AddressDetails
Reference number
Salary
Job grade
Contract type
Business area
Type of role
Administration / Corporate Support
Analytical
Audit
Digital
Information Technology
Internal Audit
Security
Working pattern
Number of jobs available
Contents
Location
About the job
Benefits
Things you need to know
Apply and further information
Location
About the job
Job summary
The NCA has grown in size and complexity in recent years and it is vital that it maintains a security posture and capabilities to protect against existing, new and emerging threats.
The Integrated Protective Security Command (IPS) is responsible for securing the Agency to protect the public. The IPS mission statement is: "Delivering integrated protective security to build a resilient, high-trust Agency able to lead the UK’s fight to cut serious and organised crime."
IPS safeguards the NCA from the full range of security threats that target the Agency, our officers and our assets, to enable the organisation to achieve its operational objectives, both domestically and overseas, with flexibility, agility and integrity. Its officers provide specialist security services to the Agency 24 hours a day, 7 days a week, 365 days a year, to mitigate security risks.
Job description
Cyber Security Team (Birmingham)
We are currently looking to recruit 3 potential level 1 SOC Analysts within our Integrated Protective Security command. The successful candidates will work from the Agency’s Birmingham office, on a 24/7 shift pattern. This will include working nights, weekends and bank holidays.The Cyber Security Team leads the strategic response to cyber risks, cybersecurity function, oversees audit, building internal and external alliances with diverse stakeholders to deliver the NCA’s strategic objectives.
What will the successful Candidate be doing?
If successful you will work within the newly created Security Operations Centre, supporting the Lead Analyst and Senior Analyst to run all SOC services. Joining at this time offers the rare opportunity to be involved with building the SOC from the ground up, there is no better way to understand how it works and help shape what the final SOC capability will look like. Reporting to the Senior Analyst, the SOC Analyst is part of the shift based SOC Team that monitors and responds to any identified event from the security monitoring processes in place.
There will be potential for the successful candidate to develop their NCA Cybersecurity career and technical knowledge with the availability of the below courses offered.
GIAC Foundational Cybersecurity Technologies (GFACT) Cyber Foundations: Computers, Technology &Security
GIAC Security Essentials (GSEC) Security Essentials - Network , Endpoint and Cloud
GIAC Security Operations Certified (GSOC) Blue Team Fundamentals: Security Operations and Analysis
GIAC Certified Incident Handler (GCIH) Hacker Tools, Techniques and Incident Handling
***To be considered, you will need to successfully complete SC Enhanced clearance before commencing the role and achieve DV clearance within the first 12 months in post.***
Person specification
Once trained the key responsibilities of the SOC Analyst will include:
- Monitoring for events across multiple security technologies, including intruder detection systems (IDS), Intruder prevention systems (IPS), Firewalls, End Point Security Solutions and vulnerability management solutions.
- Liaison with trusted partners to provide accurate threat identification.
- Assisting in content development and analytics. Taking threat intelligence and tuning the SOC services to best protect the Agency’s vulnerabilities.
- Assisting in engineering tasks in support of the continuous availability of SOC services.
- Complete SOC scheduled tasks and ensure reported events and incidents are appropriately progressed.
- Assisting as with Security, Risk, Compliance and Service reporting.
- Work alongside colleagues from personnel and physical security to assess events and categorise them appropriately.
- Assess events and bring them to the attention of the shift lead for escalation to the Cyber Defence Team.
- Maintenance of SOC documentation, processes, and procedures.
- Receiving and acting on calls, emails, alerts, etc. relating to security events and possible security incidents.
Other responsibilities of the SOC Analyst include:
- Collaboration with other Security Teams (Cyber Defence, IA, Operational, Physical and Personnel) and adjacent commands to support the overall aim of lowing risk to data loss.
- Support of senior management in the delivery of an effective and efficient departmental service.
- Develop and build internal and external partnerships working collaboratively to foster good relations, including working with other government departments to further the SOC capabilities.
Qualifications
- Recognised higher education in an IT related area.
- Certifications, from a recognised body, in digital security eg. GIAC, ISC2, BCS, ISACA, CompTIA etc.
Please ensure the dates of any accreditations you are relying on, are entered on to the CV.
Should you progress to the assessment stage of the process, you will be required to provide a copy of the original certificate.
Failure to provide evidence at interview may result in your application not progressing to the next stage.
