1 to 25 of 379 Remote NIST Jobs

Proven experience leading cyber security operations in a regulated or financial services environment (FCA exposure preferred). Strong understanding of security governance, assurance frameworks, and audit processes (ISO 27001, NIST, GDPR, Cyber Essentials Plus). Experience with modern security tooling such as:o Cortex XDR/Palo Alto Networkso Splunk (SIEM and dashboarding)o Abnormal Security (email security)o Prisma More ❯

Strong understanding on Infrastructure-as-Code (IaC) (inc, Bicep/Terraform). Understanding of modern DevOps and CI/CD pipelines (DevSecOps). Knowledge of compliance frameworks (ISO 27001, NIST, CIS Benchmarks) desirable Key Attributes Analytical mindset with strong problem-solving skills. Excellent communication skills like able to explain technical concepts clearly to non-technical stakeholders. Proactive, curious, and continuously More ❯

Leadership & Strategy Define and implement the company's security strategy across AI, blockchain, and cloud environments. Establish policies, standards, and governance frameworks aligned with industry best practices (ISO 27001, NIST, SOC2). Lead incident response, risk assessment, and threat modelling programmes. Build and mentor a world-class security team. AI Data Security Protect proprietary AI models, training data, and pipelines More ❯

designing and implementing enterprise security and solution security architectures for large organisations leveraging frameworks such as SABSA and TOGAF Implementation of cybersecurity controls using industry-leading practices such as NIST CSF, NIST 800-53, OWASP, Centre for Internet Security (CIS), ISO 27001, COBIT etc Experience in maintaining compliance with regulations and standards such as NISD, GDPR, PCI-DSS etc in More ❯

load balancing, firewalls, proxies (F5, Palo Alto, Forcepoint, Cisco ASA). Strong knowledge of wireless networking design and optimisation. Security integration: Zero Trust, segmentation, NAC; familiarity with ISO 27001, NIST, PCI-DSS, GDPR. Cloud & Virtualisation: AWS, Azure, or GCP networking services; understanding of hybrid/multi-cloud; automation tools (Terraform, Ansible, Python). Monitoring & Management: Network management systems (SolarWinds, Cisco More ❯

Ensure alignment of security measures with compliance standards (GDPR, HIPAA, PCI DSS). Conduct regular security audits and assessments to identify and remediate risks. Apply industry frameworks such as NIST Cybersecurity Framework, ISO 27001, CIS Controls . Oversee and enhance security technologies: SIEM, vulnerability management, cloud security (OCI/Azure/AWS), PKI, cryptography, web/email security, logging and More ❯

concepts that clearly communicate value and differentiation. Solution Architecture Design comprehensive security architectures across network, endpoint, identity, cloud, and data protection domains. Ensure alignment with industry frameworks such as NIST, ISO, and CIS, and compliance with regulatory standards (PCI-DSS, HIPAA, etc.). Produce proposals, Bills of Materials (BOMs), high-level designs, and Statements of Work (SOWs). Vendor & Partner More ❯

and adversarial assessments. Skills & Experience Extensive experience in cybersecurity, including AI/ML security architecture. Strong knowledge of AI/ML models, algorithms, and adversarial mitigation. Familiarity with frameworks: NIST, ISO 27001, TOGAF, SABSA. Certifications: CISSP or CISM. Experience with cloud security (Azure, AWS, or GCP). Excellent communication and stakeholder management skills. Eligible for UK Security Clearance (SC). More ❯

and adversarial assessments. Skills & Experience Extensive experience in cybersecurity, including AI/ML security architecture. Strong knowledge of AI/ML models, algorithms, and adversarial mitigation. Familiarity with frameworks: NIST, ISO 27001, TOGAF, SABSA. Certifications: CISSP or CISM. Experience with cloud security (Azure, AWS, or GCP). Excellent communication and stakeholder management skills. Eligible for UK Security Clearance (SC). More ❯

Security+, CEH, CySA+, or Cloud Security Engineer. Extensive experience in cybersecurity, especially incident response and technical operations. Strong understanding of AWS and Azure cloud platforms. Familiarity with frameworks like NIST, ISO, COBIT, and OWASP. Proven success in leading and delivering security projects. Experience with PowerShell and automation. Consulting experience across IT and digital teams. Flexibility for occasional travel and out More ❯

experience with Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft Purview in real-world environments. Strong understanding of cloud security architecture, SIEM/SOAR, compliance frameworks (e.g., ISO 27001, NIST, GDPR), and data protection. Familiarity with Azure, Microsoft 365, and hybrid cloud environments. Understanding of security operations, incident response, and threat intelligence. CORE COMPETENCIES & SKILLS Proven experience with Microsoft Sentinel More ❯

qualifications such as CISA, CISSP or CISM would also be desirable. Cyber security experience within a large complex corporate regulated environment and familiarity with cybersecurity regulations and frameworks (e.g., NIST, CIS, GDPR) and their application. Strong understanding of cybersecurity principles, threats, and risk management practices. Proficiency in security tools and technologies. Knowledge of data protection and privacy laws relevant to More ❯

