Senior Cyber Security Analyst Job at HM Revenue and Customs, Leeds LS1

QWRSeXpCaTRLT0dBMWJNcVR0NUFrZz09

Job Description

Details

Reference number

276092

Salary

£34,404 - £36,985
Labour Market Supplement of £10,000 payable depending on qualifications and experience

Job grade

Higher Executive Officer

Contract type

Permanent

Business area

HMRC - CDIO - Chief Information and Security Officer (CSIR)

Type of role

Security

Working pattern

Flexible working, Full-time, Job share, Part-time

Number of jobs available

2

Contents

    Location

    About the job

    Benefits

    Things you need to know

    Apply and further information

Location

Leeds, Yorkshire and the Humber, LS1 4AP : Telford, West Midlands (England), TF3 4NT

About the job

Job summary

At HMRC we are committed to creating a great place to work for all our colleagues; an inclusive and respectful environment that reflects the diversity of the society we serve.

We want to maximise the potential of everyone who chooses to work for us and we offer a range of flexible working patterns and support to make a fulfilling career at HMRC accessible to you.

Diverse perspectives and experiences are critical to our success and we welcome applications from all people from all backgrounds with the experience and skills needed to perform this role.

See what it’s like to work at HMRC: find out more about us or ask our colleagues a question. Questions relating to an individual application must be emailed as detailed later in this advert.

Primarily working within the Investigation and Response element of Cyber Security Incident Management team, you’ll get to investigate and respond to cyber security incidents across HMRC.

This is varied, interesting and vital work so if you’re looking for a new challenge, putting your experience and skills to the test, we’d love to hear from you.

We are recruiting for 2 vacancies, with one to be located in Leeds and one in Telford.

Job description

The Incident Management Team are the front-line operational arm of the HMRC Cyber Security Team, responsible for protecting the confidentiality, integrity and availability of HMRC online services and data assets. The team and the successful individual undertake the following 3 core activities:

  • Detect and Identify
  • Prepare to Respond
  • Response and Remediation

The Detect and Identify function of the Incident Management Team consists of monitoring, analysis and triage activities. The successful candidate will use technical tools to check and maintain the health of the HMRC online services and user devices. Analysis of big data sets is undertaken to identify suspicious or malicious activities which is triaged before lower level investigation and response activities can take place.

The Investigation & Response function of the Incident Management Team look to investigate, contain, remediate and prevent future re-occurrence of identified malicious traffic or incidents.

The team includes Apprentices, Fast-streamers and Industrial Placements (on a sandwich year from university) as well as established analysts.

The "Senior Cyber Security Analyst" will predominantly undertake the core roles and functions of the Investigation and Response Team.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check.

Person specification

Responsibilities include:

  • Continual real-time monitoring of the HMRC’s Security Platforms such as SIEMs, EDR and IDS.
  • Ensure the prompt analysis of anomaly detection tools to help identify security breaches, cyberattacks, and reporting activity.
  • Progressive maintenance and improvement of CST SIEM dashboards.
  • Build procedures to ensure all aspects of incident response, digital forensics and malware analysis are carried out in secure manner and comply with statutory guidelines.
  • Exercise, tune and innovate security incident playbooks/standard operating processes
  • Taking ownership of CST’s cases and following CST tickets to full resolution state – in line with CST procedures.
  • Collaborative working with external suppliers.
  • Perform analysis and forensics on computer/network artefacts and malware samples to assess the impact of an incident, document attack capabilities, understand propagation characteristics and define signatures for detecting its presence.
  • Direct and coordinate analysts’ work and provide expert technical support
  • Manage the performance and development of cyber security staff
  • Deputise as Incident Response Coordinator

Essential Criteria:

  • Experience of using a variety of analytical tools to identify security compromises within large amounts of complex data
  • Experience of analysing large datasets to find unusual system and user behaviours
  • Knowledge of multiple technical environments, including but not limited to, cloud, networking, operating systems, databases
  • Exposure to cyber security, including knowledge and experience of the breadth of threat actors and depth of threat vectors available
  • Knowledge of using digital forensic and malware analysis tools, whether that be commercial products or open source
  • A understanding of the structures underpinning corporate IT systems and how these structures can be compromised and exploited
  • Proven understanding of security monitoring, intrusion detection, prevention and control systems including firewalls, anti-virus, web proxies.
  • Experience or understanding of security incident management frameworks and their practical application during an incident

