1 to 25 of 28 NIST Jobs in Scotland

Python or PowerShell for automation. Deep understanding of threat detection, incident response, and the cyber kill chain. Familiarity with frameworks including MITRE ATT&CK, NIST, and CIS. Strong communication, analytical, and presentation skills. Solid understanding of network traffic flows, vulnerability management, and penetration testing principles. Knowledge of ITIL processes (Incident ...

access management, data protection, email security, cloud security posture, and system hardening. Frameworks and standards. Applying security frameworks, standards, and regulatory drivers such as NIST, ISO 27001, GDPR, and NIS2 through practical technical controls. Cyber Essentials Plus. Technical control implementation, evidence collection, remediation tracking, and preparation for assessment. Secure deployment. ...

Microsoft Entra ID/Active Directory. Strong understanding of security and compliance principles, technologies and frameworks, including Zero Trust, Microsoft Defender/Sentinel, NCSC, NIST and ISO 27001. Experience engaging with senior customer stakeholders and acting as a trusted technical advisor. Strong understanding of ITIL‐aligned service management and managed ...

and application security Experience with Go and/or C# development Knowledge of HTTP, REST, TLS and TCP/IP Strong understanding of OWASP, NIST, ISO 27001 and CIS Excellent communication skills with the ability to work closely with developers and technical stakeholders Desirable Experience with: Vulnerability research/exploit ...

change against defined policies and standards Working knowledge of at least one recognised security framework: NCSC Cyber Assessment Framework, ISO/IEC 27001, or NIST CSF Experience producing governance reporting Strong communication and stakeholder management skills Ability to work collaboratively across teams Strong analytical and problem-solving skills Ability ...

technical knowledge of modern cyber security technologies, tools and best practices. Knowledge of implementing and maintaining security frameworks and standards such as ISO27001, NCSC, NIST, CIS and PCI-DSS. Knowledge of vulnerability management, penetration testing and cyber security governance. Excellent analytical and problem-solving skills, with the ability to balance ...

code to deliver secure, consistent and maintainable identity services Advising clients on IAM best practices, standards and regulatory requirements , including GDPR, ISO 27001, NIST Frameworks About You Strong engineering background with deep expertise across Active Directory, Entra ID and PKI/ADCS in large, complex environments. Pragmatic, methodical problem‐solver ...

Gateway, SIEM, SOAR, EDR, MDR, UEBA, DLP Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC security principles, NIST Framework, ISO 27001, ISO27005, IEC62443 etc. Experience and knowledge of Industrial Control Systems is advantageous, but you will be provided with the opportunity to learn ...

knowledge of one or more international information security standards, risk management and control frameworks/practices e.g. ISF SOGP, ISO27001/2, ISO31000, IRAM2, NIST 800-53 or CSF and SOC2 reporting. Demonstrable experience of having worked with one or more of the following: - Third Party Risk Management/Vendor ...

technologies including machine learning concepts, common model architectures, and emerging generative AI capabilities. Experience with security frameworks and regulations, such as ISO 27001, NIST and UK GDPR. (5+ years exp) Demonstrated experience in conducting risk assessments, threat modelling, and security audits. (5+ years exp) Good communication, project management, and organisational ...

technologies including machine learning concepts, common model architectures, and emerging generative AI capabilities. Experience with security frameworks and regulations, such as ISO 27001, NIST and UK GDPR. (5+ years exp) Demonstrated experience in conducting risk assessments, threat modelling, and security audits. (5+ years exp) Good communication, project management, and organisational ...

development and mentoring of junior team members. Confident understanding of risk management and general best practice with knowledge of best practice standards such as NIST SP800-37, 30 and ISO-31000, 27005. Varied Experience of assessing risk and building or evolving risk management framework components such as measurement criteria. Good ...

internal and external assessmentsSupport the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc. Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include ...

experience Desirable Skills Domain experience within the utilities or wider critical national infrastructure sector Familiarity with OT security standards and frameworks (eg IEC 62443, NIST Cybersecurity Framework, NCSC CAF) Experience operating within a regulated environment with formal incident and change management processes #J-18808-Ljbffr ...

protection projects. Exposure to operational technology (OT) or IT/OT-converged environments. Familiarity with related standards or frameworks such as ISO 27001 or NIST CSF. Experience delivering projects involving data security, operational resilience or critical national infrastructure more broadly. #J-18808-Ljbffr ...

data security, including data classification, DLP, encryption, and data lifecycle protection. Strong understanding of relevant standards and frameworks (e.g. ISO/IEC 27001, NIST CSF, CIS Controls). Proven experience owning or leading a global or enterprise‐scale security service or capability. Ability to operate at both strategic and operational ...

Knowledge of Operational Technology (OT) environments and technologies such as SCADA, PLCs, HMI, MES, or DCS . Understanding of security frameworks including ISO 27001, NIST, IEC 62443, or CIS . Experience within the renewable energy, utilities, or wider energy sector. This is an exciting opportunity to join a forward-thinking ...

and data teams to build secure AI systems. The role requires proficiency in cyber security, AI technologies, cloud security, and regulatory knowledge (ISO 27001, NIST, UK GDPR). Hybrid working with opportunities to shape the future of banking security. #J-18808-Ljbffr ...

monitor, maintain and improve security technologies, support incident response, audits and compliance activities, and help deliver new security initiatives while aligning with ISO27001, NCSC, NIST and #J-18808-Ljbffr ...

role covers governance, risk management, policy development, and cross-functional collaboration with OT, IT, and supply chain, with focus on ISO 27001:2022, NIST CSF 2.0, and #J-18808-Ljbffr ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards. Provide technical leadership to engineering teams, guiding implementation, testing, and assurance. Engage with senior stakeholders, translating complex trust and crypto ...

SCADA/DCS/PLC environments Industrial control systems OT network security and segmentation OT security architecture Cyber risk and security assessments IEC 62443, NIST or similar frameworks Critical National Infrastructure/energy/manufacturing/utilities OT security strategy and transformation Consulting experience is valuable, but strong technical ...

and security documentation. Experience within OT, industrial, energy, utilities or CNI environments would be highly desirable. Knowledge of IEC 62443, Purdue Model, NCSC CAF, NIST or other OT security frameworks would be advantageous. #J-18808-Ljbffr ...

evaluations against the Airbus Subsidiary Questionnaire, and manage the remediation Action Plans. Cybersecurity Maturity & Threat Profiling: Lead ongoing baseline cybersecurity maturity assessments using NIST CSF 2.0 and execute industrial threat modelling using industry standard methodologies. Secondary Responsibilities Operational Technology (OT) & Safety Alignment: Partner with factory operations to integrate the digital … aerospace, defence, manufacturing, or heavy industrial sectors. Proven track record of designing, building, and delivering an enterprise ISMS. Deep expertise in ISO 27001:2022, NIST CSF 2.0, EASA Part-IS, and formal risk methodologies (EBIOS RM, ISO 27005, or NIST 800-30). Experience managing aerospace supply chain requirements and ...

and experience to support, coach and mentor colleagues. Nice to have CISSP or CISM. 62443 cyber security certificates. Experience with the Cyber Assessment Framework, NIST CSF, NIST SP 800-82, IEC ISA 99/62443 and CIS Controls. Strong understanding of IT and OT security risks. Knowledge of the threat ...