NCC Group

ServiceNow

• Act as the ServiceNow SME within the Cloud XDR team
• Build and maintain ServiceNow workflows
• Work with analysts and engineers to identify and implement platform improvements that increase team efficiency and efficacy
• Collaborate with engineering and development to improve the overall Cloud XDR platform experience for customers
• Perform onboarding activities with the project team to enable new customers to be monitored
• Build and maintain integrations between NCC Group’s ServiceNow and customers’ ITSM platforms
• Help maintain, build, and improve the ServiceNow implementation supporting NCC Group’s ability to defend customers from cyber-attacks

ServiceNow Administrator

Threat Intelligence Specialist

• Proactively hunt and analyse advanced threats across customer environments using NCC Group’s proprietary hunting framework
• Conduct intelligence-led, hypothesis-driven analysis of TTPs and behaviours
• Use the HITS Framework, threat intelligence, MITRE ATT&CK, and risk models to form and validate hunting hypotheses
• Leverage GitLab, Sigma, Jupyter Notebooks, and other tools to automate hunts, visualise results, and create reusable investigation and detection artifacts
• Collaborate with detection engineering to convert threat hunt findings into high-fidelity detection content
• Operationalise detections for emerging threats using internal and open-source threat intelligence
• Support mapping threat models to monitoring use cases with teams across the business
• Document and maintain repositories of hunting methodologies, tooling, and findings
• Provide regular reports and presentations to stakeholders explaining threats, methods, and risk impact
• Work cross-functionally with Security Operations Centre Analysts, Global Detection Engineers, Privacy Team, and Engineering Team

Threat Hunter

Security Engineer

• Serve as Lead Assessor for FedRAMP authorization and continuous monitoring assessments
• Lead teams evaluating cloud service providers against FedRAMP and NIST requirements
• Independently evaluate security controls, cloud architectures, operational processes, and risk management programs
• Review testing methodologies, assessment evidence, and assessment reports for accuracy and quality
• Ensure compliance with FedRAMP, 3PAO, and organizational quality requirements
• Identify deficiencies, risks, and improvement opportunities and communicate findings to clients and stakeholders
• Support quality assurance activities and peer reviews
• Provide FedRAMP Rev5, FedRAMP20x, CMMC/DFARS, secure cloud adoption and governance, and NIST RMF advisory and readiness services
• Help organizations develop compliance roadmaps and remediation strategies
• Advise clients on cybersecurity governance, risk management, and control implementation
• Support presales activities, customer briefings, project scoping, and proposal development
• Develop statements of work, project plans, assumptions, and costs
• Participate in client workshops and executive-level discussions
• Act as a trusted advisor throughout engagement lifecycles
• Contribute thought leadership to NCC Group’s Government Services practice
• Mentor and coach junior assessors and consultants
• Support workforce development and assessment methodology improvements
• Assist practice leadership with service delivery planning and operational initiatives
• Promote assessment consistency, quality, and professional excellence

Managing Security Consultant – Assessor

Accountant

• Provide support across Group tax activities to ensure tax filing and reporting obligations are met
• Assist the tax team with the tax compliance and statutory reporting cycle
• Build relationships with the wider finance team to obtain required information in a timely manner
• Assist in preparing UK corporate tax returns and submitting overseas tax returns where applicable
• Assist with tax reporting and accounting for the Group and individual subsidiaries
• Review cross-border taxation requirements, including filing requirements and permanent establishment assessments
• Assist in preparing quarterly UK VAT returns and reviewing VAT on business costs
• Handle ad hoc VAT and PAYE queries
• Prepare PAYE Settlement Agreement calculations
• Prepare and submit Short Term Business Visitor returns
• Keep up to date with tax legislation changes and best practice
• Contribute to continuous improvement of the Group tax function

Tax Accountant

Director

• Identify long-term, high-value cybersecurity opportunities by connecting client business priorities, regulatory pressures and cyber risk to NCC Group’s propositions and capabilities
• Provide senior advisory guidance across technical assurance, cyber governance, regulatory readiness, digital identity, cloud security, application and product security, third-party risk, operational resilience, AI governance, incident readiness, continuous assurance and proactive security
• Develop sector-specific account plans, opportunity strategies and pursuit approaches for strategic accounts in partnership with sales and delivery teams
• Help account teams qualify opportunities, shape executive messaging, prepare for senior client meetings and position NCC Group as a strategic cyber resilience partner
• Build trusted relationships with senior client stakeholders through independent perspective, market insight and pragmatic advice
• Represent NCC Group externally through thought leadership, executive roundtables, industry forums, partner events and cybersecurity conferences
• Translate NCC Group’s technical depth, global cyber expertise and market insight into sector-relevant propositions
• Work across sales, delivery, marketing, public affairs and client advisory activities with CISOs, CIOs, CTOs, CROs, audit, risk, compliance, legal, privacy and board-level stakeholders

Strategic Cyber Advisory Director

• Conduct application security assessments for web and mobile applications (Android/iOS), APIs, and other software systems
• Conduct infrastructure and cloud configuration security reviews
• Conduct assessments incorporating AI-based and traditional pentesting approaches against real world threats
• Identify and document security vulnerabilities, misconfigurations, and deviations from best practices
• Provide actionable recommendations to address security findings
• Prepare clear, professional reports describing identified risks and recommended remediation steps
• Participate in client meetings and technical discussions
• Work with internal stakeholders and clients to assess products, report findings, and document protocols, policies, and procedures

ServiceNow Administrator

Threat Hunter

Managing Security Consultant – Assessor

Tax Accountant

Strategic Cyber Advisory Director

Security Consultant – Fixed Term