NCC Group

• Reverse engineering of Android apps • Java-based apps • Native code is a strong plus • Work with the Android platform and its security mechanisms • Conduct vulnerability assessments and penetration testing

Role Description Please Note: This role is a 12 month fixed term contract, Dutch fluency is required. This role involves: - Drafting, advising on, and negotiating commercial contracts. - Providing competent legal advice on a broad range of matters, including: - Data protection and privacy - Disputes - Intellectual Property (IP) - Employment - Real property - Advising on policy related to cyber security. - Liaising closely with the global legal team to ensure a consistent approach regarding risk, processes, and new services. Qualifications - Law Degree and admitted to practice law in the Netherlands or UK or other jurisdiction where NCC has an office and willing to be admitted to practice in UK or Netherlands. - Fluency in English and Dutch is essential; proficiency in other languages is advantageous. - Proven experience in commercial contracts and other relevant areas of law. - Experience in the technology sector and an interest in cyber security. - Experience working in an in-house legal environment is advantageous. - Strong communication and stakeholder management skills. - Ability to apply commercial understanding and strategic input when providing support. - Awareness and understanding of potential risk factors and the ability to mitigate them effectively. - Positive, energetic, and committed to delivering results. Requirements - Fluency in Dutch. - Experience in commercial contracts. - Experience in the technology sector. - Strong communication skills. Benefits - Competitive salary. - Flexible working arrangements. - Professional development opportunities.

• Identify and mitigate risks in AI models, applications and data pipelines • Design and implement security protocols for AI/ML systems and infrastructure, models and data pipelines • Review applications and services using AI against both generic and AI specific threats • Conduct threat modeling and risk assessments • Monitor systems for anomalous behaviors • Assess and secure endpoints and APIs for model access and inference • Collaborate with stakeholders, engineers, data scientists and IT to integrate security into systems and infrastructure • Deliver client reports on AI security protocols and policies, and document best practices • Develop and implement AI security training for internal and external stakeholders

• Own U.S. bookings, pipeline, and revenue targets • Manage pipeline hygiene across the US sales team • Drive predictable pipeline generation and forecasting accuracy • Support onboarding, training and coaching new hires • Personally engage with strategic enterprise opportunities and executive-level relationships • Identify emerging cybersecurity trends and new market opportunities • Maintain accurate Salesforce hygiene and forecasting discipline.

Role Description Thank you for checking out our new role. We’re excited that YOU are interested in joining us! We’re looking for an experienced Security Engineer or Researcher to join our Hardware and Embedded Security consulting practice. Key Accountabilities - As a Senior Security Consultant, you’ll be the technical lead on complex projects, driving security assessments and providing expert advice to clients. - Your main responsibilities will include: - Conducting in-depth penetration testing, code reviews, and security analysis. - Leading research and reverse engineering efforts on emerging technologies and attacks. - Guiding clients through secure design practices such as threat modelling and attack surface enumeration. - Mentoring junior team members and contributing to internal tools and research initiatives. - Working on diverse projects, often remotely, but with travel to client sites when needed. Qualifications - Solid experience in software or hardware security. - In-depth technical expertise in driver code auditing, bootloaders, secure boot, and embedded system architectures. - Proficiency in C/C++ for security-focused code review. - A solid understanding of firmware reverse engineering and security analysis. - Strong communication skills – you’ll need to explain complex vulnerabilities to clients in clear terms. - A Bachelor’s degree in Computer Science, Engineering, or a related field is desirable. Requirements - It is highly beneficial if you have experience with any of the following: - Cryptography knowledge. - Black-box reverse engineering. - Familiarity with UEFI platform firmware, ARM/x86 architectures, and secure boot architectures. - Experience with SDR, wireless protocols (Bluetooth, Wi-Fi, ZigBee, etc.), or storage controllers like NVMe, SATA, and eMMC. Benefits We believe great work deserves great support. That’s why we offer a benefits package designed to look after you, your family, and your future. - Generous annual leave: Starting at 15 days, increasing to 20 days with service, plus 3 floating days from day one to use at your leisure. - Plan for your future: 401(k) with up to 5% company match. - Life protection for peace of mind: Life assurance at 1x your annual salary. - Comprehensive health cover: Medical, dental, and vision plans available for you and your family, with flexible options to suit your needs. - Financial protection when it matters most: Income protection through short and long term disability cover, plus accidental death and disability insurance. - Share in our success: Opportunity to invest through our SAYE and Employee Stock Purchase Plan.

