Jobs at NCC Group

Produce tactical threat intelligence across the full lifecycle: analyse threat actors, malware, and C2; map to MITRE ATT&CK; produce STIX/TAXII outputs; develop detections (YARA), tooling and automation; support DFIR/SOC, threat hunting, and external info-sharing.

Produce actionable threat intelligence across the full lifecycle: track threat actors, analyse malware and C2 infrastructure, map activity to MITRE ATT&CK, develop detections (YARA), support DFIR/SOC, build tooling and automate workflows, and communicate findings to technical and non-technical stakeholders.

Produce actionable threat intelligence across the full lifecycle: track threat actors, analyse malware and C2 infrastructure, map activity to MITRE ATT&CK, create STIX/TAXII outputs, develop detections (e.g., YARA), automate analysis tooling, and collaborate with SOC/DFIR and external communities to inform detection, response, and hunting.

Produce operationally relevant threat intelligence across the full lifecycle: identify and track threat actors, analyse malware and C2 infrastructure, map activity to MITRE ATT&CK, generate STIX/TAXII outputs and detections (e.g., YARA), support DFIR/SOC, develop tooling and automation, mentor analysts, and publish research to inform detection, response, and threat hunting.

Monitor systems for threats, analyze security incidents, provide incident remediation, and mentor junior team members in a Security Operations Center.

As a SOC Analyst, monitor systems for threats, analyze security alerts, provide incident remediation, mentor junior staff, and improve SOC procedures.

Hands-on senior OT cybersecurity engineer/consultant delivering OT network/security architecture, low-level designs, firewall and segmentation specifications, client technical workshops, vendor evaluations, and project deliverables while mentoring junior staff and contributing to practice standards.

As a SOC Analyst, monitor systems for threats, analyze security alerts, provide incident remediation, mentor junior team members, and improve SOC procedures.

Design, build and maintain Splunk-based SOAR automations and playbooks to detect, investigate and respond to cyber threats. Partner with Incident Response to develop use cases, validate automation behaviour, produce analytics, document changes, perform QA, and mentor junior engineers.

Act as the customer's technical owner for security services: assess security maturity (TAM Score), build and execute a 12-month technical roadmap, provide Azure Sentinel/Defender XDR expertise, translate metrics into risk-based narratives, deliver QBRs, resolve technical issues, drive proactive improvements (tuning, automation), produce technical deliverables (playbooks, analytics, dashboards), and advise on defensive security gaps.

Act as the customer's technical owner for security services, quantify security maturity via the TAM Score, build a 12-month technical roadmap, deliver QBRs, provide reactive ticket-based support, drive proactive improvements (tuning, automation), create technical deliverables (playbooks, analytics, workbooks), and advise on defensive security gaps and mitigation services.

Provide legal advice, draft and negotiate commercial contracts, and handle matters including data protection, IP, employment, disputes and real property. Liaise with global legal team, advise on cyber-security policy, support stakeholders, ensure compliance, and drive strategic legal risk mitigation.

Design and document scalable cybersecurity solutions for mid-to-large client opportunities, support pre-sales technical consultancy, contribute to proposals and cost modelling, advise clients, align solutions with Sales and Delivery, mentor junior staff, and maintain awareness of emerging threats and technologies.

Lead Enterprise Architect responsible for reviewing, designing and implementing enterprise architecture. Align business needs with IT strategy, produce architecture and technical documentation, chair technical sessions, define roadmaps, assess current 'as-is' estate and security concerns, and support GTS and business projects through early project engagement to deliver secure, highly available hybrid cloud and corporate services solutions.

Prepare group half‑year and year‑end consolidated results, support statutory accounts (FRS 101), manage IFRS technical areas (IFRS16, IFRS2/share‑based payments), liaise with external auditors, maintain consolidation models and divisional submissions, and support the Group Finance technical team and director.

Deploy, configure and support MXDR solutions for customers; act as subject-matter expert for SIEM/EDR platforms; collaborate with SOC, SDM and stakeholders to troubleshoot incidents, improve automation/processes, and deliver client-focused technical consultancy and knowledge sharing.

The Senior Python Developer will design, develop, and maintain Python applications while mentoring junior developers and ensuring code quality through collaboration and best practices.

Manage end-to-end regional bid process: identify and qualify RFPs, coordinate cross-functional teams, own bid narrative and compliance, author core proposal content, manage timelines and approvals, maintain bid content and templates, drive post-bid reviews, and support CRM tracking to maximize win rates for complex multi-region opportunities.

Design and shape cybersecurity presales solutions, scope engagements, produce client-facing proposals and SOWs, advise sales teams, support RFx responses, and collaborate with delivery and product teams to ensure commercially viable, standards-aligned solutions.

The Senior Python Developer is responsible for designing, developing, and maintaining software systems using Python. This role includes mentoring junior developers, ensuring code quality, and collaborating with cross-functional teams to meet project requirements.