About the job

Job summary

The Cabinet Office is undergoing a significant Digital Transformation.  Over the next three years we aspire to make UK Government digital services the best in the world, meeting or exceeding the benchmark set globally by the best public or private sector standards. For us to meet this ambition we are aiming to further improve the conditions, processes and expertise we have in place to be set up for success. This means we need to go much further and faster and strengthen the delivery of DDaT in government. Did you know Cabinet Office Digital supports over 15,000 users across 40+ departments including Government Digital Service (GDS), Crown Commercial Services (CCS), Estates and Government Property Agency (GPA)? 

The role

We are looking for a threat intelligence analyst who will help us to identify and understand the cyber threats facing the organisation, and will provide decision makers and technical teams with actionable information needed to help them to effectively secure their services. You’ll also work closely alongside the Cyber Security team, to provide insights on the real-world threat and input to threat modelling, security reviews, red teams, alert/vulnerability triage and investigation, and incident response. 

Job description

You will

• Perform threat identification and collection activities through our CTI platform and open source intelligence gathering 
• Maintain knowledge and understanding of the cyber threats facing the Cabinet Office and the IT and digital services that it delivers 
• Coordinate the implementation, and manage the operation of, threat intelligence tools and platforms 
• Act as SME for threat intelligence through reporting and briefings at strategic, tactical and operational levels, providing actionable and timely insights on relevant cyber threats using robust analytical methodologies 
• Provide subject matter expertise on actual or anticipated threats to assist stakeholders in their proactive risk management, mitigation and control 
• Support threat detection and incident response activities with research and analysis 
• Build relationships and work with stakeholders from within Cyber Security and the wider organisation to define standing intelligence requirements 
• Build relationships and work with with other government departments and the National Technical Authorities to share intelligence enable the wider organisation to use threat intelligence for informed decision making 

Person specification

Essential Criteria 

• In-depth knowledge of the current tactics, techniques and procedures (TTPs) used by threat actors and experience using frameworks such as MITRE ATT&CK 
• Experience proactively identifying, analysing, managing and resolving threats 
• Experience reporting to stakeholders using structured analytical methods 
• Excellent communication and presentation skills, with the ability to explain complex topics simply 
• An interest in politics, international relations and/or international security, and an understanding of how trends or changes in this impact an organisation’s threat profile 

Desirable Criteria 

• Experience with Splunk 
• Experience with cloud environments such as AWS 
• Experience using a threat intelligence platform 
• Experience integrating and tuning IoC feeds into SIEM tools 

Additional information

A minimum 60% of your working time should be spent at your principal workplace. Although requirements to attend other locations for official business will also count towards this level of attendance.

Benefits

Alongside your salary of £53,400, Cabinet Office contributes £14,418 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

Things you need to know

Selection process details

Application process

For a confidential discussion about the role, please contact our recruitment advisers at GatenbySanderson: Shoaib Haroon, Principal Consultant on M: 07384258626 or E: Shoaib.haroon@gatenbysanderson.com OR Russell Brandon, Associate Researcher on M: 01962 864 124 or E:russell.brandon@gatenbysanderson.com

Find out more by visiting www.join-codigital.co.uk where you can register and apply.

To apply for this post, you will need to provide: 

• Your CV
• A supporting statement (of no more than 2 pages) detailing how you can address the Essential criteria in the Person Specification
• Contact details for two referees. Referees should be people who can comment authoritatively on you as a person and as an employee and must include your current or most recent employer or his/her authorised representative. References will not be contacted until a successful appointment is made  
• A completed diversity monitoring form, this will appear on screen as part of the application process.

This is to be submitted online at the following portal no later than Sunday 10 March 2024 (23:55) https://www.gatenbysanderson.com/job/GSe106981

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status.

Expected timeline (subject to change)

Closing Date for application: 7/04/2024

Sift : 12/04/2024

Final panel Interviews -  w/c 22 April 2024 or w/c 29 April 2024

Interview location - Online

Further information

Please note terms and conditions are attached. Please take time to read the document to determine how these may affect you.

A reserve list may be held for a period of 12 months from which further appointments can be made.

Any move to Cabinet Office from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk

Please note that this role requires SC clearance, which would normally need 5 years’ UK residency in the past 5 years. This is not an absolute requirement, but supplementary checks may be needed where individuals have not lived in the UK for that period. This may mean your security clearance (and therefore your appointment) will take longer or, in some cases, not be possible.

For further information on National Security Vetting please visit the following page https://www.gov.uk/government/publications/demystifying-vetting

If successful and transferring from another Government Department a criminal record check may be carried out.

In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service on your behalf.

However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading. 

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment. 

A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.

Offers above the band minimum are subject to our assessment of your skills and experience as demonstrated at interview. Salaries over the band minimum will be paid as a non-pensionable allowance.

This role is full time only. Applicants who wish to work an alternative pattern are welcome to apply however your preferred working pattern may not be available and you should discuss this with the vacancy holder before applying.

Reasonable adjustments

If a person with disabilities is put at a substantial disadvantage compared to a non-disabled person, we have a duty to make reasonable changes to our processes. 

If you need a change to be made so that you can make your application, you should contact joincodigital@gatenbysanderson.com as soon as possible before the closing date to discuss your needs. 

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).

See our vetting charter (opens in a new window). People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window). The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.