Desirable Qualifications:

Degree majoring or including Cyber Security / Digital Forensics

Behaviours

We'll assess you against these behaviours during the selection process:

  • Making Effective Decisions
  • Changing and Improving

Technical skills

We'll assess you against these technical skills during the selection process:

  • Cyber Security Analysis

Benefits

  • Learning and development tailored to your role
  • An environment with flexible working options
  • A culture encouraging inclusion and diversity
  • A Civil Service pension with an average employer contribution of 27%

Team members that are moving offices as a result of the Locations Programme will be entitled to a Moves Adjustment Payment for three years where they incur additional costs. This is calculated based on the difference between the costs of travelling to and from the new and old office, over a weekly period. You will get more detail on this as part of targeted locations move communications.

Find more about HMRC benefits in 'Your little extras and big benefits handbook' for further information or visit Thinking of joining the Civil Service.

Things you need to know

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Strengths, Experience and Technical skills.

To apply for this role you will need to submit your CV stating your career history, qualifications, skills and previous experience.

You will also need to submit a Personal Statement of no more than 250 words, outlining how you meet the essential/desirable criteria, your suitability for the role and what experience you bring to the role.

Please note your application may be rejected if you exceed the word count as specified.

At interview, you will be assessed on the Behaviours: Making Effective Decisions, and Changing and Improving; as well as Technical, and Strengths based questions.

Sift and interview dates to be confirmed.

After interview, merit lists will be created for each location advertised within the vacancy. If you are successful at interview, you will be placed on the merit list for any locations you have expressed an interest for. Appointments from each merit list will be made in strict merit order.

Please take extra care to tick the correct boxes in the eligibility sections of your application form. We understand mistakes sometimes happen but if you contact us later than two working days (Monday-Friday) before the vacancy closes, we will not be able to reopen your application for you. The inbox to contact is: hmrcrecruitment.grs@cabinetoffice.gov.uk - Use subject line to insert appropriate wording e.g. Please re-open my application -276092 & vacancy closing date 19th April 2023.

Security Update

If you are successful and transferring from another Government Department, we will carry out a check of your identity, nationality, and immigration status (including the right to work in the UK) and a criminal record check before confirming your appointment.

Successful candidates must pass a Disclosure and Barring Security Check.

Please note that HMRC have an exemption under the Rehabilitation of Offenders Act 1974, which enables us to make enquiries about both unspent and spent convictions.

In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service on your behalf. However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading.

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment.

A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.

Please note: in addition to the standard pre-employment checks for appointment into the Civil Service, all candidates must also obtain National Security Vetting at Security Check (SC) clearance level for this vacancy. You will normally need to meet the minimum UK residency period as determined by the level of vetting being undertaken, which for SC is 5 years UK residency prior to your vetting application. If you have any questions about this residency requirement, please speak to the vacancy holder for this post.

HMRC transformation

HM Revenue and Customs is currently going through an exciting ten-year transformation programme to create a tax authority fit for the future. As part of this, we are committed to providing high-quality jobs and giving employees a great place to work, whichever location you work from.

HM Revenue and Customs has made significant progress with its plans to locate in 14 large, modern, flexible offices, equipped with high-speed digital infrastructure supporting improved customer service and compliance activity. These collaborative workspaces will enable smarter working and great training and development facilities, allowing for the sharing of expertise, local training, promotion, and provide great ongoing career development opportunities.

These offices will be located in central locations in the following towns and cities close to accessible transport links: Glasgow, Edinburgh, Belfast, Newcastle, Leeds, Liverpool, Manchester, Nottingham, Birmingham, Bristol, Cardiff, Croydon, Portsmouth and Stratford.

In addition, there will also be a small number of specialist sites where the work cannot be done anywhere else, in Gartcosh (near Glasgow), Telford, Ipswich, Worthing and Dover, as well as our headquarters in central London. What’s more, our Welsh language service has people located in Porthmadog, as well as Cardiff.

We are letting you know about our future plans because if you are recruited into an office that is not one of these locations, you will be expected, subject to HM Revenue and Customs applicable policies, to move to one of these locations in the future. In some cases, this will be via one of our nine transitional sites.

