1 to 25 of 27 NIST Jobs in the South West

Lead experience MOD/GDS Secure by Design Familiarity with: JSP440, JSP604/453, JSP490 Supplier Chain Assurance GDPR, PCI DSS, ICO ISO 27001, NIST CSF, CIS Controls v8 Skills in: Threat modelling (kill chain, attack trees, etc.) Cloud security (AWS, Azure), containerisation, firewalls Secure SDLC HLD/LLD review ...

proven experience gained as a Security Architect or in a technical cyber role. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF ...

security project delivery, PowerShell automation skills, and familiarity with IR frameworks. Consulting-style experience providing advisory support to IT/Digital teams. Knowledge of NIST, CIS, ISO, COBIT, OWASP, and willingness to work out of hours/travel when needed. Desirable: Experience in MxDR/SOC support, security technologies ...

landscape and emerging security risks What you’ll bring Strong experience in an information security leadership role Excellent knowledge of security frameworks (ISO 27001, NIST, Cyber Essentials, OWASP) Good understanding of GDPR and regulatory compliance requirements Hands-on experience with core security technologies (SIEM, IAM, firewalls, endpoint security, vulnerability management ...

strong professional development opportunities. Skills Secure architecture design and secure-by-design principles Risk assessment, threat modelling, and vulnerability management Security frameworks: ISO 27001, NIST 800-30/53, OWASP Cloud security architecture (AWS, Azure, GCP) Incident response, penetration testing, and remediation concepts Persuasive communication skills across technical and ...

cloud security (AWS/Azure) Experience delivering security improvements and technical control implementation PowerShell or automation scripting skills Solid understanding of frameworks such as NIST, CIS, ISO 27001, OWASP Confident communicator with strong stakeholder engagement skills Nice to Have Security certifications (Security+, CEH, CySA+, cloud security certs) SOC/ ...

Lead Implementer/Auditor Professional skills/experience Demonstrate a good understanding of information security frameworks, standards and security best practice (ISO27001, NIST CSF, Cyber Essentials, OWASP). Knowledge and adherence to data protection legislation and regulatory requirements (e.g. GDPR, FCA SYSC, PCI DSS). Extensive experience and understanding of ...

stakeholders, and communicate findings effectively. Proven expertise in Cyber Security Auditing, with strong knowledge of: NCSC Cyber Assessment Framework (CAF). ISO 27000 series, NIST Cyber Security & Risk Management Frameworks. Legacy IA standards and NCSC guidance. Familiarity with MOD security frameworks (e.g., JSP 453, JSP 440, JSP 902, DEFCON 659A ...

Solid knowledge of Microsoft security technologies Experience with SIEM, MDR/EDR, SSE and SASE solutions Knowledge of ISO 27002, CIS, NCSC CAF and NIST CSF frameworks Experience designing compliant security solutions Excellent communication and stakeholder engagement skills Desirable: Incident response experience Industry certifications (CISSP, CISM, CompTIA, CCNA) Exposure ...

Security, System Hardening, Cryptographic Controls (PKI, Data at Rest/In Transit), Protective Monitoring, and Security Auditing. Strong understanding of the ISO 27000 series, NIST Cyber Security & Risk Management Frameworks, NCSC CAF, and other industry standards. Familiarity with NCSC guidance and legacy Information Assurance (IA) standards. Experience with MOD security ...

regulated sectors. Familiarity with HMG Security Policy Framework and NCSC/CPNI guidance. Understanding of information security threats, risks, and risk assessment methodologies (ISO27005, NIST, IRAM2). Excellent written and oral communication skills, with the ability to translate complex findings to non-security audiences. Strong problem-solving skills, tenacity, and ...

and security documentation Support clients in defining business led security requirements and secure-by-design solutions Interpret and apply ISO 27001/ISO 27002, NIST, NCSC CAF, and MOD security frameworks Engage confidently with technical and non-technical stakeholders, including senior leaders Contribute to bid support and presales activity where ...

