Teams at NCC Group

Build, deploy, secure, monitor, and maintain Python application extensions, CLI tooling, and automations for Threat Intelligence platforms. Integrate backend systems, create tooling to support analysts and engineers, identify automation opportunities, and provide DevOps-focused support for cloud-native environments.

Produce actionable threat intelligence across the full lifecycle: track threat actors, analyse malware and C2 infrastructure, map activity to MITRE ATT&CK, develop detections (YARA), support DFIR/SOC, build tooling and automate workflows, and communicate findings to technical and non-technical stakeholders.

Monitor systems for threats, analyze security incidents, provide incident remediation, and mentor junior team members in a Security Operations Center.