1 to 25 of 133 NCSC Jobs in the UK

Container & DevSecOps - Kubernetes (EKS, Tanzu), Terraform, Ansible, CI/CD security, image scanning, container hardening Architecture Frameworks - TOGAF, ArchiMate, SABSA, Zachman, MODAF, JSP standards, NCSC architectural patterns HLD/LLD authoring, Security Patterns, Reference Architectures, Bill of Materials, Crypto Plans and JSP-compliant documentation Design Authority leadership, Technical Security Boards ...

public sector/government agencies . Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

Security stack (M365, Defender, Sentinel, Entra) DevSecOps security architecture What We Need Expertise in secure cloud design and delivery at scale. Strong knowledge of NCSC, ISO, NIST, SOC, PCI, and GDPR. Hands-on threat modelling and architecture review experience. Sector experience in Public, Healthcare, Defence, or Commercial. Network security, OWASP ...

security qualification such as CISSP, CCSK or CCSP. It would be great if you had: Knowledge of security architecture frameworks and methodologies, including: NIST. NCSC guidance. SABSA. Understanding of Secure by Design principles. Experience across one or more security domains, such as: Identity & Access Management (IAM). Infrastructure. Security. Data ...

Conduct security assessments, vulnerability reviews, and compliance audits against corporate and government security standards. Support risk treatment planning and remediation activities. Ensure alignment with NCSC, MoD, JSP, NIST, and Lockheed Martin security policies and standards where applicable. Support incident response investigations affecting classified systems. Assist with vulnerability management, patch management ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

desirable but not essential Experience designing and implementation solutions with AWS beneficial Experience and knowledge of Microsoft, ZeroTrust, NCSC, NIST, ISO27001 and Cyber Essentials frameworks and best practice and how they translate to controls, policies and configuration baselines valuable Strong understanding of software development lifecycle and methodologies such as Agile ...

scripting skills with PowerShell, Python or Bash Experience with SIEM, SOAR, logging and observability platforms Good understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials Plus CISSP, CCSP, Security+, CEH, CKS, CKA or similar certifications Please note: Active SC Clearance is essential for this position, along with ...

complex security solution, writing high level designs encompassing both cloud and on premise environments. Understanding and awareness of industry frameworks such as NIST, NCSC CAF, CIS, IEC 62443. Plus knowledge of the NIS-R Directive and PCI DSS would be advantageous. Ability to evaluate and propose solutions and technologies within ...

measurable value for clients. Essential qualifications and experience: ~You should have experience developing cyber security policies, standards and procedures. ~Strong knowledge of ISO 27001, NCSC CAF, NIST and Cyber Essentials/Cyber Essentials Plus. ~Experience in security governance, risk management and assurance. ~Good understanding of data protection and privacy principles. ...

security qualification such as CISSP, CCSK or CCSP. It would be great if you had: Knowledge of security architecture frameworks and methodologies, including: NIST. NCSC guidance. SABSA. Understanding of Secure by Design principles. Experience across one or more security domains, such as: Identity & Access Management (IAM). Infrastructure. Security. Data ...

mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC) Ensure architectural traceability from requirements through to controls and implementation Develop and lead the security architecture practice Mentor, coach, and upskill security architects and consultants Define ...

emphasis on balancing security needs with useability and reducing user friction. Technical Mastery: Knowledge of security frameworks (e.g. ISO 27001, NIST, and/or NCSC guidance), security risk management, security architecture, and best practices for safeguarding sensitive assets. Regulatory Compliance: Familiarity with UK legislation, standards, and protocols. Incident Management: Demonstrable ...

project lifecycle from bid through delivery and into service.### ### Desirable Experience* Post-Quantum Cryptography (PQC) planning and migration.* Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards.* Scripting and automation using PowerShell, Python, or Bash.* Identity & Access Management (IAM) integration.* Critical National Infrastructure (CNI) or Operational ...

architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D You will ideally hold CISM/CISSP or similar higher ...

support the implementation of proportionate remediation and security improvements. Knowledge of recognised cyber security frameworks, standards and guidance, such as DSPT, CAF, CIS Controls, NCSC guidance or NIST, and experience of supporting compliance or assurance activity. Ability to communicate technical cyber security information clearly to a range of audiences ...

Chartered Institute of Information Security (CIISec) — highly desirable. • Chartered or Principal status via the UK Cyber Security Council for Secure Systems Architecture. • NCSC Certified Cyber Professional (CCP) in Security Architecture. • IEng or CEng registered with a UK engineering body. • Chartership through BCS, The Chartered Institute for IT. • SABSA Chartered Security ...

analytics solutions. Experience delivering architectures within government, public sector, or highly regulated environments. Familiarity with workplace technology, estates, or property-related programmes. Understanding of NCSC Cloud Security Principles and Zero Trust Architecture concepts. Experience supporting data platform and integration architecture initiatives. To apply for this Senior AWS Solution Architect position ...

small security budget. Essential experience/skills Cyber security leadership/management experience within a public sector, regulated, or complex enterprise environment. Knowledge of NCSC-aligned security principles and practical governance/assurance approaches. Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks ...

small security budget. Essential experience/skills Cyber security leadership/management experience within a public sector, regulated, or complex enterprise environment. Knowledge of NCSC-aligned security principles and practical governance/assurance approaches. Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks ...

small security budget. Essential experience/skills Cyber security leadership/management experience within a public sector, regulated, or complex enterprise environment. Knowledge of NCSC-aligned security principles and practical governance/assurance approaches. Security compliance and audit-readiness (e.g., PSN, PCI-DSS, GDPR, Cyber Essentials Plus and similar frameworks ...

doing so play a key role in nationally critical projects which make a real difference to people’s everyday lives. We are a National Cyber Security Centre Assured Cyber Security Consultancy. Locations: London, Guildford, Bristol, M4 corridor Roles and Responsibilities Working either individually or as part of a larger Actica ...