You will work as part of an innovative and service-orientated team of analysts, focused on the detection and investigation of inappropriate or malicious activity across a range of Departmental data systems, providing comprehensive analysis of assurance alerts as well as proactive analysis of activity captured in system logs to quickly determine if behaviour/activity detected warrants closer investigation and whether data may have been accessed or used inappropriately.
The Internal Abuse Monitoring Analyst (Operations) collaborates with stakeholders across the Cyber Resilience Centre and wider security community to ensure an effective response to alerts and risks as they are identified, responding to developing fraud threats and security breaches against the Departments IT systems, triaging and progressing potential cases of malicious activity, using analytical tools and root-cause analysis techniques to do so.
The Internal Abuse Monitoring Analyst (Operations) reports to the Senior Internal Abuse Monitoring Analyst (Operations). The Internal Abuse Monitoring Team operates within DWPs Cyber Resilience Centre (CRC) and forms part of the Personnel Security and Insider Threat Monitoring Group (PSITMG).
Person specification
Responsibilities
As an Internal Abuse Monitoring Analyst (Operations) you will:
Interpret reports and dashboards and respond timeously to alerts generated by the latest analytical tools and capabilities operating across data within DWP systems.
Investigate anomalies arising from the analysis of system logs and audit trails and generate referrals for the intervention and investigation arms of the Department.
Use your knowledge of benefit systems, fraud and security vulnerabilities to ensure an effective response to alerts as they are generated and progress cases of malicious activity or abuse with expert domains.
Develop close working relationships with CRC analytical colleagues to ensure rules and alerts delivered to operations are regularly reviewed and optimised to achieve high quality outcomes.
Work closely with the Senior Internal Abuse Monitoring Analysts to use field-level insight in identifying new and emerging threats.
Use your knowledge of benefit systems and processes to support the full assessment of emerging threats in terms of their potential impact.
At all times ensure data is collected and processed and analysed in line with all DWP and legislative requirements.
Candidates will be required to undertake SIEM tool training if not already held.
Essential Criteria
The following ESSENTIAL criteria will be used in the sift and successful candidates will be expected to demonstrate these:
1. (LEAD CRITERIA) - Recent experience of working in a benefits, fraud, security, or intelligence environment, with knowledge of Government means-tested benefits in particular digital services.
2.Understanding of how means-tested benefits can be maliciously exploited both internally and externally.
3.Candidates will demonstrate an aptitude for analytical work or will have previous experience of identifying security or fraud compromises.
4.Experience of performing under pressure and delivering to deadlines, whilst paying close attention to detail.
Behaviours
We'll assess you against these behaviours during the selection process:
* Making Effective Decisions
* Communicating and Influencing
* Working Together
Technical skills
We'll assess you against these technical skills during the selection process:
* Secure Operations Management - awareness
* Intrusion Detection and Analysis awareness
* Cyber Security Operations - awareness
Benefits
Alongside your salary of 38,772, Department for Work and Pensions contributes 11,232 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
DWP have a broad benefits package built around your work-life balance which includes:
* Working patterns to support work/life balance such as job sharing, term-time working, flexi-time and compressed hours.
* Generous annual leave at least 23 days on entry, increasing up to 30 days over time (prorata for part time employees), plus 9 days public and privilege leave.
* Support for financial wellbeing, including interest-free season ticket loans for travel, a cycle to work scheme and an employee discount scheme.
* Health and wellbeing support including our Employee Assistance Programme for specialist advice and counselling and the opportunity to join HASSRA a first-class programme of competitions, activities and benefits for its members (subscription payable monthly).
* Family friendly policies including enhanced maternity and shared parental leave pay after 1 years continuous service.
* Funded learning and development to support progress in your role and career. This includes industry recognised qualifications and accreditations, coaching, mentoring and talent development programmes.
* An inclusive and diverse environment with opportunities to join professional and interpersonal networks including Womens Network, National Race Network, National Disability Network (THRIVE) and many more.
Things you need to know
Artificial intelligence
Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.
Selection process details
This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Strengths, Experience and Technical skills.
Stage 1: APPLICATION & SIFT
As part of the application process you will be asked to complete a CV & 1000 word Personal Statement. All applications will be assessed and sifted based on the essential criteria in the advert, using the information you provide in your completed application form.
Further details around what this will entail are listed on the application form.
An initial sift will take place against the first (lead) criteria in the essential criteria list: Recent experience of working in a benefits, fraud, security, or intelligence environment, with knowledge of Government means-tested benefits in particular digital services.
Only those candidates who meet the standard for that criteria will proceed to the next stage, where the remaining criteria will be scored using the information you provide in your completed application form.
The sift panel will use the information relating to your employment history (your CV) and your personal statement of suitability to assess your experience, skills and knowledge. When giving details of your employment history, you should therefore include details of the work and projects that you have been involved in, and your role therein.
Applications must include:
A. A completed Personal Details application form.
B. A curriculum vitae with education, professional qualifications and full employment history, giving details of key achievements relevant to the skills and experience outlined in this job description.
C. A personal statement of suitability clearly demonstrating how you meet the essential criteria as detailed in the responsibilities section of the job advert in no more than 1000 words.