Experience in system security engineering, ideally in defence, space, or critical infrastructure Familiarity with MOD, NCSC, and ISO standards (e.g. ISO 27001/2, NIST 800-series, JSP 604) Competence in requirements engineering and systems thinking Practical experience with security in software and/or system development environments Effective communication ...

through the full lifecycle - from concept to accreditation Working with engineers and stakeholders to embed Secure by Design principles Delivering security assurance against CAF, NIST, JSP 440/604, and related standards Supporting test planning, security artefacts, and technical governance What we're looking for 5+ years in technical cyber ...

and working groups Provide additional support to the wider supportability function as required Essential Skills & Experience Experience in project security planning and implementation (e.g. NIST 800 series) Experience delivering security documentation using Secure by Design principles Background in security and information assurance (e.g. CESG Good Practice Guides) Experience conducting security ...

communication skills with the ability to produce documentation for technical and non-technical audiences Familiarity with ITIL v4, ISO 27001, Cyber Essentials Plus, and NIST frameworks Our company: Peace is not a given, Freedom is not a given, Sovereignty is not a given MBDA is a leading defence organisation. ...

and resolve complex issues. Certifications such as CISSP, CEH, OSCP, or GSEC are preferred. Knowledge of security principles, practices, and frameworks, such as OWASP, NIST, and ISO. Awareness of security tools and technologies, such as SAST, DAST, IAST, SCA, WAF, IDS, IPS. Experience in conducting threat modelling and risk assessments. ...

Comfortable with network monitoring tools (e.g. SolarWinds, Meraki Dashboard, Cisco Prime, Azure Monitor) Confident managing third-party providers; familiarity with ISO 27001/NIST/GDPR is a plus Degree in a relevant field or equivalent experience;CCNP/CCNA, Meraki Specialist, and/or Azure Network/Securitycertifications strongly ...

discipline. Proven understanding and hands-on experience with OT/ICS security standards and frameworks, such as ISA/IEC 62443, NCSC CAF Framework, NIST CSF, or similar. Knowledge of technical security solutions used in IoT and OT/ICS systems and networks. Familiarity with key security concepts ...

similar solutions. Significant demonstrable experience in understanding and administration of PKI Hierarchy. Demonstrable experience of security policy frameworks including, but not limited to, NIST CSF, ISO 27001 and MOD-specific concepts including MoD Secure by Design (SbD). Experience in providing security engineering input to the implementation of: Virtualisation technologies ...

similar solutions. Significant demonstrable experience in understanding and administration of PKI Hierarchy. Demonstrable experience of security policy frameworks including, but not limited to, NIST CSF, ISO 27001 and MOD-specific concepts including MoD Secure by Design (SbD). Experience in providing security engineering input to the implementation of: Virtualisation technologies ...

data, privacy and AI-related risks, supporting the responsible use of emerging technologies. * Apply knowledge of cyber security principles and relevant standards (e.g. ISO, NIST, Cyber Essentials). Skills and Experience: - Experience working within Government/Public Sector/Police, etc. would be preferred. - Holding SC Clearance would ...

role will appeal if you bring • A strong background in security architecture within public sector or defence environments • Experience operating across Secure by Design, NIST, SABSA, Zero Trust, or similar frameworks • Hands-on exposure to cloud platforms, modern SDLCs, and CI/CD pipelines • Confidence working across multiple classifications and ...

Excellent communication, presentation, and negotiation skills Self-motivated, ambitious, and target-driven Familiarity with cyber security frameworks and compliance standards (ISO27001, NIST, Cyber Essentials) Good knowledge of security tools, SOC operations, or risk management solutions Why Join? Pure new business hunter role with uncapped commission Fantastic training and onboarding, supporting ...

supporting the installation, configuration, administration, and support of secure infrastructure solutions. Strong understanding and administration of PKI hierarchies . Knowledge of security frameworks including NIST CSF , ISO 27001 , and MOD Secure by Design (SbD) . Experience providing security input to: Virtualisation technologies (VMware ESXi 8, vCentre 8) Network infrastructure (Cisco ...