451 to 475 of 519 Remote NIST Jobs

Conduct post-incident analysis and lessons learned and refine response strategies. Monitor emerging threats proactively integrate new protections and ensure compliance with standards (OWASP, NIST).Basic RequirementsBasic Requirements & QualificationsExperience & Education: 7+ years in Security/Application Engineering; Bachelor's degree in Computer Science, Information Security, or a related field. Leadership … security tooling (SCA, SAST, DAST) into CI/CD pipelines. Software Engineering: Hands-on development experience, specifically in Go and C#.Standards & Frameworks: Knowledge of NIST, ISO 27001, CIS, and OWASP (ASVS/Testing Guides). Desirable QualificationsAdvanced Technical Skills: Deep vulnerability research, exploit R&D, manual pentesting (cloud/ ...

penetration tests and supplier assurance activity, then advise on remediation and risk acceptance. Help clients align with relevant frameworks and standards, including ISO 27001, NIST, CAF, GovAssure, Secure by Design and HMG/MOD assurance expectations. Strong background in Security Architecture, Cyber Security Consultancy, Security Assurance or Secure Design. Experience … stakeholder management skills, including the ability to advise technical teams and brief non-technical decision makers. Knowledge of security frameworks such as ISO 27001, NIST, CAF, Secure by Design, GovAssure or HMG/MOD security standards. Comfortable working 5 days per week on site at MOD Corsham. Current SC clearance ...

network design).Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial.Experience with regulatory and compliance frameworks (e.g., ISO 27001, GDPR, NIST) and security best practices.Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes.Bachelor … and their advantages and disadvantagesSecurity Zone Design and considerationsNetwork and Security Architecture Design and ConsiderationsUnderstanding of Information Security (Confidentiality, Integrity, Availability), MITRE ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etcRisk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigateMalware/Ransomware ...

cross functional teams to perform threat modeling, vulnerability assessments, and incident response for Microsoft platforms Collaborate with compliance teams to meet regulatory requirements (e.g., NIST, ISO 27001, HIPAA) and support audit activities and deliverables Support maturity modeling, executive dashboards, and architectural blueprints to track progress across tooling ecosystems Develop and … Sentinel, Purview, and compliance center tools Experience in hybrid cloud environments and enterprise-scale deployments Experience with healthcare or regulated industry environments (HIPAA, HICP, NIST). Familiarity with architectural review boards, solution design documentation, and capability roadmaps. Talroo-IT We provide market-competitive compensation packages, inclusive of base pay, incentives ...

develop and implement advanced control frameworks across a large, global organisation. The role involves translating high-level requirements into practical controls, mapping controls to NIST and ISO 27001 standards, and partnering with business and technology teams to ensure successful implementation. #J-18808-Ljbffr ...

using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology:Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and … Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Summary:Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues ...

platform security and work across engineering, operations and stakeholders to ensure audit readiness. The role requires 9+ years of experience and expertise in CVSS, NIST, DORA, ISO 27001 and cyber defence, with a focus on automation and process improvement. #J-18808-Ljbffr ...

Consultant to take ownership of complex client engagements and lead our Consulting Practice. You will guide governance, risk, and assurance programs, including ISO and NIST-style initiatives, while delivering tangible improvements. You will also act as a deputy across the Practice, overseeing delivery, resourcing, and profitability, and maintain close client ...

Preferred Experiencewithmultimodalreasoning ExperiencewithedgeorofflineAIdeployments FamiliaritywithKubernetes(EKS/OpenShift)formonitoringandmanagingdeployedapplications MLOpsexperience-modelevaluation,monitoring,reproducibility Observabilitytoolingforagenticsystems(modeldrift,agentbehaviour,performancemonitoring) Experiencewithagentorchestrationpatternsandinter-agentcommunicationprotocols(e.g.A2A) FamiliaritywithMCPsfortoolandcontextintegrationinagenticsystems Familiaritywithsecure-by-designdevelopmentprinciples(ISO27001,NIST,OWASP) Experienceindefence,nationalsecurity,orsimilarlyregulatedenvironments Contributionstoopen-sourceAI/MLprojects An active SC or DV is highly desirable for these roles SoftSkills Delivery-focused-youshipworkingsystems,notprototypes Comfortableoperatingacrossthestackwhenneeded ...

certifications. Microsoft Azure Security Engineer Associate. AWS Security Specialty. Google Professional Cloud Security Engineer. DevSecOps or CI/CD related certifications. ISO 27001 certifications. NIST CSF and NIST SSDF knowledge. Package & Benefits Competitive salary Annual bonus Car allowance Hybrid working Comprehensive benefits package Ongoing training and professional development Industry-recognised ...

certifications. Microsoft Azure Security Engineer Associate. AWS Security Specialty. Google Professional Cloud Security Engineer. DevSecOps or CI/CD related certifications. ISO 27001 certifications. NIST CSF and NIST SSDF knowledge. Package & Benefits Competitive salary Annual bonus Car allowance Hybrid working Comprehensive benefits package Ongoing training and professional development Industry-recognised ...

audits. Strong knowledge of ISO 27002 and experience delivering against its requirements. Strong knowledge of Cyber Essentials/Cyber Essentials Plus. Experience working with NIST security frameworks. Knowledge of CAF/Cyber Assessment Framework and its application to organisational security. Understanding of NIS2, GDPR and the Data Protection Act. Strong … landscape and assess their impact on the organisation. Ensure compliance with relevant legislation, regulations, frameworks and security standards, including GDPR, Data Protection Act, NIS2, NIST, Cyber Essentials and ISO 27002. Lead and coordinate information security metrics, reporting and management information. Support and oversee offensive security activities, vulnerability management and security ...

