NCC Group

4 job(s) at NCC Group

NCC Group
Aug 09, 2025
Full time
Executive Principal Security Consultant - Technical Assurance page is loaded Executive Principal Security Consultant - Technical Assurance Apply locations Manchester Cheltenham London time type Full time posted on Posted 3 Days Ago time left to apply End Date: August 31, 2025 (22 days left to apply) job requisition id R9599 Executive Principal Consultant - Red Team Cheltenham / Manchester / London - hybrid, with occasional travel to client sites Thanks for checking out our vacancy. We're excited you want to know more about NCC Group. Our role: As an Executive Principal Consultant within the Red Teaming practice, you'll take a leading role in delivering high-end adversary simulation engagements for clients with mature security postures and critical risk profiles. You'll operate across the entire attack lifecycle from initial access and evasion of EDR, through lateral movement and objective completion while ensuring the safety, confidentiality, and operational integrity of every engagement. This role is central to advancing NCC Group's offensive security capability while helping our clients understand, detect, and respond to sophisticated threats in real-world scenarios. Day to day You'll lead the design, planning, and execution of Red Team and adversary simulation engagements across critical sectors such as financial services, government, and defence. These operations will align with frameworks such as CBEST, TIBER, CORIE, and more. You'll also build strong relationships with C-level stakeholders, lead debriefs with both technical and executive audiences, and translate complex attack paths into clear, actionable insight. Over the next 6-12 months, you'll establish yourself as a senior authority in the Red Teaming space, contribute to tooling and methodology development, mentor rising talent, and play an active role in growing our capability in both regulated and bespoke assessments. You'll also contribute to our capability development and mentor the next generation of Red Teamers. You will stand out if You are an experienced operator who combines deep technical expertise with strong client-facing and leadership skills. You're comfortable running complex operations end-to-end and enjoy mentoring others while staying hands-on. To be successful in this role you will need experience and qualifications like: Designing and delivering complex adversary simulations Evading controls such as EDR/EPP and navigating defensive environments Microsoft AD, Office 365, cloud platforms (AWS, Azure, GCP), MacOS Stakeholder engagement, including executive-level briefings Report writing that balances narrative flow and technical accuracy Familiarity with CBEST, TIBER, CORIE, AASE, iCAST, FEER Current CCSAM (or equivalent) qualification. However, if you hold CCSAS and want to pursue the CCSAM route, we are keen to support you in your venture CREST CCT-INF is desired Experience building tools or automation for Red Team use. Our company At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams' partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks. Our colleagues are our greatest asset, and we want you to put down roots at NCC Group. We are committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. Come join us! What do we offer in return? We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits: Flexible working Financial & Investment Pension Life Assurance Share Save Scheme Maternity & Paternity leave Community & Volunteering Programmes Green Car Scheme Cycle Scheme Employee Referral Program Lifestyle & Wellness Learning & Development So, what's next? If this sounds like the right opportunity for you, then we would love to hear from you! Click on apply to this job to send us your CV and cover letter and the relevant member of our global talent team will be in touch with you. Alternatively send your details to . About your application We review every application received and will get in touch if your skills and experience match what we're looking for. If you don't hear back from us within 10 days, please don't be too disappointed - we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles. If you do not want us to retain your details, please email . All personal data is held in accordance with the NCC Group Privacy Policy (candidate-privacy-notice-261023.pdf ( . We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage. Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject to BS7858 screening as a mandatory requirement. About Us The NCC Group family has over 2,200 members located all around the world, providing a trusted advisory service to 15,000 customers. Born in the UK, we have now have offices in North America, Canada, Europe, Asia- Pacific and United Arab Emirates. We are passionate about helping our customers to protect their brand, value and reputation against the ever-evolving threat landscape. We fuel that passion with investment in our people and our business. Our values and code of ethics are at the heart of how we operate - we work together, we are brilliantly creative and we embrace difference. We treat everyone and everything with equal respect. We want to create an environment where all colleagues feel psychologically, emotionally and physically safe to be authentic, sharing their personal experiences to represent the diversity of the world they live in, and have equal opportunity to achieve their best.
