resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
resilient, secure and scalable services Identify, own, and respond to security risks and issues as they arise Cultivate and maintain relationships with other security teams within UKHSA, Cabinet Office, NCSC and the rest of government Ensure all work is in line with DSPT-CAF compliance and the security architecture framework (blueprints, standards etc...) are maintained. Essential role criteria: can demonstrate More ❯
and MS Azure Entra ID . Experience implementing PAWS , SOC integration, and endpoint security controls. Knowledge of secure software development lifecycle (SSDLC) and DevSecOps practices. Familiarity with ISO 27001 , NCSC guidance , and protective monitoring standards. Proven experience with Security Architecture frameworks such as SABSA and TOGAF. Experience in designing systems/products in line with UK Government Security Group secure More ❯
Models - IaaS, PaaS, SaaS, hybrid and multi-cloud models. Familiar with common industry cloud providers - AWS, GCP, Azure, OCI. Practical understanding of industry cloud security principles and their application - NCSC, NIST, CSA. Familiarity with common cloud related compliance Benchmarks - CIS, GDPR, PCI-DSS, ISO27001, ISO27017, ISO27018, TSR, OFCOM. Strong documentation, design and presentation skills with the ability to create management More ❯
Wigan, Greater Manchester, North West, United Kingdom Hybrid/Remote Options
Police Digital Services
and procedures (TTPs), and emerging threat patterns. Profile cyber adversaries by analyzing behavioral patterns, infrastructure, and motivations to inform strategic and tactical defense measures. Collaborate with national partners including NCSC and NCA, to share your findings and coordinate responses. Produce high-quality, actionable reports and briefings for a range of stakeholders, including technical teams, senior police leadership, and government departments. More ❯
manchester, north west england, united kingdom Hybrid/Remote Options
Police Digital Services
and procedures (TTPs), and emerging threat patterns. Profile cyber adversaries by analyzing behavioral patterns, infrastructure, and motivations to inform strategic and tactical defense measures. Collaborate with national partners including NCSC and NCA, to share your findings and coordinate responses. Produce high-quality, actionable reports and briefings for a range of stakeholders, including technical teams, senior police leadership, and government departments. More ❯
and develop team members. Requirements Expectations increase with seniority. Degree in Engineering, Computer Science, Information Security or equivalent discipline. Interest in or possession of professional cyber qualifications such as NCSC ACP, CISSP, CISM, CCSP, CWSP, CRISC or CISA. Foundational to advanced experience in cybersecurity consulting or within an organisation operating OT or critical infrastructure. Understanding of ICS or OT technologies More ❯
SOC environments. Hands-on experience with Azure Security Center, Microsoft Sentinel, Defender ATP, M365 Security & Compliance, and KQL scripting. Knowledge of frameworks such as MITRE ATT&CK, NIST, CIS, NCSC, and Security Scorecard. Understanding of network security systems (Zscaler, Darktrace, Firewalls, NAC, VPN, wireless, segmentation). Strong grasp of cloud computing (IaaS/PaaS/SaaS), authentication (AAD, Managed Identity More ❯
Camberley, Surrey, South East, United Kingdom Hybrid/Remote Options
Morson Edge
security through design and delivery. Background in the defence, maritime, or critical national infrastructure environment. Skills & Qualifications: Degree (or equivalent experience) in a relevant STEM or Information Security discipline. NCSC CCP SIRA status (or ability to achieve). Membership of a relevant professional body. Strong stakeholder engagement, leadership, and mentoring capabilities. Why Join? This is an opportunity to play a More ❯
the ability to write and present detailed reports - Thorough understanding of Physical Security and information security law including GDPR and NIS - Exposure to CyberSecurity frameworks, standards and certifications: NCSC CAF, NIST, ISO 27000 series, CIS, PSP, CRISK, RSES The role will also involve taking responsibility for reviewing CyberSecurity policies, assisting with incident and security reviews and ensuring that More ❯
policies, and best practices. Design security controls and solutions for new and existing systems, applications, and services, ensuring they are secure by design and compliant with relevant standards (e.g., NCSC, GDPR, ISO 27001). Conduct threat modelling and risk assessments to identify and mitigate potential security vulnerabilities in proposed and existing systems. Security Policy Development and Compliance Develop, implement, and More ❯
Corsham, Wiltshire, South West, United Kingdom Hybrid/Remote Options
Sanderson Recruitment
framework , MOD digital services, or Defence data standards Infrastructure as Code - Terraform or Ansible Experience with MODCloud, AWS, or Azure Testing frameworks: Jest, Mocha, Supertest Familiarity with JSP 440 , NCSC Secure Coding Guidelines , or Defence Digital standards Security Clearance Active SC clearance is mandatory . Candidates eligible for DV clearance will be prioritised for longer-term roles. Reasonable Adjustments: Respect More ❯
framework , MOD digital services, or Defence data standards Infrastructure as Code - Terraform or Ansible Experience with MODCloud, AWS, or Azure Testing frameworks: Jest, Mocha, Supertest Familiarity with JSP 440 , NCSC Secure Coding Guidelines , or Defence Digital standards Security Clearance Active SC clearance is mandatory . Candidates eligible for DV clearance will be prioritised for longer-term roles. If you're More ❯