Proven experience defining and implementing AI security frameworks and risk management processes. Deep knowledge of adversarial machine learning and AI threat modelling. Familiarity with key security frameworks such as NIST, ISO 27001, TOGAF, SABSA . Current certifications such as CISSP, CISM, or equivalent . Experience with cloud environments (Azure, AWS, GCP) and DevSecOps for AI pipelines. Strong understanding of data More ❯

Proven experience defining and implementing AI security frameworks and risk management processes. Deep knowledge of adversarial machine learning and AI threat modelling. Familiarity with key security frameworks such as NIST, ISO 27001, TOGAF, SABSA . Current certifications such as CISSP, CISM, or equivalent . Experience with cloud environments (Azure, AWS, GCP) and DevSecOps for AI pipelines. Strong understanding of data More ❯

Proven experience defining and implementing AI security frameworks and risk management processes. Deep knowledge of adversarial machine learning and AI threat modelling. Familiarity with key security frameworks such as NIST, ISO 27001, TOGAF, SABSA . Current certifications such as CISSP, CISM, or equivalent . Experience with cloud environments (Azure, AWS, GCP) and DevSecOps for AI pipelines. Strong understanding of data More ❯

Proven experience defining and implementing AI security frameworks and risk management processes. Deep knowledge of adversarial machine learning and AI threat modelling. Familiarity with key security frameworks such as NIST, ISO 27001, TOGAF, SABSA . Current certifications such as CISSP, CISM, or equivalent . Experience with cloud environments (Azure, AWS, GCP) and DevSecOps for AI pipelines. Strong understanding of data More ❯

Proven experience defining and implementing AI security frameworks and risk management processes. Deep knowledge of adversarial machine learning and AI threat modelling. Familiarity with key security frameworks such as NIST, ISO 27001, TOGAF, SABSA . Current certifications such as CISSP, CISM, or equivalent . Experience with cloud environments (Azure, AWS, GCP) and DevSecOps for AI pipelines. Strong understanding of data More ❯

Proven experience defining and implementing AI security frameworks and risk management processes. Deep knowledge of adversarial machine learning and AI threat modelling. Familiarity with key security frameworks such as NIST, ISO 27001, TOGAF, SABSA . Current certifications such as CISSP, CISM, or equivalent . Experience with cloud environments (Azure, AWS, GCP) and DevSecOps for AI pipelines. Strong understanding of data More ❯

MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). More ❯

MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). More ❯

solutions design, ensuring the confidentiality, integrity, and availability of corporate systems and data. Define, design, and implement enterprise-grade security controls and reference architectures, aligned with frameworks such as NIST, ISO27001, and CIS. Conduct security design and architecture reviews for technology projects, integrations, and third-party solutions. Lead security assurance for cloud transformation initiatives, promoting best practices such as zero More ❯

to undergo DV clearance/UK Citizen/residing in UK Strong working knowledge of: JSP440, JSP604/453, JSP490 MOD/GDS Secure by Design principles ISO 27001, NIST CSF, CIS Controls v8 HMG, NPSA, NCSC policies and guidance Cloud security (Azure, AWS), containerisation, KMS, WAFs Event-driven microservices, network infrastructure, IDS/IPS AI security (ISO42001 desirable), ITHC More ❯

to undergo DV clearance/UK Citizen/residing in UK Strong working knowledge of: JSP440, JSP604/453, JSP490 MOD/GDS Secure by Design principles ISO 27001, NIST CSF, CIS Controls v8 HMG, NPSA, NCSC policies and guidance Cloud security (Azure, AWS), containerisation, KMS, WAFs Event-driven microservices, network infrastructure, IDS/IPS AI security (ISO42001 desirable), ITHC More ❯

principles Practical experience with a range of security tools and platforms, both on-premises and in cloud environments Familiarity with key industry standards and frameworks such as ISO 27001, NIST, and CIS The ability to assess risk, identify vulnerabilities, and implement effective mitigation strategies Experience responding to security incidents and performing thorough root cause analysis Strong communication skills with the More ❯

principles Practical experience with a range of security tools and platforms, both on-premises and in cloud environments Familiarity with key industry standards and frameworks such as ISO 27001, NIST, and CIS The ability to assess risk, identify vulnerabilities, and implement effective mitigation strategies Experience responding to security incidents and performing thorough root cause analysis Strong communication skills with the More ❯