About the job

Job summary

The Local Digital team sits within the Department for Levelling Up, Housing and Communities (DLUHC). The team supports councils across England to deliver more user-centred, cost-effective local public services through open, collaborative and reusable work. * As part of our work on the Government Cyber Security Strategy’s ‘Defend as One’ pillar, we’re setting up an operational Local Government Cyber Coordination Centre. We’ll share actionable intelligence with, and between, local authorities to enable them to proactively and promptly respond to emerging threats and vulnerabilities. We’re looking for a Monitoring Lead to work closely with our team of civil servants and 3rd party cyber specialists to collect and analyse security event data and manage malicious activity.

Job description

• Help set up the Local Government Cyber Coordination Centre, leading in the design, development and enablement of automated monitoring processes using SIEM (Security Information and Event Management) and network analysis tools
• Support the shaping of the monitoring strategy, ensuring requirements, policies and standards to govern all activities and outputs are met
• Participate in the cyber threat advice service, sharing regular cyber threat assessments and advice for the local government sector
• Collect and analyse security event data arising from activity across the organisation, tune and improve rules generating security alerts, and follow up by investigating indicators of potentially malicious activity, escalating incidents or initiating responses
• Manage the monitoring, triaging, and investigation of security alerts to identify security incidents
• Reviewing analysis of security event data to manage security incident response, reporting, or escalation where appropriate

Person specification

• Experience as a cyber security intelligence analyst, monitoring specialist and/or response specialist
• Strong knowledge of intrusion detection and analysis; able to use advanced principles of monitoring network and system activity to identify potential intrusion 
• Able to use a range of advanced methods and procedures (including intelligence analysis, predictive research, root cause analysis, vulnerability report analysis) to identify, acquire, analyse and preserve artefacts by means of controlled and documented analytical and investigative techniques
• Experience of supervising and managing teams undertaking intrusion detection and analysis
• Strong knowledge of of threat intelligence and threat assessment principles and concepts, able to lead threat intelligence and assessment activities

Benefits

Alongside your salary of £56,748, Department for Levelling Up, Housing and Communities contributes £15,322 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

Things you need to know

Selection process details

We are for everyone 

At DLUHC we value diversity and inclusion and actively encourage and welcome applications from everyone, including those that are underrepresented in our workforce. We promote equality of opportunity in all aspects of employment and a working environment free from discrimination, harassment, bullying and victimisation. 

We would strongly recommend that applicants get in touch with the vacancy manager to find out more information about this role. 

We are for everyone 

CV and Covel Letter Declaration 

We recruit based on your knowledge and skills, and not background, gender or ethnicity - this is called name blind recruitment. 

Please remove references to your: 

• name/title
• educational institutions
• age
• gender
• email address
• postal address
• phone number
• nationality/immigration status

Most of our campaigns utilise multiple assessors and so it is possible that your application would be viewed by different assessors. 

Please merge your CV and Cover Letter in one document. Your covering letter should be no more than 1 page referencing how you meet the criteria set out in the job description.

At sift, through your CV we will be assessing: 

• Experience 
• Technical

The interview will be of a blended nature consisting of the following success profiles elements:    

Behaviour: Working together

Experience

Technical 

In full the campaign will test the below Success Profile Elements: 

Experience: 

Technical: 

Behaviours:  Working together

Technical and Experience questions will be based around the essential skills and criteria as listed in the job description. 

We do not consider direct CV applications – you must apply for this role via the application link on Civil Service Jobs: 

Please note that near miss offers may be made at the lower grade to candidates who do not meet the grade criteria for this campaign 

Group 1 Digital and Data roles

DLUHC has implemented the Digital and Data capability framework for Group 1 roles. Applicants that are successful at the sift stage will be required to complete a capability assessment at interview.

DLUHC will honour completed capability assessments for this role from other Government Departments for existing Civil Servants. Please provide a copy of your capability assessment to the Hiring Manager when applying. If you have any queries on pay, please contact the Hiring Manager.

Salary is determined by performance at interview, within the range advertised. Each experience or technical skill is assessed between 1-3, representing working towards, at or above the job level requirements. You are awarded a proficiency level accordingly, and you will be given opportunities at least once a year to re assess your capability and progress through the pay scale within your grade. An additional digital allowance may be payable depending on level of assessed capability.

