Managing Security Consultant

Role Title

CHECK Team Leader

Cheltenham/London - hybrid, with consistent and regular travel to client sites

NCC Group is a trusted supplier to a wide range of Government departments and partners. To meet growing demand and expand our industry-leading CHECK capability, we’re looking for qualified CHECK Team Members and Leaders to join our established Technical Assurance Services (TAS) division. At NCC Group, being part of the CHECK team isn’t just about meeting compliance – it's about delivering meaningful, risk-based security outcomes.

Whether onsite or remote, you’ll lead or contribute to engagements that combine technical excellence with real-world impact, backed by a strong support network and opportunities for personal growth.

• Maintain appropriate CHECK status and required SC/DV clearance in accordance with NCSC scheme standards.
• Plan and execute technical security assessments aligned with CHECK methodology and client objectives.
• Produce clear, concise, and high-quality technical reports that explain findings, articulate risks, and prioritise remediation.
• Contribute to internal security research projects and skill development during non-billable time.
• Follow internal processes and quality standards to ensure consistency and compliance.
• Travel to client sites for engagements as required.
• Deliver client-facing workshops and articulate testing methodologies and findings to both technical and non-technical stakeholders.
• Provide scoping support and pre‑sales technical advice where appropriate.
• Mentor junior consultants and adjacent teams to help grow internal capability.
• Contribute to the continuous improvement of NCC Group’s methodologies, tooling, and delivery models.

• Current CHECK Team Leader accreditation.
• CTL‑WEB and/or CTL‑INF.
• Proven ability to work independently and as part of a wider team.
• Solid understanding of core cyber security principles and penetration testing methodologies.
• Ability to produce accurate, well‑structured, and client‑ready technical documentation.

• Experience delivering engagements across UK Government departments or regulated sectors.
• Familiarity with consultancy environments, including customer communication and pre‑sales support.
• Strong communication skills with the ability to translate technical risk to non‑technical stakeholders.
• Proficiency with a wide range of security testing tools, exploit frameworks, and manual testing techniques.
• Knowledge of cloud technologies and security frameworks, such as:
• AWS Well‑Architected Framework
• Azure and GCP best practices
• CIS Benchmarks
• Experience designing or reviewing secure solution architectures.
• Industry certifications such as OSCP, CREST, or equivalent.
• Agile certification or experience working in agile delivery environments.

Amazon Web Services (AWS):

• AWS Certified Security – Specialty
• AWS Certified Solutions Architect – Professional
• AWS Certified Advanced Networking – Specialty

Google Cloud Platform (GCP):

• Professional Cloud Security Engineer
• Professional Cloud Architect
• Professional Dev Ops Engineer

Microsoft Azure / Microsoft 365:

• AZ‑500:
  Microsoft Azure Security Technologies
• MS‑500:
  Microsoft 365 Security Administration
• MS‑100, MS‑101, MS‑203, MS‑700

Our CHECK team forms a core part of the NCC Group’s Technical Assurance Services function, which delivers high‑impact penetration testing, red teaming, and threat simulation to clients across public and private sectors. As part of the CHECK team, you’ll play a crucial role in helping government organisations reduce their risk, improve resilience, and meet assurance requirements.

• Focusing on Clients and Customers.
• Working as One NCC.
• Always Learning.
• Being Inclusive and Respectful.
• Delivering Brilliantly.

At NCC Group, our mission is to create a more secure digital future. That mission underpins everything we do, from our work with our incredible clients to groundbreaking research shaping our industry. Our teams partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as…