NCC Group
Aug 09, 2025
Full time
Managing Consultant - Safety page is loaded Managing Consultant - Safety Apply locations London Manchester Cheltenham time type Full time posted on Posted 4 Days Ago job requisition id R9614 Position Title: Managing Consultant - Safety Job Type: Permanent Location: London (Hybrid) Role Purpose: Adelard, part of NCC Group, is looking for consultants to join our team. We exist to provide independent and technically sound advice on how to engineer and assure the trustworthiness of computer-based systems. We are an influential product and services business working in the nuclear, medical, defence, finance, air traffic control and rail sectors and in critical infrastructure protection. Our team supports the delivery of several critical projects. Our key clients include large multinationals as well as government agencies and other leading national and international infrastructure providers. Summary: The role will include work and exposure across the following areas: • Software, HDL and system analysis & modelling: We analyse and model software-based and FPGA-based systems using various techniques. The analysis may be based on design documentation as well as on the source code. We apply modern analysis techniques to real world software systems. The techniques include formal methods, model checking, dynamic analysis, static analysis (control and data flow, semantic analysis, integrity and concurrency analysis) as well as statistical analysis of field data and a variety of testing techniques. The work involves both the engineering of tools as well as their application. • Safety and security assessment: We contribute to the assurance of our clients' projects by assisting with hazard analysis, assessing safety-critical systems and devices, providing independent advice, and reviewing a wide range of safety, assurance, and security cases. We assess the behaviour of some of the interesting and important computer-based systems in operation today. • Standards and regulations: We harness our expertise in technology and safety-critical domains to write and inform standards and regulations, as well as help our clients understand and demonstrate compliance with a variety of international standards. • Research: We research ways of building safety and assurance cases that are valid and believable, using techniques from graphical languages to logic. We are also at the leading edge of research in software analysis techniques, and we put our research into practice. • Software development: We have a market leading safety case product ASCE that will continue to evolve and our analysis and research involves the building of bespoke tools, plug-ins and models. What we are looking for in you: Team membersshould have a degree in a relevant subject (computer science, mathematics, physics etc.), and or have significant working experience/strong background in computer science or software engineering, like code and computers and understand how they work. You should be able to interpret, write and present technical material clearly. You must be capable of weighing diverse opinions, providing advice that is firmly based on an understanding of policy and precedent, and when appropriate, defend that advice constructively. Emotional intelligence is important, and the role requires high levels of experience and confidence with working with a variety of project stakeholders. The nature of our work is exciting, and we are connected by the focus on bringing value - this means we need to work with pragmatism and be able to pivot between high- and low-level detail to reach outcomes that matter. You would be used to working in and managing a variety of projects at any one time, as our projects tend to scale many capabilities at once - but working as a team with a variety of deep expertise is designed to be enriching. It is useful if you have or be qualified to obtain UK security clearance and have a safety or security background, although we will provide suitable training in-house for anyone with technical aptitude. The position will involve travel from time to time within the UK, and in some cases to Europe and the US. Behaviours: Focusing on Clients and Customers. Working as one NCC. Always Learning. Being Inclusive and respectful. Delivering brilliantly. Why NCC Group? At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams' partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks. Our colleagues are our greatest asset, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well-being, and we offer wellness programs and flexible working arrangements to provide that vital support. What do we offer in return? We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits; Flexible working Financial & Investment Pension Life Assurance Share Save Scheme Maternity & Paternity leave Community & Volunteering Programmes Green Car Scheme Cycle Scheme Healthcare ️ Office Lifestyle Employee Referral Program Lifestyle & Wellness Learning & Development Diversity & Inclusion So, what's next? If this sounds like the right opportunity for you, then we would love to hear from you! Click on apply to this job to send us your CV and cover letter and the relevant member of our global talent team will be in touch with you. Alternatively send your details to . About your application We review every application received and will get in touch if your skills and experience match what we're looking for. If you don't hear back from us within 10 days, please don't be too disappointed - we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles. If you do not want us to retain your details, please email . All personal data is held in accordance with the NCC Group Privacy Policy ( candidate-privacy-notice-261023.pdf () ). We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage. Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject to BS7858 screening as a mandatory requirement. About Us The NCC Group family has over 2,200 members located all around the world, providing a trusted advisory service to 15,000 customers. Born in the UK, we have now have offices in North America, Canada, Europe, Asia- Pacific and United Arab Emirates. We are passionate about helping our customers to protect their brand, value and reputation against the ever-evolving threat landscape. We fuel that passion with investment in our people and our business. Our values and code of ethics are at the heart of how we operate - we work together, we are brilliantly creative and we embrace difference. We treat everyone and everything with equal respect. We want to create an environment where all colleagues feel psychologically, emotionally and physically safe to be authentic, sharing their personal experiences to represent the diversity of the world they live in, and have equal opportunity to achieve their best.