Behaviours
We'll assess you against these behaviours during the selection process:
- Developing Self and Others
- Making Effective Decisions
Technical skills
We'll assess you against these technical skills during the selection process:
- A demonstrable enthusiasm for Cyber Security.
- High standard of accuracy and attention to detail.
- Desire to work as part of a team and contribute to the team’s objectives.
Benefits
All officers in the NCA are members of the UK Civil Service. You will be eligible for:
- Civil Service pension scheme
- 26 days annual leave rising to 31 on completion of 5 years continuous service
- If qualifying criteria is met new joiners to the NCA from UK Police Forces or UKIC will have service with those employers taken into account for continuous service purposes for Annual Leave entitlement only, this will be up to a maximum of 31 days leave (including 1 privilege day).
- Training and development opportunities
- Special leave
- Flexible working and family friendly policies
- Cycle to work scheme
- Blue Light scheme
For further details on benefits please visit https://www.nationalcrimeagency.gov.uk/careers/benefits-and-support
Things you need to know
Selection process details
If you wish to apply for this vacancy, you must submit your application by 23:55 on Sunday 31st March 2024.
Sift Process
You will be asked to complete a CV as part of the application process Your CV should set out your career history including training and qualifications, with key responsibilities and achievements. Please ensure that each entry of your career history also has a few sentences outlining a description and the key elements of that role, and that you provide reasons for any gaps within the last two years. Please ensure the dates of any accreditations you are relying on are entered onto the CV. Experience criteria can also be assessed from CV. Your CV will not be scored, and is for information purpose only.
- CV – A basic understanding of the functions of a Security Operations Centre. Including; Patch management, End Point Protection, Vulnerability management, Attack detection, Triage of events and Threat hunting.
- 3x Technical / Experience skills via a 250 Statement of Suitability per criteria.
For further application guidance please visit https://www.nationalcrimeagency.gov.uk/careers/applying-and-onboarding
Once submitted your application will be acknowledged by the Government Recruitment Service.
Please note depending on the volume of applications a Longlist at sift may be conducted on following criteria:
- A demonstrable enthusiasm for Cybersecurity.
Candidates must pass this criteria for their application to be progressed.
A panel will then assess your application to select those demonstrating the best fit for the role by considering the evidence you have provided against the criteria set out in the Entry Criteria section.
Failure to address any or all of these may affect your application.
Sift results are expected to be released w/c Monday 15th April 2024.
Interview Details
You will then be asked to attend an interview in order to have a more in-depth discussion of your previous experience and professional competence.
There will be 1x round of interview, and you will be assessed on the following:
- 2x Behaviours via Hypothetical/Competency based questions
- 3x Technical/Experience criteria via Hypothetical/Competency based questions.
Interviews will take place throughout May 2024 - locations to be confirmed. Please be advised that the type of interview (eg. virtual/face-to-face) may be subject to change and successful candidates will be notified of this prior to attending. However the interview is conducted, the interview criteria will remain as detailed within this advert.
The above sift and interview dates are an indicative timeline.
Should you be successful at sift but cannot attend on the interview date(s) listed the recruitment team cannot guarantee an alternative date. Please contact the recruitment team.
Full details of the assessment process will be made available to shortlisted candidates.
Please ensure that all examples provided in your application are taken directly from your own experience and that you describe the examples in your own words. Any instances of plagiarism including copying of examples/answers from internet sources will result in a withdrawal of your application. Further action, including disciplinary action, may be considered in such cases involving internal candidates. Providing false or misleading information would be contrary to the core values of honesty and integrity expected of all Civil Servants.
Interview Outcome
Candidates will be alerted of the outcome of their interview via their CS Jobs Portal. We will be retaining a candidate pool of successful applicants to draw from as vacancies arise for up to 12 months.
If your application is successful and we are unable to offer you a post immediately, you will be invited to join our reserve list. If over the next 12 months we are able to offer you a position, we will contact you as soon as possible.
Once we make you an offer you will then go through our vetting and pre-employment checks processes.
All Appointments will be made in location merit order.
Multi-Location
Where more than one location is advertised, candidates will be appointed in merit order for each location. You will be asked to state your location preference on your application.
Please be aware that you can be posted to any location that you put in your preferences. If you would only like to be posted to one location, please confirm one location only. If you are posted to a location that you have requested and you do not accept that location, you may not be offered another role.
Please note, only advertised location can be offered. Notes populated in a free text box will not be taken into consideration.
