17 of 17 Permanent NCSC Jobs in the South West

Must hold, or be eligible to obtain and maintain, UK Security Check (SC) Clearance . Strong knowledge of: Security architecture principles Threat modelling methodologies NCSC Cyber Assessment Framework (CAF) Secure-by-design principles NIS Regulations ISO 27001 NIST Frameworks Desirable CISSP, SABSA, TOGAF, CCSP or equivalent professional certification. Experience within ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

improvement. Working knowledge of AWS and Microsoft Azure architecture and operating models. Knowledge of Government Digital Service standards, the Technology Code of Practice and NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO/IEC 27001, ISO/IEC 20000-1 and OWASP practices. Strong stakeholder management ...

e.g., JSP440, JSP453, Secure by Design), and industry frameworks (e.g., NIST Cyber Security Framework, ISO 27001). Professional certifications such as CISSP, CISM, or NCSC Certified Cyber Professional (CCP) desirable . Our Culture: Our values stand on a foundation of safety, integrity, inclusion, and diversity. We put people ...

platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical guidance and architectural decisions. Work closely with enterprise, infrastructure, network and application architects ...

architecture, vulnerability assessment/penetration testing concepts, and cloud or infrastructure security controls. Familiarity with government and defence security standards such as: HMG/NCSC IA Policies and Guidelines JSP440 and other MoD IA standards Cyber Essentials NIST, NIS-D You will ideally hold CISM/CISSP or similar higher ...

data protection and national security standards. What you'll bring Experience in cybersecurity, secure systems architecture, and technical security leadership, including experience engaging accreditors, NCSC guidelines, and cryptographic risk frameworks. Education & Foundational Benchmark: Cyber or IT NVQ Level 4 or equivalent higher education/degree in Information Security or Computer ...

standards. Typical Qualifications/Experience • Professional Experience: 7+ years' experience in cybersecurity, secure systems architecture, and technical security leadership, including experience engaging MOD accreditors, NCSC guidelines, and cryptographic risk frameworks. • Education & Foundational Benchmark: Cyber or IT NVQ Level 4 or equivalent higher education/degree in Information Security or Computer ...

zones, organisation policies, Shared VPC and service perimeter controls. Experience with service reliability engineering (SRE), SLIs, SLOs and error budgets. Familiarity with ISO 27001, NCSC guidance and relevant UK Government security requirements. Benefits Competitive Salary Bonus Scheme Private Healthcare Insurance 25 Days Annual Leave + Bank Holidays ...

common vulnerabilities. Knowledge of infrastructure, cloud, network and identity security concepts. Familiarity with: OWASP Testing Guide OWASP Top 10 MITRE ATT&CK Framework NCSC Cyber Security Guidance NIST Cybersecurity Framework Cyber Kill Chain Ability to analyse complex risks and communicate findings clearly. Eligible to obtain and maintain UK SC Clearance. ...

identifying security issues in existing system designs, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Experience in one of the following specialisms: AI/ML/Data/Cloud/M365/Security Architecture ...

nuclear. Transport, including aviation, rail, maritime, road and autonomous vehicles. Wider critical infrastructure. Standards and Frameworks Knowledge of relevant cybersecurity standards and guidance, including: NCSC Network and Information Systems (NIS) guidance and Cyber Assessment Framework (CAF). ISO 27001 and ISO 27005. NERC CIP. ISA-99/IEC 62443. NIST ...

through controlled, repeatable code. Monitoring and enforcement: Use telemetry and automated controls to detect, contain and respond to anomalies. Core Technical Skills : Zero Trust: NCSC and NIST frameworks, micro-segmentation, software-defined perimeters and context-aware access. Cloud and infrastructure security: Azure, AWS, and on-premises virtualised infrastructure. Infrastructure ...

scripting experience, comfortable in at least one of: Python, Golang, JavaScript, or Bash. Awareness of secure system design and best practice frameworks such as NCSC Cloud Security Principles or equivalent. Able to apply engineering thinking to improve reliability, security, and maintainability. Desirable (not essential) Practical understanding of compute, networking, storage ...

senior stakeholders, with opportunities to contribute to bids and business development. Key responsibilities: Lead cyber security audits and assessments against recognised frameworks, including the NCSC Cyber Assessment Framework (CAF). Evaluate security controls, organisational resilience and compliance throughout the system lifecycle. Identify vulnerabilities, risks and areas for improvement, producing clear … Support bid development and pre-sales activities where required. Essential Experience Proven experience leading cyber security audits and assurance engagements. Strong knowledge of the NCSC CAF, ISO 27000-series standards, NIST frameworks and associated risk management practices. Understanding of legacy information assurance standards and NCSC guidance. Familiarity with MOD security ...

between security domains. The role ensures that boundary services are designed, implemented, and maintained in accordance with defence security standards, such as client policies, NCSC guidance, and Zero Trust principles, with a strong emphasis on risk reduction, resilience, and compliance. Manages a multidisciplinary team of engineers and analysts, providing direction … Ensure effective implementation of change, configuration, release, and accreditation processes within regulated environments. Maintain compliance with applicable security standards, accreditation requirements, client policies, and NCSC guidance. Drive continual service improvement, operational efficiency, and service performance optimisation. Collaborate with architects, cyber defence teams, risk authorities, accrediting bodies, suppliers, and customer stakeholders. ...

network equipment. - Network routing and TCP/IP protocols. - Palo Alto Firewalls. - Extreme Networks (or equivalent) Wireless access point technologies. - VPN deployment and configuration. - NCSC requirements for the implementation, management and administration of secure networks. - Familiarity with NCSC Secure by Design Principles. - Understanding of network security principles and practices, data ...