NCC Group
Aug 07, 2025
Full time
Senior Consultant - Safety page is loaded Senior Consultant - Safety Apply locations London Manchester Cheltenham time type Full time posted on Posted Yesterday job requisition id R9615 Position Title: Senior Consultant - Safety Job Type: Permanent Location: London (Hybrid) Role Purpose: Adelard, part of NCC Group, is looking for consultants to join our team. We exist to provide independent and technically sound advice on how to engineer and assure the trustworthiness of computer-based systems. We are an influential product and services business working in the nuclear, medical, defence, finance, air traffic control and rail sectors and in critical infrastructure protection. Our team supports the delivery of several critical projects. Our key clients include large multinationals as well as government agencies and other leading national and international infrastructure providers. Summary: The role will include work and exposure across the following areas: • Software, HDL and system analysis & modelling: We analyse and model software-based and FPGA-based systems using various techniques. The analysis may be based on design documentation as well as on the source code. We apply modern analysis techniques to real world software systems. The techniques include formal methods, model checking, dynamic analysis, static analysis (control and data flow, semantic analysis, integrity and concurrency analysis) as well as statistical analysis of field data and a variety of testing techniques. The work involves both the engineering of tools as well as their application. • Safety and security assessment: We contribute to the assurance of our clients' projects by assisting with hazard analysis, assessing safety-critical systems and devices, providing independent advice, and reviewing a wide range of safety, assurance, and security cases. We assess the behaviour of some of the interesting and important computer-based systems in operation today. • Standards and regulations: We harness our expertise in technology and safety-critical domains to write and inform standards and regulations, as well as help our clients understand and demonstrate compliance with a variety of international standards. • Research: We research ways of building safety and assurance cases that are valid and believable, using techniques from graphical languages to logic. We are also at the leading edge of research in software analysis techniques, and we put our research into practice. • Software development: We have a market leading safety case product ASCE that will continue to evolve and our analysis and research involves the building of bespoke tools, plug-ins and models. What we are looking for in you: Team membersshould have a degree in a relevant subject (computer science, mathematics, physics etc.), and or have significant working experience/strong background in computer science or software engineering, like code and computers and understand how they work. You should be able to interpret, write and present technical material clearly. You must be capable of weighing diverse opinions, providing advice that is firmly based on an understanding of policy and precedent, and when appropriate, defend that advice constructively. Emotional intelligence is important, and the role requires high levels of experience and confidence with working with a variety of project stakeholders. The nature of our work is exciting, and we are connected by the focus on bringing value - this means we need to work with pragmatism and be able to pivot between high- and low-level detail to reach outcomes that matter. You would be used to working in and managing a variety of projects at any one time, as our projects tend to scale many capabilities at once - but working as a team with a variety of deep expertise is designed to be enriching. It is useful if you have or be qualified to obtain UK security clearance and have a safety or security background, although we will provide suitable training in-house for anyone with technical aptitude. The position will involve travel from time to time within the UK, and in some cases to Europe and the US. Behaviours: Focusing on Clients and Customers. Working as one NCC. Always Learning. Being Inclusive and respectful. Delivering brilliantly. Why NCC Group? At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams' partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. As global leaders in cyber and escrow, NCC Group is a people-powered business seeking the next group of brilliant minds to join our ranks. Our colleagues are our greatest asset, and NCC Group is committed to providing an inclusive and supportive work environment that fosters creativity, collaboration, authenticity, and accountability. We want colleagues to put down roots at NCC Group, and we offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well-being, and we offer wellness programs and flexible working arrangements to provide that vital support. What do we offer in return? We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits; Flexible working Financial & Investment Pension Life Assurance Share Save Scheme Maternity & Paternity leave Community & Volunteering Programmes Green Car Scheme Cycle Scheme Healthcare ️ Office Lifestyle Employee Referral Program Lifestyle & Wellness Learning & Development Diversity & Inclusion So, what's next? If this sounds like the right opportunity for you, then we would love to hear from you! Click on apply to this job to send us your CV and cover letter and the relevant member of our global talent team will be in touch with you. Alternatively send your details to . About your application We review every application received and will get in touch if your skills and experience match what we're looking for. If you don't hear back from us within 10 days, please don't be too disappointed - we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles. If you do not want us to retain your details, please email . All personal data is held in accordance with the NCC Group Privacy Policy ( candidate-privacy-notice-261023.pdf () ). We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage. Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject to BS7858 screening as a mandatory requirement. Similar Jobs (2) Senior Consultant locations 3 Locations time type Full time posted on Posted 30+ Days Ago Cyber Security Senior Consultant locations 3 Locations time type Full time posted on Posted 30+ Days Ago
