25 of 25 Permanent NIST Jobs in the Thames Valley

Microsoft Azure, identity, governance, security, and cloud architecture. Experience working with outsourced service providers and technology partners. Understanding of cyber security frameworks such as NIST and ISO27001. Knowledge of networking, infrastructure, security operations, and vulnerability management. The confidence to challenge, influence, and drive decisions at all levels. A pragmatic, hands ...

strong interest in information security alongside privacy. Working knowledge of key privacy regulations (e.g. EU GDPR, UK DPA) and key industry frameworks (e.g. ISO, NIST). Deep hands-on proficiency in privacy management and governance, risk and compliance software tools (e.g. OneTrust Assessment Automation, Risk Register, Data Mapping). Demonstrated ...

and hybrid infrastructure security, with strong knowledge of networking, operating systems and attacker techniques. Practical understanding of MITRE ATT&CK, Cyber Kill Chain, NIST and SANS incident response frameworks. Experience working within regulated and audited environments, including ISO 27001 and Cyber Essentials. Excellent communication, stakeholder management and documentation skills, with ...

lifecycle from bid through delivery and into service.### ### Desirable Experience* Post-Quantum Cryptography (PQC) planning and migration.* Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards.* Scripting and automation using PowerShell, Python, or Bash.* Identity & Access Management (IAM) integration.* Critical National Infrastructure (CNI) or Operational Technology ...

successful assessment and delivery of security related change control processes. Experience in application of Security Frameworks: E.G. Cyber Essentials Plus, ISO27000 series, NIST-800 (including SP800-37 and SP800-53) and associated assurance activities. ExperienceEssential: Demonstrable understanding of cloud/Infrastructure as Code technologies;Demonstrable understanding of application of security ...

full project lifecycle from bid through delivery and into service. Desirable ExperiencePost-Quantum Cryptography (PQC) planning and migration. Cryptographic standards and frameworks including NCSC, NIST, ETSI, ISO and IEC standards. Scripting and automation using PowerShell, Python, or Bash. Identity & Access Management (IAM) integration. Critical National Infrastructure (CNI) or Operational Technology ...

code to deliver secure, consistent and maintainable identity services Advising clients on IAM best practices, standards and regulatory requirements, including GDPR, ISO 27001, NIST Frameworks About You Strong engineering background with deep expertise across Active Directory, Entra ID and PKI/ADCS in large, complex environments Pragmatic, methodical problem‐solver ...

party security assessments, including reviewing documentation, assurance reports and control evidence. A solid understanding of information security frameworks and standards such as ISO 27001, NIST, Cyber Essentials and SOC reporting. Strong analytical, organisational and problem-solving skills, with the ability to spot risks, join the dots and keep assurance activity ...

Knowledge of secure software development, application security and OWASP principles Experience working with Identity & Access Management (IAM) Knowledge of security frameworks such as ISO27001, NIST or NIS2 Experience within regulated environments would be advantageous, with exposure to DORA, CMMC or similar frameworks beneficial What Next? If you're a Cyber ...

documentation and assurance artefacts. Desirable Skills & ExperienceExperience within Defence, Government, or highly regulated environments. Knowledge of security accreditation and assurance processes. Familiarity with the NIST Risk Management Framework (RMF).Experience with vulnerability management and security tooling. Exposure to security architecture, secure design reviews, or threat modelling. Understanding of AI governance ...

container scanning and secrets managementStrong scripting skills with PowerShell, Python or BashExperience with SIEM, SOAR, logging and observability platformsGood understanding of security frameworks including NIST, ISO 27001, NCSC and Cyber Essentials PlusCISSP, CCSP, Security+, CEH, CKS, CKA or similar certificationsPlease note: Active SC Clearance is essential for this position, along ...

Management and Data Protection. Understanding of recognised cyber frameworks and standards such as NIS Regulations, CAF (Cyber Assessment Framework), CIS Controls, ISO 27001 and NIST Cybersecurity Framework. Experience managing cyber transformation initiatives involving multiple technology and business stakeholders. Ability to oversee programmes with significant regulatory, compliance and operational resilience requirements. ...

