Cyber Security Engineer

NCC; Bristol; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

An innovative not-for-profit organisation in Bristol is looking for a Cyber Security Engineer to provide hands-on support for IT security. You will work with a small team to protect the organisation from cybersecurity threats while implementing technical security measures across various IT projects. This role offers flexible working, a competitive salary, and generous benefits including a high employer pension contribution.

Benefits

12.5% employer pension contribution

Private medical insurance

Flexible working patterns

Annual salary reviews

Qualifications

• Willingness and eligibility to undertake government security clearances.
• Experience working as a senior, or independent Cyber Security or IT Infrastructure Security specialist.
• Strong Technical Knowledge of Microsoft-Based Environments across both on-prem and cloud environments.
• Understanding of network security principles, including firewalls, segmentation, and secure remote access.
• Knowledge of identity and access management (IAM), including multi-factor authentication (MFA), RBAC, and conditional access policies.
• Familiarity with common regulatory and compliance frameworks.
• Experience aligning infrastructure builds with cyber security standards.
• Experience implementing monitoring, logging, and alerting toolsets.
• Understanding of data classification, encryption, and secure storage/access principles.
• Familiarity with endpoint protection platforms and vulnerability management tools.
• Experience securing hybrid identity solutions and federated authentication models.
• Understanding of security automation concepts.

Responsibilities

• Maintains and optimises operational security processes.
• Provides advice on implementing and managing security across both physical and digital assets.
• Conducts threat modelling and risk assessments.
• Creates and reviews technical documentation.
• Designs and executes complex vulnerability research activities.

Skills

Experience working as a senior Cyber Security specialist

Strong Technical Knowledge of Microsoft-Based Environments

Understanding of network security principles

Knowledge of identity and access management

Familiarity with regulatory and compliance frameworks

Experience implementing monitoring and logging toolsets

Understanding of data classification and encryption

Familiarity with endpoint protection platforms

Experience securing hybrid identity solutions

Understanding of security automation concepts

Job description

Overview

NCC

Bristol based with hybrid working (3-4 days per week in office)

Salary: Competitive Salaries plus 12.5% employer pension, private medical insurance and additional benefits package.

Government Security Clearance: to the nature of our business, all employment is subject to satisfactory references being obtained alongside a level of government security clearance.

Closing Date: 30th October – We reserve the right to withdraw adverts earlier if required.

Summary

The NCC is a not-for-profit organisation supporting manufacturing innovation across 16 sectors in the UK. We’re looking for a Cyber Security Engineer to join our expanding team as new member of the IT department providing guidance and hands on Cyber Security support. You’ll work within a small, skilled & friendly team who work closely together to help protect NCC from cyber security threats. Primarily working on IT projects & programmes across IT Defence Portfolio, you will take a consultative and hands-on role in the design, implementation, and ongoing maintenance of security controls across both hybrid and on-premises IT environments. Primarily working with Microsoft technologies and integrated toolsets, your key responsibility will be to ensure that infrastructure platforms and services are secure, resilient, and compliant with internal policies and relevant external regulations.

Responsibilities

• Maintains and optimises operational security processes.
• Provides advice on implementing and managing physical, procedural and technical security encompassing both physical and digital assets.
• Collates, defines, and enforces secure configuration baselines and hardening standards in alignment with organisational security obligations and recognised industry frameworks (e.g., CIS Benchmarks, Microsoft Security Baselines).
• Conducts threat modelling and risk assessments to identify vulnerabilities or compliance gaps.
• Maintains and manages Software Bills of Materials (SBOMs).
• Assists with integrating security monitoring, logging, and alerting capabilities.
• Creates and reviews technical documentation, including security architecture designs, supply chain risk assessments, hardware and software risk assessments, risk mitigation plans, and security operations procedures.
• Performs security validation, configuration assessments, and support user acceptance testing (UAT) for security-related features.
• Collates and analyses information for threat intelligence requirements from a variety of sources.
• Designs and executes complex vulnerability research activities.
• Provides guidance, support and mentoring to other IT Engineers as requested by the IT Leadership team or line manager.

What we look for in your application

• Willingness, and eligibility to undertake government security clearances.
• Experience working as a senior, or independent Cyber Security or IT Infrastructure Security specialist.
• Strong Technical Knowledge of Microsoft-Based Environments across both on-prem and cloud environments.
• Understanding of network security principles, including firewalls, segmentation, and secure remote access.
• Knowledge of identity and access management (IAM), including multi-factor authentication (MFA), RBAC, and conditional access policies.
• Familiarity with common regulatory and compliance frameworks (e.g. NIST, CIS Controls, ISO 27001, Cyber Essentials Plus).
• Experience aligning infrastructure builds with cyber security standards such as NCSC guidance, CIS benchmarks, or Microsoft Security Baselines.
• Experience implementing monitoring, logging, and alerting toolsets including SIEM and threat detection platforms.
• Understanding of data classification, encryption, and secure storage/access principles.
• Familiarity with endpoint protection platforms and vulnerability management tools.
• Experience securing hybrid identity solutions and federated authentication models.
• Understanding of security automation concepts, including security orchestration and response (SOAR) including ability to script or automate repetitive tasks.

What we offer in return

Flexible working patterns as standard, annual salary reviews, company paid private medical insurance, up to 12.5% employer pension contribution, great people, honorary staff status at the University of Bristol. With a genuine focus on wellbeing, EDI and learning and development this is a chance to build your career in a thriving R&D facility with a bright future.

Unsure if you should apply? Got a quick question you wanted to check beforehand? Please feel free to reach out to the recruitment team, Jon Barratt, via linked in.