1 to 25 of 123 Remote/Hybrid Permanent NCSC Jobs

across public sector/government agencies. Expertise in: Security legislation (GDPR, PCI DSS, ICO) Frameworks (ISO 27001, NIST CSF, CIS Controls v8) HMG/NCSC policies and guidance Cloud security (AWS, Azure) Microservice architectures PKI, Cryptography, Privileged Access Management Certifications: SABSA, TOGAF, AWS/Azure Architect, CISSP, CISM (or working ...

Must hold, or be eligible to obtain and maintain, UK Security Check (SC) Clearance . Strong knowledge of: Security architecture principles Threat modelling methodologies NCSC Cyber Assessment Framework (CAF) Secure-by-design principles NIS Regulations ISO 27001 NIST Frameworks Desirable CISSP, SABSA, TOGAF, CCSP or equivalent professional certification. Experience within ...

improvement. Working knowledge of AWS and Microsoft Azure architecture and operating models. Knowledge of Government Digital Service standards, the Technology Code of Practice and NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO/IEC 27001, ISO/IEC 20000-1 and OWASP practices. Strong stakeholder management ...

improvement. Working knowledge of AWS and Microsoft Azure architecture and operating models. Knowledge of Government Digital Service standards, the Technology Code of Practice and NCSC cloud security principles. Understanding of ITIL 4, SIAM principles, ISO/IEC 27001, ISO/IEC 20000-1 and OWASP practices. Strong stakeholder management ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain ...

repeatable deployment patterns. Knowledge of relevant standards and frameworks such as: NIST Cybersecurity Framework/NIST 800‐53 ISO/IEC 27001 UK NCSC guidance and Cloud Security Principles Zero Trust Architecture (NIST SP 800‐207) Experience defining architectures independently of specific technologies and then mapping them onto implementations. Personal ...

product vision and roadmap for secure AWS-based platform products used within government programmes. Align product delivery with business objectives, government standards (e.g., NCSC Cloud Security Principles), and compliance frameworks. Drive backlog prioritisation, balancing feature delivery, security requirements, and operational excellence. Stakeholder Engagement Act as the product voice with government ...

also have a strong understanding of: Secure-by-Design | Zero Trust | IAM | Network Security | Encryption | Key Management | Secure Information Exchange Knowledge of NCSC guidance, ISO 27001, Cyber Essentials, MoD 05-138 or NIST would be advantageous. Relevant qualifications or certifications such as CISSP, SABSA, TOGAF, CCSP ...

mitigation strategies across programmes. Provide authoritative guidance on risk trade-offs and security posture. Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC). Ensure architectural traceability from requirements through to controls and implementation. Develop and lead the security architecture practice. Mentor, coach, and upskill security architects and consultants. ...

mitigation strategies across programmes* Provide authoritative guidance on risk trade-offs and security posture* Oversee security assurance, accreditation, and compliance activities (e.g., MOD, NCSC)* Ensure architectural traceability from requirements through to controls and implementationDevelop and lead the security architecture practice* Mentor, coach, and upskill security architects and consultants* Define ...

Splunk) and EDR/XDR platforms (e.g., Microsoft Defender for Endpoint, CrowdStrike Falcon). Security Frameworks: Solid understanding of MITRE ATT&CK, NIST CSF, NCSC Caf v4.0 and ISO 27001. Communication: Ability to write concise incident reports and speak comfortably with both engineers and business leaders. Experience working in management ...

controls and monitoring measures, rather than relying solely on templates or standard security checklists. Familiarity with at least one recognised security framework – e.g. NIST, NCSC, MITRE, CyberEssentials, DCC. General attributes required: Strong analytical and problem‐solving skills, with the ability to make informed security recommendations based on technical evidence. Ability ...

Understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies,Key ManagementSystems & practicalCOMSECimplementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. This is not an exhaustive list, and we are keen to hear from you even ...

understanding of the engineering lifecycle and key gate review activities. Knowledge of current Crypto technologies, Key Management Systems & practical COMSEC implementations and MOD/NCSC standards. Knowledge or experience of ARP4754A/ARP4761 and its interrelationship with security. Security Clearance This role is subject to pre-employment screening in line ...

role Essential: Experience designing and assuring secure solutions across Azure, on-premise and hybrid environments. Strong knowledge of industry frameworks such as NCSC guidance, NIST CSF/800-53, ISO 27001/2 or SABSA. Understanding of identity & access management, network security, encryption, API security and secrets management. Experience with ...

issues in existing system designs or products, including recommending sensible mitigations that balance cost, risk and usability. • Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR).• Deep architectural xxperience in one of the following specialisms: AI/ML Security/Cloud/M365/DevSecOps ...

Working knowledge of Jira, Confluence, and IT Service Management platforms. Good understanding of hybrid environments incorporating on-premise and cloud-hosted services. Familiarity with NCSC security guidance, Secure by Design principles, Zero Trust architectures, and UK Government security frameworks. Desirable Experience supporting products from vendors such as Everfox (Deep Secure ...

vulnerability management Kubernetes/EKS/ECS Leading and mentoring engineers Experience within government, financial services or regulated environments Desirable: Government security standards/NCSC principles ForgeRock, Okta, Auth0, Ping Identity or wider IAM experience AWS landing zones Security architecture and assurance Existing government security clearance Azure exposure Salary: Circa ...

common vulnerabilities. Knowledge of infrastructure, cloud, network and identity security concepts. Familiarity with: OWASP Testing Guide OWASP Top 10 MITRE ATT&CK Framework NCSC Cyber Security Guidance NIST Cybersecurity Framework Cyber Kill Chain Ability to analyse complex risks and communicate findings clearly. Eligible to obtain and maintain UK SC Clearance. ...

documentation, including HLDs, LLDs, and controls catalogues. Knowledge of relevant legislation and regulatory requirements, including: GDPR PCI DSS ICO requirements Familiarity with HMG and NCSC security policies, standards, and guidance. Excellent analytical, investigative, and problem-solving skills. Strong stakeholder engagement and communication capabilities. Ability to produce clear, concise, and actionable ...

security, together with a sound understanding of recognised frameworks and guidance such as ISO 27001, the NIST Cybersecurity Framework, the Cyber Assessment Framework and NCSC guidance. You will be able to develop technical roadmaps, standards and architectural patterns, assess complex technical risks and recommend pragmatic, proportionate solutions. Strong communication, influencing ...

Lead Implementer or Lead Auditor qualifications, CISMP or Security+. Knowledge of UK public-sector security expectations, including NCSC guidance, ITHC and departmental supplier assurance. Knowledge of UK GDPR and ICO obligations, SOC 2 or supplier risk management. Knowledge of Home Office sponsor-licence compliance from the IT and asset management ...

maximising the use of existing Microsoft licensing and supporting them through the process. Alignment of good practice frameworks and standards such as Cyber Essentials, NCSC CAF and ISO 27001. Ownership or oversight of key Information Security processes and procedures. Ownership of the Smartdesc MDR management service. Implementation and ownership ...

data-centre exit programmes. Expert knowledge of the Microsoft Cloud Adoption Framework and Azure Well-Architected Framework . Experience providing guidance around the NCSC Cyber Assessment Framework . Excellent stakeholder management and communication skills. Confidence working directly with clients and operating within consulting environments. Strong written and verbal English. Relevant ...