Role Description We are seeking a highly skilled and motivated Security Analyst Team Lead to guide and support our security operations team. The successful candidate will provide leadership, management, technical expertise, and mentorship to a team of security analysts, ensuring effective investigation of alerts, escalation to our customer, and continuous improvement of security operations. - Demonstrate the ability to confidently manage and mentor junior analysts at both R1 and R2 levels. - Provide guidance, oversight, and support in day-to-day operations. - Communicate clearly, consistently, and effectively in a remote environment. - Produce clear, thorough, and high-quality documentation, including incident reports, standard operating procedures, and technical playbooks. - Familiarity with security frameworks such as MITRE ATT&CK, NIST, or ISO 27001 is expected. - Work on a rotating shift pattern that includes both day and night shifts as well as occasional on-call duty. - Investigate security tickets, ensuring timely and thorough analysis, appropriate escalation, and effective resolution. - Validate filtering and tuning opportunities within the detection environment to reduce false positives and enhance alert fidelity. Qualifications - Experience working in a cyber security environment. - Proactive and experienced security professional with a strong background in security operations. - Exceptional communication skills, thriving in a fully remote environment. - Deep knowledge of security operations tools and practices, particularly with Splunk as the SIEM of choice. - Well-versed in security frameworks such as MITRE ATT&CK, NIST, or ISO 27001. - Strong analytical skills and a commitment to continuous learning in a fast-paced threat landscape. Requirements - Experience within a SOC analyst role, detection engineer, data engineer, or similar. - Strong use of Splunk Programming Language. - Strong understanding of Content Delivery Networks and AWS Cloud technologies. Desirable Requirements - Hands-on experience with Splunk SIEM, including alert triage, investigation, tuning, filtering, and rule development. - Strong analytical and investigative skills for assessing security alerts, tickets, and incident data. - Familiarity with established security frameworks such as MITRE ATT&CK, NIST, and ISO 27001. - Experience in tuning and optimizing detection content to reduce false positives and enhance alert fidelity. - Capable of drafting and maintaining clear, thorough, and professional technical documentation. - Strong understanding of common cyber threats, tactics, techniques, and procedures (TTPs). - Technically proficient in troubleshooting complex alerts and contributing to detection engineering initiatives. Desirable Certifications - Splunk Power User - CompTIA CySA + - CompTIA Security X - Blue Team Level Two - GCIH Behaviours - Demonstrates strong investigative instincts—able to piece together disparate data to uncover patterns, anomalies, and malicious activity. - Challenges assumptions and seeks root causes when identifying potential threats. - Goes beyond the minimum requirements to provide solutions and contributions that enhance the customer’s success and growth. - Strong leadership and team management abilities, with proven experience mentoring and guiding R1 and R2 level security analysts. - Capable of managing and prioritizing workloads across a rotating shift pattern. - Excellent verbal and written communication skills for effective collaboration in a fully remote environment. - Skilled in producing high-quality documentation, including incident reports, SOPs, playbooks, and investigation summaries. - Confident in conflict resolution, decision-making, and acting as the escalation point during complex security incidents. - Proactive in identifying areas for team and process improvement. - Ability to foster a culture of continuous learning and professional development within the team. - Self-motivated and dependable when working independently, particularly during out-of-hours or high-pressure situations. - Strong organizational and time management skills, ensuring adherence to deadlines and service level agreements (SLAs). Benefits - Flexible Working: Balance your work and personal life with our flexible working options. - Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave. - Medicash & Critical Illness Scheme. - Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme. - Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities. - Green Car Scheme: Drive green and save money with our eco-friendly car scheme. - Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme. - Special Time Off: Take time off for significant life events. - Family Planning: Benefit from generous maternity and paternity leave, as well as support for those undergoing fertility treatments.

Role Description We are seeking a highly skilled and motivated Senior Account Manager to join our high-performing sales team. This role is responsible for managing and expanding complex, high-value client relationships, within the Technology, Financial Services, Healthcare, Industrials, Energy or Professional Services industries. You will lead consultative, executive-level engagements and drive the full sales lifecycle, including selling our complete portfolio of cybersecurity services. The ideal candidate excels at both acquiring net new clients and expanding revenue within existing accounts. You will play a critical role in helping customers design, develop, and mature their cyber resilience roadmaps by aligning internal cross-functional teams and service capabilities to evolving client needs. This is a fast-paced, high-impact opportunity in a dynamic, tech-driven environment. Qualifications - Proven experience in enterprise account management within Cybersecurity services, or Cybersecurity technology - Strong understanding of cybersecurity services such as penetration testing, risk assessments, regulatory compliance, and MXDR - Proven track record managing complex client portfolios and achieving revenue targets - Proficiency with Salesforce and analytics dashboards - Familiarity with cybersecurity and compliance frameworks (e.g., NIST, HIPAA, NERC CIP, FedRAMP) - Bachelor’s degree and/or certifications (CISSP, CISM) preferred - Experience working with C-suite stakeholders (CISO, CIO, CFO) Requirements - Manage renewals, upsells, expansions, and net new logo acquisition to drive account growth - Build strong, multi-threaded relationships with executive, business, and technical stakeholders - Lead strategic account planning and develop multi-quarter growth strategies - Collaborate cross-functionally with Product, Pre-Sales, Delivery, and Operations teams - Act as a customer advocate; resolve issues with urgency and accountability - Identify and execute cross-sell and upsell opportunities aligned with client goals - Leverage sales methodologies such as MEDDPICC, Challenger, and Value Selling - Maintain accurate forecasts, pipelines, and customer health metrics in CRM - Educate clients on industry trends, risk frameworks, and emerging cybersecurity threats Benefits - Flexible working - Financial & Investment - 401k - Health Insurance contributions - Life Assurance - Maternity & Paternity leave - Community & Volunteering Programmes - Employee Referral Program - Lifestyle & Wellness - Learning & Development

