Teams at NCC Group

Designs and assures OT cybersecurity architectures for critical infrastructure clients across energy, water, manufacturing, rail, and other operational environments. Responsibilities include discovery, requirements, network segmentation, secure remote access, architecture documentation, technology evaluation, implementation assurance, testing, and acceptance. The role leads client workshops and supports practice development. Active UK SC clearance is essential, with approximately 20% national client-site travel.

Monitor, detect, investigate, and respond to security events using Splunk Enterprise Security. Triage incidents, perform log analysis and event correlation, assist threat hunting and vulnerability remediation, escalate significant incidents, and maintain incident documentation and SOC playbooks.

Design, build and maintain Splunk-based SOAR automations and playbooks to detect, investigate and respond to cyber threats. Partner with Incident Response to develop use cases, validate automation behaviour, produce analytics, document changes, perform QA, and mentor junior engineers.