Jobs at NCC Group

Build, deploy, secure, monitor, and maintain Python application extensions, CLI tooling, and automations for Threat Intelligence platforms. Integrate backend systems, create tooling to support analysts and engineers, identify automation opportunities, and provide DevOps-focused support for cloud-native environments.

Build, deploy, secure, monitor, and maintain Python application extensions, CLI tooling, and automations for threat intelligence platforms. Integrate backend systems, support DevOps and analyst teams, identify automation opportunities, and maintain secure cloud-native tooling (AWS, containers).

Build, deploy, secure, monitor, and maintain Python application extensions, CLI tooling, and automations for Threat Intelligence platforms. Integrate backend systems to break down data silos, provide tooling and support for analysts and engineers, and identify automation opportunities across the department.

Senior technical leader in Sales Engineering & Field Strategy delivering complex cybersecurity solutions, leading solution design and bid responses, advising clients, mentoring solution architects, ensuring quality of client documentation, collaborating with sales/delivery/product teams, and supporting service evolution and account growth. Occasional national travel to represent the company.

Build, deploy, secure, monitor, and maintain Python application extensions, CLI tooling, and automations for Threat Intelligence platforms. Connect backend systems, create tooling to support developers/analysts, identify automation opportunities, and provide DevOps-focused support for secure cloud-based workflows.

Produce tactical threat intelligence across the full lifecycle: analyse threat actors, malware, and C2; map to MITRE ATT&CK; produce STIX/TAXII outputs; develop detections (YARA), tooling and automation; support DFIR/SOC, threat hunting, and external info-sharing.

Produce actionable threat intelligence across the full lifecycle: track threat actors, analyse malware and C2 infrastructure, map activity to MITRE ATT&CK, develop detections (YARA), support DFIR/SOC, build tooling and automate workflows, and communicate findings to technical and non-technical stakeholders.

Produce actionable threat intelligence across the full lifecycle: track threat actors, analyse malware and C2 infrastructure, map activity to MITRE ATT&CK, create STIX/TAXII outputs, develop detections (e.g., YARA), automate analysis tooling, and collaborate with SOC/DFIR and external communities to inform detection, response, and hunting.

Produce operationally relevant threat intelligence across the full lifecycle: identify and track threat actors, analyse malware and C2 infrastructure, map activity to MITRE ATT&CK, generate STIX/TAXII outputs and detections (e.g., YARA), support DFIR/SOC, develop tooling and automation, mentor analysts, and publish research to inform detection, response, and threat hunting.

Monitor systems for threats, analyze security incidents, provide incident remediation, and mentor junior team members in a Security Operations Center.

As a SOC Analyst, monitor systems for threats, analyze security alerts, provide incident remediation, mentor junior staff, and improve SOC procedures.

Hands-on senior OT cybersecurity engineer/consultant delivering OT network/security architecture, low-level designs, firewall and segmentation specifications, client technical workshops, vendor evaluations, and project deliverables while mentoring junior staff and contributing to practice standards.

As a SOC Analyst, monitor systems for threats, analyze security alerts, provide incident remediation, mentor junior team members, and improve SOC procedures.

Design, build and maintain Splunk-based SOAR automations and playbooks to detect, investigate and respond to cyber threats. Partner with Incident Response to develop use cases, validate automation behaviour, produce analytics, document changes, perform QA, and mentor junior engineers.

Act as the customer's technical owner for security services: assess security maturity (TAM Score), build and execute a 12-month technical roadmap, provide Azure Sentinel/Defender XDR expertise, translate metrics into risk-based narratives, deliver QBRs, resolve technical issues, drive proactive improvements (tuning, automation), produce technical deliverables (playbooks, analytics, dashboards), and advise on defensive security gaps.

Act as the customer's technical owner for security services, quantify security maturity via the TAM Score, build a 12-month technical roadmap, deliver QBRs, provide reactive ticket-based support, drive proactive improvements (tuning, automation), create technical deliverables (playbooks, analytics, workbooks), and advise on defensive security gaps and mitigation services.

Provide legal advice, draft and negotiate commercial contracts, and handle matters including data protection, IP, employment, disputes and real property. Liaise with global legal team, advise on cyber-security policy, support stakeholders, ensure compliance, and drive strategic legal risk mitigation.

Design and document scalable cybersecurity solutions for mid-to-large client opportunities, support pre-sales technical consultancy, contribute to proposals and cost modelling, advise clients, align solutions with Sales and Delivery, mentor junior staff, and maintain awareness of emerging threats and technologies.

Lead Enterprise Architect responsible for reviewing, designing and implementing enterprise architecture. Align business needs with IT strategy, produce architecture and technical documentation, chair technical sessions, define roadmaps, assess current 'as-is' estate and security concerns, and support GTS and business projects through early project engagement to deliver secure, highly available hybrid cloud and corporate services solutions.

Prepare group half‑year and year‑end consolidated results, support statutory accounts (FRS 101), manage IFRS technical areas (IFRS16, IFRS2/share‑based payments), liaise with external auditors, maintain consolidation models and divisional submissions, and support the Group Finance technical team and director.