1 to 25 of 61 NCSC Jobs in the UK excluding London

Container & DevSecOps - Kubernetes (EKS, Tanzu), Terraform, Ansible, CI/CD security, image scanning, container hardening Architecture Frameworks - TOGAF, ArchiMate, SABSA, Zachman, MODAF, JSP standards, NCSC architectural patterns HLD/LLD authoring, Security Patterns, Reference Architectures, Bill of Materials, Crypto Plans and JSP-compliant documentation Design Authority leadership, Technical Security Boards ...

Army programme experience or strong MOD stakeholder exposure. Experience with Sparx Enterprise Architect, ArchiMate, NAFv4 or similar modelling approaches. Knowledge of Joint Service Publications, NCSC guidance, ISO27001, NIST, CIS or related security frameworks. Experience across IAM, PKI, secure integration, cloud security, data flows and security architecture patterns. Experience reviewing HLDs ...

technical cyber role. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working towards CIISEC/ ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling – Kill Chain ...

Manage and maintain entity-level cyber risk registers, ensuring clear visibility, prioritisation, and mitigation progress. Ensure alignment with key standards and regulatory frameworks including: NCSC guidance and CAF ISO 27001 NIST CSF Cyber Essentials Plus Secure by Design principles Work with procurement to ensure cyber requirements are appropriately flowed down ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

OAuth, OpenID Connect, Active Directory, LDAP, ADFS) Secure application development (Java or .NET) Agile delivery environments API-driven architectures Security frameworks and principles (OWASP, NCSC guidance) Data protection and GDPR-compliant design Desirable Experience Defence, central government or highly regulated environments SC cleared environments Data architecture and modern data platforms ...

Experience supporting cloud-hosted environments, particularly Google Cloud Platform (GCP). Experience of MOD Cloud (MODCloud) programmes or secure cloud transformation initiatives. Familiarity with NCSC guidance and secure-by-design principles. Knowledge of security frameworks including JSP 440, JSP 604, NIST, ISO27001, or Cyber Assessment Framework (CAF). Relevant certifications ...

highly regulated environment, or within His Majesty's Government (HMG). Knowledge of security frameworks (e.g. ISO 27001, NIST, and/or NCSC guidance), security risk management & security architecture. Relevant professional certifications (such as CISSP, CISM, CISA, or equivalent) - Desirable ...

highly regulated environment, or within His Majesty's Government (HMG). Knowledge of security frameworks (e.g. ISO 27001, NIST, and/or NCSC guidance), security risk management & security architecture. Relevant professional certifications (such as CISSP, CISM, CISA, or equivalent) - Desirable ...

customer facing and stakeholder management skills. Experience producing and reviewing architecture artefacts using TOGAF and recognised architecture frameworks. Knowledge of UK Government security frameworks, NCSC guidance, Secure by Design, Zero Trust, and cloud security principles. Experience with network automation, orchestration, and air-gapped or highly secure environments. Relevant certifications such ...

customer facing and stakeholder management skills. Experience producing and reviewing architecture artefacts using TOGAF and recognised architecture frameworks. Knowledge of UK Government security frameworks, NCSC guidance, Secure by Design, Zero Trust, and cloud security principles. Experience with network automation, orchestration, and air-gapped or highly secure environments. Relevant certifications such ...

following: Cyber Governance, Risk & Compliance (GRC) Delivering security consulting engagements Implementing or assessing controls against recognised frameworks including: ISO 27001 NIST NIS NCSC Cyber Assessment Framework (CAF) DORA TISAX IEC 62443 Conducting cyber risk assessments and governance reviews Developing security policies, standards and procedures Building business cases and regulatory compliance ...

more of the following areas: Product, project, or cyber security within engineering-led environments. Security frameworks and standards such as NIST 800-series, NCSC guidance, or equivalent. Security risk assessment and assurance methodologies. Secure by Design (SbD) implementation and security documentation production. Information Assurance, Cyber Security, or Systems Security Engineering. ...

understanding of security governance, risk management, and assurance processes. Experience supporting accreditation, compliance, and assurance activities within secure environments. Familiarity with: NIST 800-53 NCSC guidance MOD security policies JSP 440 Defence assurance and accreditation processes Secure by Design principle Industry certifications such as: CISSP SABSA TOGAF CCSP CISM CCSK ...

/CD pipeline design (eg, Jenkins, GitHub Actions). Security Knowledge: Comprehensive understanding of secure-by-design principles, cloud security guidance (eg, NCSC), and government security classifications (OFFICIAL, OFFICIAL-SENSITIVE). Communication & Artefacts: A proven track record of producing high-quality architectural artefacts (C4 models, ADRs) and confidently translating complex ...

Legacy Windows technologies - Win32, WPF, MFC/ATL, COM, MSI packaging. Geospatial data formats - GeoJSON, MBTiles, GML. Familiarity with MOD Secure by Design and NCSC software security standards. Experience working in UK public sector or government digital services. Python geospatial tooling or data pipeline experience. Tech Stack: Backend: .NET Core ...

communication skills are key for this role, and you'll have a knowledge of security standards and processes such as ISO 27001 standards, (NCSC) CAF, Cyber Essentials, NIST and Cyber Essentials/Plus. We'll also look for your experience in: ● Developing cyber policy and procedures ● Data protection and privacy ...

assess and manage cyber security risks proportionately, balancing risk appetite, security controls and operational needs. Strong knowledge of security policies, standards and frameworks, including NCSC guidance and defence-in-depth principles. Confident communicator who can explain complex security concepts clearly to technical teams, senior leaders, programme boards and external stakeholders. ...

/PAM) Secure-by-Design principles Threat modelling and security risk assessment Experience producing security architecture artefacts and supporting accreditation activities. Knowledge of NCSC guidance, JSP 440, Secure by Design and defence security standards. Security certifications such as CISSP, SABSA, TOGAF or equivalent desirable. Please note: Due to the highly ...

policies and standards Knowledge of technology risk and controls including relevant tools and techniques Good understanding and practical experience of Cyber Security Frameworks including NCSC CAF, NIST and ISO 27001 Must have at least 2 years' cyber security experience. Excellent communication skills with the ability to deal with conflicting priorities. ...

certifications as part of your continuous professional developmentStrong communication, analytical thinking, and stakeholder engagement skillsFamiliarity with international standards and bodies such as ISO 27001, NCSC, Mitre, NIST, GDPRA commitment to ongoing training and development in cybersecurity and IT governanceExperience in manufacturing is a plus, but not essentialWhat ...

multiple user-research led agile product teams. Experience of working with Government Digital Service standards, GOV.UK services (Notify, One Login, Pay) and National Cyber Security Centre guidelines and security standards. Experience of guiding and documenting cloud and API solution architectures including design solutions using AWS API Gateway and Lambdas. Proficiency ...

technical reports for clients Supporting and collaborating with a wider team of cyber security consultants on varied projects Maintaining testing activities in line with NCSC CHECK and CREST methodologies What They're Looking For: Active SC Clearance (essential) Current CHECK Team Member status (essential) Proven experience delivering penetration testing engagements ...