE ATT&CK frameworks Desirable: understanding of customer impact and stakeholder management within cyber contexts Awareness of applicable regulations and frameworks such as NCSC, NIST, ISO27001, and Cyber Essentials Plus Core Competencies Demonstrates expertise in cybersecurity operations, incident response, and threat analysis while fostering a proactive culture of cyber hygiene. … Mentoring Relationship Building Stakeholder Management Certifications & Qualifications CompTIA Security+ CISSP Industry Keywords Cyber Hygiene NIST ISO27001 Cyber Essentials Plus GRC ITIL MITRE ATT&CK NCSC Tools & Technologies SIEM EDR Sentinel Defender Splunk CrowdStrike #J-18808-Ljbffr ...

delivering penetration testing, Cyber Essentials certification, consultancy, training and managed cyber security services to organisations across both the public and private sectors. As an NCSC CHECK provider and CREST member company , we're continuing to grow our penetration testing team and are looking for a talented Security Consultant to join … consultancy where technical excellence, innovation and professional development go hand in hand. When you join us you'll benefit from: Working for an NCSC CHECK provider and CREST member A varied mix of commercial, defence and public sector projects Funded training and industry certifications Clear progression towards CHECK Team Member ...