Stage 2 - INTERVIEW
The final stage of the process will be a face-to-face interview where you will be assessed against the Behaviours, Technical Skills, and Strengths outlined in the advert. Candidates will also be required to give a brief presentation at interview, details of which will be provided prior to you attending. Only candidates that have been successful at the previous stage will be invited to attend. Interview dates will be confirmed. We anticipate that interviews will be in January.
SIFT & INTERVIEW INFORMATION
Sifting for this role will be concluded as soon as the advert closes. Interview dates to be confirmed. Locations to be confirmed and will be at job location sites, depending on the majority location preferences of the interviewees.
You must have 5 years residence in the UK to be eligible to apply for this role.
Sift and interview dates to be confirmed.
Further Information
At the Department for Work and Pensions (DWP) we value diversity and inclusion and actively encourage and welcome applications from everyone, including those that are underrepresented in our workforce.
Find out more about working for DWP on the DWP Careers Hub .
Reserve List
A reserve list may be held for a period of 6 months from which further appointments can be made.
If you are placed on a reserve list but we cannot immediately offer you a post, please note:
* If you are later offered the role you applied for, in a location you have expressed a preference for, and you decline the offer or are unable to take up the post within a reasonable timeframe you will be withdrawn from the campaign and removed from the reserve list, other than in exceptional circumstances (e.g. a contractual Part Time Working Pattern cannot be accommodated in the initial role offered or in cases of serious ill health).
* If DWP makes an offer of an alternative role or location to that which you originally applied for, and you decline that offer, you will be able to remain on the reserve list.
Disability Confident Scheme
If high application volumes are received, the benchmark for candidates to proceed to the next stage may be raised. In line with our commitment to the Disability Confident Scheme (DCS), we aim to advance all candidates applying under the DCS who meet the minimum standard. However, we may only progress those candidates who best meet the required standards.
Reasonable Adjustments
We consider visible and non-visible disabilities, neurodiversity or learning differences, chronic medical conditions, or mental ill health. Examples include dyslexia, epilepsy, autism, chronic fatigue, or schizophrenia.
If you need a change to be made so that you can make your application, you should contact the Government Recruitment Service via DWPRecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.
Complete the Reasonable Adjustments section in the Additional requirements page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if youre deaf, a Language Service Professional.
If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'Contact point for applicants' section.
Integrity, plagiarism and Civil Service Principles
The Civil Service values honesty and integrity and expects all candidates to abide by these principles.
Please ensure that all examples provided in your application are taken directly from your own experience and that you describe the examples in your own words.
Examples of plagiarism can include:
* Presenting the work, ideas and experience of others as your own
* Copying content or answers from an online or published source that is not your own
Disclosure and Barring Service and Internal Fraud Database Checks
In order to process applications without delay, we will be sending a Criminal Record Check toDisclosure and Barring Service on your behalf.
However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading.
Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicants details held on the IFD will be refused employment. A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.
If successful and transferring from another Government Department, a criminal record check will be carried out.
For further information on National Security Vetting please visit the Demystifying Vetting website .
Important
New entrants are expected to join on the minimum of the pay band.
Before applying for this vacancy, current employees of DWP should check whether a successful application would result in changes to their terms & conditions of employment, e.g. mobility, pay, allowances. If you are a current employee and are successful you must be able to be released from your current post within four weeks.
Those on protected TUPE/ COSoP terms and conditions applying on promotion or voluntary permanent level move will adopt DWPs Terms and Conditions and this may have a different impact on pay and allowances. Please review this prior to acceptance of a role.
Civil Servants that would transfer into DWP from other government organisations, following successful application, will assume DWP's terms & conditions of employment current on the day they are posted, unless DWP has stated otherwise in writing. Accepting a post will be taken to mean acceptance of revised terms & conditions.
Civil Servants applying on promotion will usually be appointed to the salary minimum or within 10% of existing salary.
Any move to DWP from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may, however, be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility at the Childcare Choices Website.
Feedback will only be provided if you attend an interview or assessment.
Security
Successful candidates must undergo a criminal record check.
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window) .
See our vetting charter (opens in a new window) .
People working with government assets must complete baseline personnel security standard (opens in new window) checks.
Nationality requirements
This job is broadly open to the following groups:
* UK nationals
* nationals of the Republic of Ireland
* nationals of Commonwealth countries who have the right to work in the UK
* nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
* nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
* individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
* Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Further information on nationality requirements (opens in a new window)
Working for the Civil Service
The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window) .
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.
Diversity and Inclusion
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window) .
Apply and further information
This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.
Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.
Contact point for applicants
Job contact :
* Name : Susan Amiri
* Email : SUSAN.AMIRI@DWP.GOV.UK
* Telephone : 0782 766 3404
Recruitment team
* Email : dwprecruitment.grs@cabinetoffice.gov.uk
Further information
Appointment to the Civil Service is governed by the Civil Service Commissions Recruitment Principles. If you feel your application has not been treated in accordance with these principles and you wish to make a complaint, you should in the first instance contact DWP by email: HR.BUSINESSASSURANCE@DWP.GOV.UK.
If you are not satisfied with the response you receive from the Department, you can contact the Civil Service Commission. Click here to visit the Civil Service Commission.
Attachments DWP Terms and Conditions January 2024 Opens in new window (docx, 17kB) Success-Profiles-Candidate-Overview (18) Opens in new window (pdf, 635kB) Candidate Pack 436984 HEO Opens in new window (odp, 7110kB)