Near Miss
If you are not found appointable at the advertised grade you may be offered the lower grade role if you are considered to meet the skills, experience and behaviours for the lower level. The benchmark for appointing to the lower grade is set at the start of each campaign. All offers will be made in merit.
If you are found appointable at the higher grade but there are no positions available you may be offered an appointment at the lower grade.
Hybrid Working
Here at the NCA we have a hybrid working arrangement in place enabling officers to work a proportion of their role remotely. Eligibility and the degree of home working will vary depending on the requirements of the role. Further details can be discussed at offer stage.
Reasonable Adjustment
We are committed to ensuring our recruitment process is inclusive and accessible to all. As part of our application process you will be prompted to provide details of any reasonable adjustment to our recruitment process that you may need. If you have a disability or long-term condition (a physical or mental impairment that has a substantial and long term effect on your ability to carry out normal day-to-day activities, we have a duty to make reasonable changes to our processes.
If you need a change to be made so that you can make your application, you should: Contact Government Recruitment Service via ncarecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs. Complete the ‘Assistance required’ section in the ‘Additional requirements’ page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you’re deaf, a Language Service Professional.
Inclusion and Accessibility
We are proud to be an inclusive, equal opportunities employer. As a Disability Confident Leader we are committed to ensuring that all candidates are treated fairly throughout the recruitment process. For details of the available group please visit https://www.nationalcrimeagency.gov.uk/careers/benefits-and-support
In order to monitor the effectiveness of the National Crime Agency’s Diversity & Inclusion strategy, the NCA require certain personal details about you on submission of your application. Please note that this will be treated in confidence and will not impact your application. You will be asked to complete an E-consent survey asking for permission to share this data with the NCA to be used for statistical/monitoring purposes only, refusal of consent to share the information will not impact your application.
If you are experiencing accessibility problems with any attachments on this advert, please contact ncarecruitment.grs@cabinetoffice.gov.uk
Additional Information
- The NCA is a 24/7 organisation, and working patterns must support business requirements. Some roles may require you to respond at short notice or outside of core hours.
- Individuals will be required to undertake and pass a substance misuse test as part of pre-employment checks.
- Successful candidates may be required to undertake a medical. If required, the medical will take place in either London or Warrington. Unfortunately, travel costs will not be reimbursed.
- If you are an internal candidate who has passed interview but is undergoing an internal investigation or have a written warning in place preventing a post move you may not be able to be posted until this investigation is concluded or restriction lifted. You will remain on the reserve list for a max of 12 months.
VETTING REQUIREMENTS SC
All security clearances require you to provide evidence of your UK footprint where you have been physically present in the UK.
The requirement for SC clearance is to have been present in the UK for at least 3 of the last 5 years.
Failure to meet the residency requirements will result in your security clearance application being rejected.
If you require SC clearance you will need to provide evidence of the below requirements.
Checks will be made against:
- Departmental or company records (personnel files, staff reports, sick leave reports and security records)
- UK criminal records covering both spent and unspent criminal records
- Your credit and financial history with a credit reference agency
- Security Services records
VETTING REQUIREMENTS - DV
All security clearances require you to provide evidence of your UK footprint where you have been physically present in the UK.
The requirement for DV is to have been present in the UK for at least 7 of the last 10 years.
Failure to meet the residency requirements will result in your security clearance application being rejected.
If you require DV clearance you will need to provide evidence of the below requirements.
Checks will be made against:
- successful completion of the BPSS
- UK criminal record and identity checks
- credit reference checks
- relevant personnel and medical checks (if required)
For further information on National Security Vetting please visit the following page https://www.gov.uk/government/publications/demystifying-vetting
We encourage all candidates to visit the NCA careers page for further information please visit https://www.nationalcrimeagency.gov.uk/careers
If you have any specific queries about the role that are not covered by the candidate pack, please contact:
ncarecruitment.grs@cabinetoffice.gov.uk
Feedback will only be provided if you attend an interview or assessment.
Security
See our vetting charter (opens in a new window).
Medical
Nationality requirements
This job is broadly open to the following groups:
- UK nationals
- nationals of the Republic of Ireland
- nationals of Commonwealth countries who have the right to work in the UK
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
- individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
- Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Working for the Civil Service
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
Apply and further information
Contact point for applicants
Job contact :
Recruitment team
Further information
If you are not satisfied with the response you receive from the Department, you can contact the Civil Service Commission: https://civilservicecommission.independent.gov.uk/recruitment/recruitment-complaints/