Scope of Technology" section above Deep knowledge of containerised, virtualised and hybrid infrastructure Strong knowledge of security and compliance frameworks (ISO 27001, NIST, COBIT, SOC2, ITIL) Understanding of regulatory and protocol specification requirements (TSA, 3GPP, IETF) Ability to influence senior technical and non-technical stakeholders Excellent documentation, communication, and decision ...

internal and external assessmentsSupport the business in achieving and/or maintaining security accreditations such as ISO 27001, CE+, IPSA, industry related standards, FSC, NIST, etc. Provide subject matter expert input in maintenance of relevant process documentation as required in addition to owning the security risk management process to include ...

Professional (CISSP). Standards, frameworks, and regulatory experience including - EU NIS Directive, ISA/IEC 62443 Series/ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance. Our Culture: Our values stand ...

premises Kubernetes deployment experience. Prometheus or comparable observability platforms. AWS Karpenter. AWS Compute Optimizer. Experience operating highly distributed systems. Familiarity with ISO 27001, NIST SSDF, OWASP SAMM or similar security frameworks. Understanding of GDPR fundamentals. Experience working within defence, national security, critical infrastructure or other regulated environments. Security Clearance ...

Microsoft Azure security Endpoint Protection Identity & Access Management Email Security Vulnerability Management Security monitoring and logging Secure technical change Security frameworks including ISO 27001, NIST or OWASP Experience with Microsoft Defender, Purview, Intune, cloud automation or DevSecOps would be advantageous but isn't essential. What's in this ...

dynamic working environment. You have an Engineering degree or equivalent experience in Computer Science, Electronics, Telecoms or a related field. Awareness of NIST, OWASP, GCF and UK TSA requirements and how they impact delivery and testing of secure networks. Willing to support an on-call rota as required. Ability ...

ServiceNow, alongside VMware-based Core deployments. • Excellent analytical, technical, communication and leadership skills, with an Engineering or equivalent technical degree/experience. • Awareness of NIST, OWASP, GCF and UK TSA requirements, with willingness to support on-call and travel to customer locations when required. Benefits: • Generous holiday entitlement, plus additional ...

We're Recruiting: Operational Security Lead & Cyber Vulnerability Manager Location: Hybrid - 1 x week in Marlow Department: Information Security Monday-Friday Are you an experienced cyber security professional with a passion for security operations, incident ...

patternsHybrid classical/PQC key exchangeCryptographic agility frameworksSecure key management and HSM integrationDevelop defensible design patterns, for high-assurance systems, ensuring alignment with NCSC, NIST, ETSI and sector specific standards. Provide technical leadership to engineering teams, guiding implementation, testing, and assurance. Engage with senior stakeholders, translating complex trust and crypto ...

agent communication protocols (e.g.A2A) Familiarity with MCPs for tool and context integration in agentic systems Familiarity with secure‐by‐design development principles (ISO 27001, NIST, OWASP) Experience in pharma/bio tech or highly regulated environments is a plus Contributions to open-source AI/ML projects Soft Skills Delivery ...

infrastructure and cloud environments, and ensure risk-based controls throughout the development lifecycle. The role requires deep knowledge of IT assurance frameworks (ISO 44001, NIST 800-53/171/172, NIS2, DEFSTAN, JSP), strong cross-functional leadership, excellent communication, and the ability to implement secure #J-18808-Ljbffr ...

lifecycle according to the Security by Design framework and principles. Ensure knowledge and application of relevant standards, including but not limited to (ISO 44001, NIST 800-53, 800-171, 800-172, NIS2, DEFSTAN, JSP's). Secure Development: Define and follow secure development guidelines. Collaborate with development teams to embed … and running of multiple tasks in parallel against challenging requirements. Expert knowledge and practical application of major IT Assurance frameworks and standards (ISO 44001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN, JSP). Deep understanding and experience in implementing the Security by Design framework across ...

lifecycle according to the Security by Design framework and principles. Ensure knowledge and application of relevant standards, including but not limited to (ISO 44001, NIST , NIS2, DEFSTAN, JSP's). Secure Development: Define and follow secure development guidelines. Collaborate with development teams to embed requirements and guarantee controls to protect … and running of multiple tasks in parallel against challenging requirements. Expert knowledge and practical application of major IT Assurance frameworks and standards (ISO 44001, NIST 800-53, NIST 800-171, NIST 800-172, NIS2, DEFSTAN, JSP). Deep understanding and experience in implementing the Security by Design framework across ...