NCC Group
Feb 11, 2025
Full time
Time left to apply End Date: February 28, 2025 (30+ days left to apply) Job requisition id R9144 Thanks for checking out our job opening; we are excited that YOU are interested in learning more about NCC Group. We are on a mission to make society a safer and more secure place. Our people are the ones who make that possible; a global community of talented individuals working together towards a safer future. The Opportunity: Role: Red Team Consultant Location: Manchester/Cheltenham/London/Hybrid with travel to client sites You will be involved in each aspect of the attack chain from social engineering and initial access, evading best-in-class EDR products, through lateral movement. Operational security and safety of target environments is of paramount importance; you must rely on your extensive experience of managing operational risk and communicating with client stakeholders to mitigate risks for all Red Team activity. You will lead capability development and the creation of tools to automate activity or exploit weaknesses identified in the environment. Last but not least, you will use your high standard of written English for reports and presentations, as well as briefing both technical and C-Level audiences on their activities and findings. Your key accountabilities: Simulate Adversarial Attacks: Design, plan, and execute realistic cyber-attack scenarios to identify vulnerabilities and weaknesses within our target organization's infrastructure, applications, and processes. We operate against high-maturity clients across a number of internationally recognised regulatory frameworks. Report and Advise: Clearly convey findings, vulnerabilities, and potential risks to stakeholders, offering actionable technical recommendations, procedural and defensive improvements. The ability to write attack narratives to enable non-technical readers to understand the actions performed. Engage and Collaborate: Ability to work as part of a team on large engagements and individually for smaller ones. Forging strong relationships with colleagues, client contacts, and C-Level teams, security departments, and other stakeholders to drive maximum value. Continuous Learning: Keep abreast of the latest adversarial techniques, tools, and trends in Red Teaming and more general global cybersecurity. Sharing knowledge from successful techniques as well as evaluating and introducing new methodologies where appropriate. Mentoring and Training: Act as a resource for junior team members and other departments, imparting knowledge on current threat vectors and best practices for defence. You'll stand out if you have: Demonstrable experience in advanced red teaming. Demonstrable experience in regulatory schemes globally (CBEST/TIBER/CORIE/AASE/iCAST/FEER). Comprehensive understanding of the majority of the following domains: Cloud platforms and their security mechanisms Microsoft Active Directory Office 365 Security EDR/EPP Bypasses Email Gateways and Filters Web Gateways and Proxies MacOS Client Environments Proactive attitude, team-oriented, and adept at problem-solving. Familiarity with the UK's cybersecurity regulations, standards, and best practices. CREST CCT-INF or CREST CCSAS or CREST CCSAM Why work with NCC Group? At NCC we work together as one team to exceed expectations and add value. We empower each other, take responsibility, communicate openly, and embrace new ideas. With a proactive approach and a commitment to continuous learning, we adapt to change, solve problems, and keep customers at the heart of everything we do. We aim to create an environment where everyone can reach their full potential. We work together, we are brilliantly creative, we embrace difference and we want you to join in our mission, to make the world safer and more secure. What we offer: Financial & Investment - Pension, Life Assurance, Share Save Scheme, Maternity & Paternity leave Community & Volunteering Programmes Lifestyle & Wellness via Perkbox - access to discounts on gym memberships, cinema tickets, shopping and more! Learning & Development with the goal of personal development and progression So, what's next? If this sounds like the right opportunity for you, then we would love to hear from you! Click on apply to this job to send us your CV and the relevant member of our global talent team will be in touch with you. Alternatively, send your details to . About your application: We review every application received and will get in touch if your skills and experience match what we're looking for. If you don't hear back from us within 10 days, please don't be too disappointed - we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles. If you do not want us to retain your details, please email . All personal data is held in accordance with the NCC Group Privacy Policy. We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage. Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process. This role being advertised will be subject to BS7858 screening as a mandatory requirement.