Candidates moving from another government department have the option to retain their current salary where the principle for implementation is there is no detriment where existing pay exceeds the indicative level. Where individuals are at a lower salary than their assessed level, they will receive an upward adjustment.

G7 Group 1 Digital and Data salary

• The salary for this role will between £56,748 - £61,562 (National) and £61,884 - £66,677 (London) depending on the proficiency level assessment.
• An additional digital allowance may be payable depending on the level of assessed capability up to £9,000
• For applicants in receipt of existing allowances, we will assess each case individually and aim to match the digital allowance implemented with no detriment.
• For existing civil servants, the usual policy on level transfer and promotion will apply and is non-negotiable

Please note that the average employer pension contribution is based upon the National minimum salary for this role. Should your agreed starting salary for this role be different, the average employer pension contribution will be calculated accordingly. If you are a Secondee, this will not apply as you will remain on your home organisation’s terms and conditions. 

BENEFITS:

Transfers across the Civil Service on or after 4 October 2018:Any move to DLUHC from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk

For further information about the benefits available to DLUHC employees, please see the attached Candidate Pack.

 

GEOGRAPHICAL LOCATION:

• London
• Darlington
• Wolverhampton
• Manchester
• Leeds
• Birmingham
• Bristol

Sift and Interview dates

Sifting is envisaged to take place W/C 15/04/2024 with interview dates to be confirmed. All interviews are currently being held remotely via videocall. 

Reserve List 

In the event that we identify more appointable candidates than we currently have posts available, we will hold applicant details on a reserve list for a period of 6 months from which further appointments can be made. This may include roles at a lower grade. Candidates placed on a reserve list will be informed of this. Those candidates who do not wish to remain on the reserve list should contact recruitment@levellingup.gov.uk to be removed from the reserve list. 

SC (Security Check):

Important note

Successful candidates for roles based in our 2 Marsham Street building must meet the security requirements before they can be appointed. The level of security needed is Security Check and the process can take up to 8 weeks to complete.

Please note that successful candidates will need to pass the Security Check – this requires you to have been resident in the UK for the past 5 years. Please refer to the DLUHC Notes on Security Clearance section of our Candidate Pack for further information on Security Check (SC).

Please note, once in post we will look to put the successful candidate through DV clearance. 

Candidates should also note that with effect from 1st August 2018 the department will also check all applicants who are successful at interview, against the Internal Fraud Database (IFD) held by the Cabinet Office. In accordance with the Civil Service Internal Fraud Policy, any applicant who is included on the IFD will be refused employment by DLUHC. Please see the Candidate Pack for further information on the Internal Fraud Database.

Candidates should also note that with effect from 1st August 2018 the department will also check all applicants who are successful at interview, against the Internal Fraud Database (IFD) held by the Cabinet Office. In accordance with the Civil Service Internal Fraud Policy, any applicant who is included on the IFD will be refused employment by DLUHC. Please see the Candidate Pack for further information on the Internal Fraud Database.

Candidates should also note that with effect from 1st August 2018 the department will also check all applicants who are successful at interview, against the Internal Fraud Database (IFD) held by the Cabinet Office. In accordance with the Civil Service Internal Fraud Policy, any applicant who is included on the IFD will be refused employment by DLUHC. Please see the Candidate Pack for further information on the Internal Fraud Database.

Before starting your application it’s very important to make sure that you are eligible to apply and meet the Civil Service nationality requirements. All candidates are expected to read the information provided in the DLUHC candidate pack regarding nationality requirements and rules 

Candidate Pack Information 

Please see attached Candidate pack for further information. 

 

Internal Fraud Database 

The Internal Fraud function of the Fraud, Error, Debt and Grants Function at the Cabinet Office processes details of civil servants who have been dismissed for committing internal fraud, or who would have been dismissed had they not resigned. The Cabinet Office receives the details from participating government organisations of civil servants who have been dismissed, or who would have been dismissed had they not resigned, for internal fraud. In instances such as this, civil servants are then banned for 5 years from further employment in the civil service. The Cabinet Office then processes this data and discloses a limited dataset back to DLUHC as a participating government organisations. DLUHC then carry out the pre employment checks so as to detect instances where known fraudsters are attempting to reapply for roles in the civil service. In this way, the policy is ensured and the repetition of internal fraud is prevented.  

For more information please see- Internal Fraud Register 

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is developed vetting (opens in a new window).

See our vetting charter (opens in a new window). People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window). The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.