For more information please contact the vacancy holder.

Terms and Conditions

We really hope you decide to apply for this role. If you’re successful you need to know that in February 2021 members of recognised trade unions (ARC and PCS) voted to approve a pay and contract reform offer. This means that HMRC will adopt new terms and conditions for all colleagues as part of a multi-year pay deal and contract offer, the pay deal period is 01 June 2020 – 31st May 2023 and terms and conditions changes take place from the 01 June 2021 onwards. These terms will apply to colleagues who already work in HMRC and if you join us, it will apply to you too. We’ve put together a summary of the key changes that will be made and you can find this attached to the Job Advert.

Pay

If you are currently working for an OGD and would like to consider the impact on your pay when joining HMRC, please see the attached document "Pay on Transfer from OGD" for further information. (Please note the attached document could also be called “Combined T&C and OGD Pay English”)

New entrants are expected to join on the minimum of the pay band.

Further Information

Customer facing roles in HMRC require the ability to converse at ease with members of the public and provide advice in accurate spoken English and/or Welsh where required. Where this is an essential requirement this will be tested as part of the selection process.

A reserve list may be held for a period of 12 months from which further appointments can be made.

Any move to HMRC from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility here.

HMRC welcomes applications from those who need to work a more flexible arrangement and will agree to requests where possible, taking into account our operational and customer service needs. We can’t guarantee that we can meet all requests to work flexibly, as agreement will be subject to business ability to accommodate, and any request to work a more flexible arrangement should be made prior to your acceptance of the provisional offer.

If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'Contact point for applicants' section.

Important information for existing HMRC contractual homeworkers:

Please note that this role is unsuitable for contractual homeworkers due to the nature and/or requirements of the role.


Reasonable adjustment

We want to make sure no one is put at a disadvantage during our recruitment process because of a disability, condition or impairment. To assist you with this, we will reduce or remove any barriers where possible and provide additional support where appropriate. Please see our Disability Matters: How we can support you during our selection process booklet for more details.

If you need a change to be made so that you can make your application, you should:


  • Contact Government Recruitment Service via hmrcrecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.
  • Complete the “Assistance required” section in the “Additional requirements” page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you’re deaf, a Language Service Professional.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check.
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).

See our vetting charter (opens in a new window).
People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

Open to UK nationals only.

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Apply and further information

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.
Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact :

    Name :
    Hardeep Hothi
    Email :
    Hardeep.hothi@hmrc.gov.uk
    Telephone :
    03000 573809

Recruitment team :

    Email :
    hmrcrecruitment.grs@cabinetoffice.gov.uk

Further information

Appointment to the Civil Service is governed by the Civil Service Commission’s Recruitment Principles. You have the right to complain if you feel a department has breached the requirement of the Recruitment Principles. In the first instance, you should raise the matter directly with the department concerned via complaints.grs@cabinetoffice.gov.uk If you are not satisfied with the response, you may bring your complaint to the Commission. For further information on bringing a complaint to the Civil Service Commission please visit their web pages: Click here

Similar Jobs

JYSK

Store Manager Job at JYSK

Handling of goods in the warehouse, as well as in the sales area. Receive the products and stack the pallets in the warehouse and make sure the deliveries go as

Paritas Recruitment - Risk

Change Manager Job at Paritas Recruitment - Risk

You will be responsible for supporting the Risk Team in managing the Risk Change Framework and the Risk reporting framework, working across the risk team to

NJR Recruitment

Trainee Account Executive Job at NJR Recruitment

Location Salary Posted on Reference Benefits South Manchester 25000 - 30000 28/04/2023 NJR13409 Plus Benefits DESCRIPTION A great new opportunity has come to market

Page Personnel - UK

Head of Customer Experience and Operations Job at Page Personnel - UK

Rapidly Growing business - Financial Services Excellent transformation role within Customer support About Our Client This business are an

Specsavers Home Visits Newcastle2

Home Solutions Advisor Job at Specsavers Home Visits Newcastle2

_*2000 welcome bonus paid for right candidate with optical experience/area we are looking for ( more T &C apply)*_. Job Types: Full-time, Permanent.