Jobs at NCC Group

Lead complex red team and adversary simulation engagements from initial access through objective completion. Design attack plans, evade security controls, develop tooling, manage operational risk, and produce executive-level reports and briefings. Build client relationships, support technical pre-sales, develop internal capabilities, track emerging threats, and mentor junior consultants. The role requires expertise across Active Directory, Office 365, cloud security, macOS, and mixed environments.

Lead strategic cyber advisory growth by originating, shaping, and winning complex enterprise opportunities. Build executive relationships, connect cyber risk and regulatory priorities to cybersecurity solutions, and direct cross-functional pursuit teams. Advise clients on governance, identity, cloud, application security, third-party risk, operational resilience, AI governance, incident readiness, and assurance.

Leads strategic cyber advisory growth for the financial services and insurance sector. Originates, shapes, qualifies, and wins complex cybersecurity opportunities; builds executive relationships; leads cross-functional pursuit teams; and connects cyber risk, regulatory requirements, operational resilience, identity, cloud, AI, third-party risk, and assurance capabilities to client outcomes.

Leads strategic cybersecurity advisory growth across the Technology, Media and Telecommunications sector. Originates, shapes, and wins complex cyber opportunities; builds executive relationships; develops account strategies; and leads cross-functional pursuit teams. Advises clients on cyber risk, regulatory readiness, identity, cloud and application security, third-party risk, operational resilience, AI governance, incident readiness, and assurance. Converts senior networks and cyber expertise into qualified pipeline, transformational deals, and revenue growth.

Leads strategic cyber advisory growth in the public sector by originating and winning complex opportunities, building executive relationships, shaping transformational solutions, and coordinating cross-functional pursuit teams. Advises clients on cyber risk, regulatory readiness, identity, cloud and application security, third-party risk, operational resilience, AI governance, incident readiness, and assurance.

Senior client-facing cyber advisory leader responsible for originating, shaping, and winning strategic cybersecurity opportunities in the industrials sector. The role builds executive relationships, leads complex cross-functional pursuits, develops account strategies, qualifies opportunities, and translates cyber risk, regulatory requirements, and technical capabilities into commercially compelling solutions. Focus areas include governance, cloud and application security, identity, third-party risk, operational resilience, AI governance, incident readiness, and assurance.

Drive enterprise and mid-market cybersecurity sales by shaping propositions, developing and closing complex opportunities, and managing pricing, contracts, commercial risk, and delivery feasibility. Partner with account executives, sales engineering, product, and delivery teams; lead customer presentations and workshops; build ROI models and business cases; influence pipeline progression; coach sales teams; and support campaigns and portfolio development.

Design, develop, and implement custom ServiceNow applications; gather requirements from stakeholders; customize and integrate ServiceNow with external systems; perform testing and ensure coding standards; document solutions and provide ongoing support; collaborate with admins and IT teams to deliver scalable ServiceNow solutions.

Monitor, detect, investigate, and respond to security events using Splunk Enterprise Security. Triage incidents, perform log analysis and event correlation, assist threat hunting and vulnerability remediation, escalate significant incidents, and maintain incident documentation and SOC playbooks.

Design, build and maintain Splunk-based SOAR automations and playbooks to detect, investigate and respond to cyber threats. Partner with Incident Response to develop use cases, validate automation behaviour, produce analytics, document changes, perform QA, and mentor junior engineers.

Administer and maintain endpoint security platforms (Tanium & SentinelOne), deploy and manage Tanium modules, monitor performance, build dashboards and reports, perform audits and compliance checks, troubleshoot endpoint visibility/patching/deployments, integrate endpoint tools with IT/security systems, and provide training and support.