Jobs at NCC Group

Ensures the quality, consistency, technical accuracy, and readability of cybersecurity assessment reports. Responsibilities include copy editing, proofreading, translating technical findings and business risks for non-technical readers, maintaining report library content, reviewing client-facing materials, and collaborating with management and internal departments. The role suits experienced proofreaders, copy editors, or pentesters transitioning away from hands-on testing.

Provides independent safety consultancy for complex, safety-critical and security-relevant computer-based systems. Responsibilities include reviewing software, system designs, testing, safety cases and assurance arguments; conducting hazard and risk assessments; interpreting standards; developing evidence-based technical positions; writing reports; advising clients; applying analytical techniques; and mentoring junior consultants.

Design, develop, and implement custom ServiceNow applications; gather requirements from stakeholders; customize and integrate ServiceNow with external systems; perform testing and ensure coding standards; document solutions and provide ongoing support; collaborate with admins and IT teams to deliver scalable ServiceNow solutions.

Monitor, detect, investigate, and respond to security events using Splunk Enterprise Security. Triage incidents, perform log analysis and event correlation, assist threat hunting and vulnerability remediation, escalate significant incidents, and maintain incident documentation and SOC playbooks.

Design, build and maintain Splunk-based SOAR automations and playbooks to detect, investigate and respond to cyber threats. Partner with Incident Response to develop use cases, validate automation behaviour, produce analytics, document changes, perform QA, and mentor junior engineers.

Administer and maintain endpoint security platforms (Tanium & SentinelOne), deploy and manage Tanium modules, monitor performance, build dashboards and reports, perform audits and compliance checks, troubleshoot endpoint visibility/patching/deployments, integrate endpoint tools with IT/security systems, and provide training and support.