Job Description

Join Police Digital Service as NMC Cyber Detect Analyst

About Police Digital Service

To protect people from harm in our rapidly changing world, police services must not only keep up with technology and business changes but develop capabilities and ways of working that will enable them to adapt to and deal with the complexity of modern criminality.

Police Digital Service strives to be the go-to partner for technology developments and programmes across UK policing. Our team provides technical advice and delivers services to help policing and law enforcement organisations across the UK prioritise and focus on technology efforts.

Our vision is to support UK policing to keep people safe, get more from technology investments and make better use of public money, and we\'re always on the lookout for great talent to help us achieve this.

The National Management Centre (NMC) is part of Police Digital Service and provides visibility and control of information risks for policing. It supports the 24x7x365 nature of police operations, providing a threat detection and response capability for digital services before, during and after cyber-attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both the national and force level.

Why Join us?

• Balance is important and we want you to take time off to recharge - we offer 28 days\' annual leave plus bank holidays, rising to 30 days after 5 years of service. Holiday Purchase also available.
• We care about your well-being - we have an EAP that offers not just welfare benefits but also retail discounts .
• Plan for the future - we offer an excellent pension scheme and life assurance cover
• Put your mind at rest regarding your health - offering remote GP, mental health and physiotherapy appointments via video consultation
• Family - Enhanced maternity, paternity and sick pay along with a flexible return to work
• Community - one paid day off per year for volunteering

NMC Cyber Detect Analyst duties involve but are not limited to:

• Initial Triage of alerts - evaluation & detection
• Confirmation of false positive
• Incident data gathering and feedback on any gaps and issues in respect to Platform Content or tuning opportunities
• Reflection of incident severity based on analysis
• Escalation of potential incidents to customer or Senior Cyber Detect Analyst/CIMT Team as appropriate
• Trend Analysis of force-by-force events for presentation into forces at regular intervals
• Continuous input into the value and optimisation of content
• Regular Performance conversations with line manager
• A proactive approach to personal development and coaching conversations to push and develop yourself and others.

Key Responsibilities

• Monitoring and triage of alerts across NMC Technologies.
• Accountable for the initial assessment of alerts via analysis of all data at your disposal in the alert\'s context. Following guidance documentation where applicable in a timely manner.
• Responsible for engaging relevant stakeholders, e.g. The customer, Senior Cyber Detect Analyst or CIMT (Cyber Incident Management Team) following completion of alert assessments.
• Responsible for ensuring initial engagement direct with national police forces where relevant
• Must be in tune with situational awareness across national police forces, E.g., Change, Problem, Incident, Network Architecture, Critical Asset lists.
• Comprehensive understanding of all NMC services and their interoperability.

What you need to succeed in the role

Essential:

• Ability to acquire SC and NPPV3 level clearances
• Experience working in a fast-paced, operational, team environment
• Experience working in a customer facing environment
• Knowledge of various security methodologies and processes
• Knowledge of commonly deployed Cyber Security tools and products
• Knowledge of common Internet protocols and applications
• Knowledge and experience of IP networks and their key components
• A genuine enthusiasm to work within Cyber Security
• Motivated and committed to work on your own initiative
• Strong attention to detail
• Ability to multi-task, prioritise and manage time effectively
• Excellent interpersonal skills
• Excellent written and verbal communication skills
• Proficient in Microsoft Office Applications
• Proficient in the use of SIEM (Security Incident and Event Management) technology
• Ability to convey technical speak into plain English to contextualise the alert with recommendations if applicable
• Ability to engage with all elements of the NMC proactively and professionally

Desirable Experience

• Foundation or Higher Degree in a related subject, evidence of self-learning or relevant practical experience
• Experience in stakeholder management and engagement
• Experience working within a Cyber Security environment
• Relevant recognised industry related accreditation

Diversity, equity and inclusion

We are committed to equal opportunity for all and will not discriminate on any grounds. We encourage applications from people from the widest possible span of experience. We particularly welcome applications from Black, Asian and Minority Ethnic (BAME) candidates and people with disabilities.

Working Arrangements

At the NMC, you will benefit from hybrid working, getting the advantages of both face-to-face team engagement and home working. NMC employees have the opportunity to work in our modern office environment for in-person collaboration, however you will also get the opportunity to work from home 2 days a week.

This is a shift-based role, operating on a 24/7 shift rotation throughout the year. You will be required to work shift patterns (20% shift allowance applies).

Expiry date: 23:59, Sun, 24th Sep 2023.

Police Digital Service