maintaining quality and managing stakeholder expectations. Willingness and flexibility to travel throughout the UK (and occasionally overseas) as required. Relevant professional certifications (e.g., ISO27000, NIST Cyber Security Professional, CISMP, CISM, CISSP, CCSP, Chartered Cyber Security Professional) are highly desirable. Solid understanding of ‘Secure by Design’ methodology. Commitment to ongoing professional … and help them deploy that technology in live OT/ICS environments. Familiarity with OT cyber security standards or regulatory frameworks (e.g., IEC 62443, NIST CSF, NIS Regulations, HSE OG-0086). Relevant OT cyber security qualifications (e.g., GICSP, IEC/ISA 62443). Membership of recognised security professional bodies ...

sectors, ensuring high-quality outcomes and practical recommendations 3. Act as a subject matter expert across recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF and Defence Cyber Certification requirements 4. Design and implement governance frameworks, policies, processes and controls that help clients manage cyber risk effectively 5. … and Compliance, ideally within cyber security, information security or technology risk 2. Good working knowledge of recognised frameworks and standards such as ISO 27001, NIST, NCSC CAF, Cyber Essentials and related assurance or certification schemes 3. Experience leading risk assessments, control reviews, audit preparation, compliance programmes or security maturity assessments ...

management with continuous improvement of MTTR and service stability.Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness.Act as control owner for infrastructure and cloud services, ensuring effective design … operating within financial services regulatory frameworks, including FCA/PRA requirements and operational resilience obligations.Knowledge of industry standards and control frameworks including ISO 27001, NIST CSF, CIS Benchmarks and ITIL.Qualifications:Minimum of one below is required:Microsoft Certified: AZ-104 Azure AdministratorMicrosoft Certified: Azure DevOps Engineer Minimum of one below ...

with continuous improvement of MTTR and service stability. Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness. Act as control owner for infrastructure and cloud services, ensuring effective … within financial services regulatory frameworks, including FCA/PRA requirements and operational resilience obligations. Knowledge of industry standards and control frameworks including ISO 27001, NIST CSF, CIS Benchmarks and ITIL. Qualifications: Minimum of one below is required: Microsoft Certified: AZ-104 Azure AdministratorMicrosoft Certified: Azure DevOps Engineer Minimum of ...

with continuous improvement of MTTR and service stability. Define, implement, and continuously mature infrastructure governance and compliance frameworks, ensuring alignment to ISO27001 (Annex A), NIST CSF, CIS benchmarks, and regulatory expectations, including secure configuration, logging, monitoring, and audit readiness. Act as control owner for infrastructure and cloud services, ensuring effective … within financial services regulatory frameworks, including FCA/PRA requirements and operational resilience obligations. Knowledge of industry standards and control frameworks including ISO 27001, NIST CSF, CIS Benchmarks and ITIL. Qualifications: Minimum of one below is required: Minimum of one below is required: ITIL V4 Microsoft Certified: Azure Security Engineer ...

gaps and seeing remediation through to completion.Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS.Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most … against CIS, NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes.Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate.Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support business decision ...

and seeing remediation through to completion. Document and uphold secure-by-design principles and architecture governance, and enforce policy-as-code frameworks aligned with NIST, CIS, and PCI DSS.Set the monitoring scope and priorities for CNAPP/CSPM tooling (e.g. Wiz or equivalent), defining which misconfigurations and vulnerabilities matter most … against CIS, NIST, and PCI DSS benchmarks, and holding engineering teams accountable to remediation outcomes. Work with Security Operations to shape cloud logging and detection requirements, ensuring our SIEM has the right visibility across the estate. Collaborate with senior stakeholders to articulate security risks and mitigations in terms that support ...

assess and bolster the cloud security practices of customers.Provide expertise on Cloud Security Posture Assessment concepts.Guide alignment with industry standards including CIS, OWASP, NIST, and ISO 27001.Craft and deliver tailored recommendations and practical security implementations.Develop and present customized security strategies and roadmaps.Collaborate with clients to establish cloud security best practices … minimum of 3 years of experience in cloud security.Solid understanding and practical experience with Cloud Security Posture Assessment and relevant frameworks (CIS, OWASP, NIST, ISO 27001).Proven ability to apply industry standards to various business workloads.Excellent communication and presentation skills, apt at conveying complex security ideas to non-experts.Self-motivated ...

like API integrations, data querying, and control automation. You’ll be a key player in maintaining our compliance posture across frameworks like SOC 2, NIST CSF, and ISO 27001, while also helping modernize how we monitor and evidence controls using platforms like Anecdotes. This role suits someone who is equally … and execution of SOC 2 (Type I/II) audits, working directly with external auditors to scope, evidence, and remediate findings Lead or support NIST CSF assessments and gap analyses, translating results into actionable remediation plans Support alignment and readiness activities for ISO 27001 and other relevant frameworks (e.g. ...

to. 5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

to. 5+ years of relevant experience in the medical device space (either industry or through consulting/service provider) Proficiency in security frameworks (e.g., NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat … modeling, security testing) and determining residual risk after applying compensating security controls Experience implementing and demonstrating compliance to security frameworks such as NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, SOC 2 Type 2 and familiarity working with Quality Management Systems Experience working with teams in a structured software development lifecycle ...

will operate at both strategic and technical levels, supporting board-level decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time … . Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. Technical & Transformation Advisory Advise ...

risk and governance. Design and implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review … prompt injection, data leakage and excessive agency. Strong understanding of relevant AI regulation and frameworks, particularly EU AI Act, UK GDPR/ICO, DPIAs, NIST AI RMF and ISO 42001. Experience working with regulated organisations. The ability to communicate equally well with senior executives and technical teams. Nice to have ...