Senior Cyber Engineer

Thanks for checking out our job opening; we are excited that YOU are interested in learning more about NCC Group.

We are on a mission to make society a safer and more secure place. Our people are the ones who make that possible; a global community of talented individuals working together towards a safer future.

We aim to create an environment where everyone can reach their full potential. We work together, we are brilliantly creative, we embrace difference, and we want you to join in our mission, as a Senior Cyber Engineer.

Take a look at our website here to learn more about why we’re one of the leading global Cyber Security and Risk Mitigation business

The Opportunity

The Remediate practice works with NCC Group clients to deliver prioritised programs of security improvements; in close collaboration with NCC Group security audit, Incident Response, Penetration and Red Teams.

Senior Cyber Engineers play key roles in these client assignments: as recognised technical experts with hands-on skills they implement security principles for clients, as well as advising clients and their service providers on changes they will make in collaboration.

As part of a project team, they help to identify priorities, ensure delivery is progressing with pace and agility, and validate that improvements are properly implemented. They work with SMEs across NCC Group to ensure the right expertise is delivered for each requirement.

The Challenge

Senior Cyber Engineers in Remediate work in a range of capacities:
- Working with sales and pre-sales teams to capture requirements and create project proposals- Providing technical input for work plans and estimate project timescales/costings- Assessing pre-existing risk and security information including incident reports, red team findings, penetration tests and security audits, augmenting those where appropriate with additional security reviews- Providing technical input to prioritisation and planning processes- Creating technical content for project documents- Acting as technical lead for the NCC Group team delivering a Remediate project, supervising the work of other engineers and verifying their output- Working closely with NCC Group colleagues, client and third-party technical staff to deliver prioritised improvements at pace, and delivering some of that workload themselves hands-on- Mentoring junior staff from a technical perspective- Reviewing all improvements delivered to ensure they deliver the expected risk mitigations- Working with NCC Group colleagues where appropriate to ensure all relevant technical factors are being considered and appropriate technical resources are engaged- Updating project managers on project status, resource allocation and project risk- Championing the Remediate practice with colleagues across NCC Group

Essential Skills

Above all, we would like to speak with people who are passionate about what they do. Remediate projects are highly agile and collaborative in nature, and the Senior Cyber Engineer role therefore combines deep technical expertise with demonstrable soft skills.

Experience in several of the following, in an enterprise context:
- Windows, Active Directory, Azure AD and Microsoft 365- Azure, AWS, GCP- DevOps, CI/CD, software development and testing, infrastructure as code- Network engineering and support- Infrastructure engineering and support- Information security management, IT compliance- Blue team, network defence, protective monitoring engineering- Experience of working in an agile project environment- Experience of working in hybrid teams (client and multiple service providers, on-shore and off-shore, for example)- Knowledge of cyber security principles, though it is not essential to come from a cyber security background- Quality assurance and / or system testing- Writing clear and accurate technical documentation

The following additional attributes would be advantageous:
- Cloud based provider qualifications or demonstrable strong in-depth experience- A technical cyber security qualification such as OSCP or solid experience of competing in CTFs.- Knowledge of cyber security frameworks such as MITRE ATT&CK- Experience of working in a consultancy- Experience creating solution architectures and designs

The following qualifications maybe advantageous:
Certified Information Systems Security Professional (CISSP)

Information Systems Security Architecture professional (CISSP - ISSAP)

Information Systems Security Engineering Professional (CISSP - ISSEP)

Information Systems Security Management Professional (CISSP - ISSMP)

Certified Secure Software Lifecycle Professional (CSSLP)

Systems Security Certified Practitioner (SSCP)

Certified Cloud Security Professional (CCSP)

Certificate of Cloud Security Knowledge (CCSK)

Certified Information Systems Auditor (CISA)

GIAC Information Security Fundamentals (GISF)

GIAC Security Essentials (GSEC)

GIAC Defensible Security Architecture (GDSA)

GIAC Information Security Professional (G