1 to 25 of 128 Remote NCSC Jobs

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

Must hold, or be eligible to obtain and maintain, UK Security Check (SC) Clearance . Strong knowledge of: Security architecture principles Threat modelling methodologies NCSC Cyber Assessment Framework (CAF) Secure-by-design principles NIS Regulations ISO 27001 NIST Frameworks Desirable CISSP, SABSA, TOGAF, CCSP or equivalent professional certification. Experience within ...

improvement. Working knowledge of AWS and Microsoft Azure architecture and operating models. Knowledge of Government Digital Service standards, the Technology Code of Practice and NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO/IEC 27001, ISO/IEC 20000-1 and OWASP practices. Strong stakeholder management ...

improvement. Working knowledge of AWS and Microsoft Azure architecture and operating models. Knowledge of Government Digital Service standards, the Technology Code of Practice and NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO/IEC 27001, ISO/IEC 20000-1 and OWASP practices. Strong stakeholder management ...

Security Architecture within Central Government or the wider Public Sector. Strong understanding of ISO 27001, NIST CSF and CIS Controls. Deep knowledge of NCSC and HMG security standards and guidance. Expertise in Azure security technologies, including Entra ID, Azure Policy, Key Vault and Identity & Access Management. Experience securing cloud-native ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

repeatable deployment patterns. Knowledge of relevant standards and frameworks such as: NIST Cybersecurity Framework/NIST 800‐53 ISO/IEC 27001 UK NCSC guidance and Cloud Security Principles Zero Trust Architecture (NIST SP 800‐207) Experience defining architectures independently of specific technologies and then mapping them onto implementations. Personal ...

product vision and roadmap for secure AWS-based platform products used within government programmes. Align product delivery with business objectives, government standards (e.g., NCSC Cloud Security Principles), and compliance frameworks. Drive backlog prioritisation, balancing feature delivery, security requirements, and operational excellence. Stakeholder Engagement Act as the product voice with government ...

also have a strong understanding of: Secure-by-Design | Zero Trust | IAM | Network Security | Encryption | Key Management | Secure Information Exchange Knowledge of NCSC guidance, ISO 27001, Cyber Essentials, MoD 05-138 or NIST would be advantageous. Relevant qualifications or certifications such as CISSP, SABSA, TOGAF, CCSP ...

mitigation strategies across programmes. Provide authoritative guidance on risk trade-offs and security posture. Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC). Ensure architectural traceability from requirements through to controls and implementation. Develop and lead the security architecture practice. Mentor, coach, and upskill security architects and consultants. ...

mitigation strategies across programmes* Provide authoritative guidance on risk trade-offs and security posture* Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC)* Ensure architectural traceability from requirements through to controls and implementationDevelop and lead the security architecture practice* Mentor, coach, and upskill security architects and consultants* Define ...

GCIH, CompTIA Security+, or equivalent. Experience within Government, Defence, National Security, or Critical National Infrastructure sectors. Knowledge of NIST, ISO 27001, Cyber Essentials, and NCSC guidance. Experience working within Security Operations Centres (SOC). If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup ...

Splunk) and EDR/XDR platforms (e.g., Microsoft Defender for Endpoint, CrowdStrike Falcon). Security Frameworks: Solid understanding of MITRE ATT&CK, NIST CSF, NCSC Caf v4.0 and ISO 27001. Communication: Ability to write concise incident reports and speak comfortably with both engineers and business leaders. Experience working in management ...

skills across government and multi-agency security. Experience with Lead Accreditation and Security Case Development. Demonstrable knowledge of cybersecurity frameworks and standards, including the NCSC Cyber Assessment Framework, NIST, ISO 27001, CIS, CAF, HMG GovS 007, and NPSA. Preferred Qualifications: Industry certifications such as CompTIA Security+, CISSP, CISM ...

controls and monitoring measures, rather than relying solely on templates or standard security checklists. Familiarity with at least one recognised security framework – e.g. NIST, NCSC, MITRE, CyberEssentials, DCC. General attributes required: Strong analytical and problem‐solving skills, with the ability to make informed security recommendations based on technical evidence. Ability ...

Understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies,Key ManagementSystems & practicalCOMSECimplementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. This is not an exhaustive list, and we are keen to hear from you even ...

understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. Security Clearance This role is subject to pre-employment screening in line ...

role Essential: Experience designing and assuring secure solutions across Azure, on-premise and hybrid environments. Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF/800-53, ISO 27001/2 or SABSA. Understanding of identity & access management, network security, encryption, API security and secrets management. Experience with ...

issues in existing system designs or products, including recommending sensible mitigations that balance cost, risk and usability. • Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps ...

Working knowledge of Jira, Confluence, and IT Service Management platforms. Good understanding of hybrid environments incorporating on-premise and cloud-hosted services. Familiarity with NCSC security guidance, Secure by Design principles, Zero Trust architectures, and UK Government security frameworks. Desirable Experience supporting products from vendors such as Everfox (Deep Secure ...

vulnerability management Kubernetes/EKS/ECS Leading and mentoring engineers Experience within government, financial services or regulated environments Desirable: Government security standards/NCSC principles ForgeRock, Okta, Auth0, Ping Identity or wider IAM experience AWS landing zones Security architecture and assurance Existing government security clearance Azure exposure Salary: Circa ...

common vulnerabilities. Knowledge of infrastructure, cloud, network and identity security concepts. Familiarity with: OWASP Testing Guide OWASP Top 10 MITRE ATT&CK Framework NCSC Cyber Security Guidance NIST Cybersecurity Framework Cyber Kill Chain Ability to analyse complex risks and communicate findings clearly. Eligible to obtain and maintain UK SC Clearance. ...

documentation, including HLDs, LLDs, and controls catalogues. Knowledge of relevant legislation and regulatory requirements, including: GDPR PCI DSS ICO requirements Familiarity with HMG and NCSC security policies, standards, and guidance. Excellent analytical, investigative, and problem-solving skills. Strong stakeholder engagement and communication capabilities. Ability to produce clear, concise, and actionable ...

security, together with a sound understanding of recognised frameworks and guidance such as ISO 27001, the NIST Cybersecurity Framework, the Cyber Assessment Framework and NCSC guidance. You will be able to develop technical roadmaps, standards and architectural patterns, assess complex technical risks and recommend pragmatic, proportionate solutions. Strong communication, influencing ...