Role Description We are looking for a high-impact Service Delivery Manager (SDM) to join our Managed Services practice as a full-time contractor. You will be the strategic bridge between our technical Security Operations Centre (SOC) and our Asia Pacific clients. Your mission is to ensure excellence in service delivery, maintain rigorous security standards, and act as a trusted advisor to our clients’ cybersecurity staff and IT leadership. As an SDM, you aren’t just managing a contract; you are managing a partnership. You will oversee the entire lifecycle of the client relationship from onboarding and governance to incident escalation and service improvement. - Client Advocacy: Act as the primary point of contact for a dedicated portfolio of clients, ensuring their security requirements are met and exceeded. - Service Governance: Lead Monthly and Quarterly Business Reviews (MBRs/QBRs), translating SOC data and threat intelligence into actionable business insights. - Performance Management: Monitor and report on key performance indicators (KPIs) and SLAs, including MTTD, MTTR, and system uptime. - Incident Orchestration: Work closely with the NCC Technical Account Manager and serve as critical communication links during high-priority security incidents, managing expectations and technical updates between our SOC and IR teams and the client. - Service Improvement: Identify gaps in client security postures and recommend service enhancements, additional tooling, or policy changes to mitigate risk. - Contractual Oversight: Ensure all deliverables are met according to the Statement of Work (SOW) and manage the lifecycle of the contract. Qualifications - 3+ years in Service Delivery Management, Account Management, or IT Project Management, specifically within a Cybersecurity or Managed Services (MSP/MSSP) environment. - Technical Literacy: A strong understanding of cybersecurity fundamentals (SIEM, EDR, and Vulnerability Management) to effectively communicate with both engineers and senior management. - Communication Mastery: Capable of translating technical language into business impact to senior management. - Certifications (desirable): ITIL v4 Foundation, PMP, PRINCE2 or CISM. - Adaptability: Comfortable working in a fast-paced, high-pressure environment where threat landscapes change daily. Ways of working - Focusing on Clients and Customers. - Working as One NCC. - Always Learning. - Being Inclusive and Respectful. - Delivering Brilliantly. Benefits - Superannuation - Leaves Benefits include but not limited to: - Annual leave – 20 days - Sick Leave & caregivers Leave – 10 days - Marriage/Civil Partnership Leave (1 day) - Moving Home Leave (1 day) - Employee Assistance Program with access to confidential counselling support 24 hours a day, 7 days a week. This is a free service for up to 6 occasions per calendar year for you and your close family.

• Help scale and modernize the legal function by designing and implementing efficient processes, supporting contract negotiations, and deploying legal technology. • Partner closely with Legal, Compliance, IT, HR, Sales, and other business teams to ensure legal operations enable the business while managing risk and maintaining compliance. • Identify, evaluate, implement, and administer AI‑enabled and other legal technology tools to improve efficiency, quality, and scalability across the legal function. • Act as a technical and operational partner to the General Counsel by configuring tools, managing implementations, and driving adoption. • Continuously assess and optimize legal workflows with a focus on automation, standardization, and measurable improvement. • Track and manage the lifecycle of commercial contract negotiations, ensuring visibility, accountability, and timely execution. • Independently negotiate and manage Non‑Disclosure Agreements (NDAs) using approved negotiation frameworks. • Design, implement, and maintain contract negotiation playbooks; support internal enablement and adoption. • Implement and oversee efficient processes for the execution of agreements. • Design and implement scalable processes supporting procurement, compliance, employment, and privacy initiatives.

• Generate a consistent flow of Sales Qualified Leads (SQLs). • Execute 50+ high-quality, research-backed touches per day (Email, LinkedIn, Phone, etc.). • Conduct initial discovery calls before handing off to BDM. • Maintain 100% accuracy in our CRM (Salesforce) by logging activities and leads appropriately.