Job summary
Cyber Operations' purpose is to support safe care and build public trust by building NHS England's cyber resilience and enabling the wider health system to be cyber resilient.
The Cyber Operations sub‑directorate consists of four operational areas:
* Cyber Security Operations Unit (CSOU)
* Cyber Delivery Unit (CDU)
* Cyber Improvement Programme
* Chief Information Security Office Function (CISO)
This role is within the Cyber Security Threat Intelligence team within NHS England National CSOC, part of CSOU.
The CSOU function provides centralised monitoring and response across NHSE, and the system, which consists of Threat Operations, Protective Monitoring, Incident Management & response and DevOps.
The Threat Intelligence function is comprised of four primary functions:
* Performing intelligence collection, aggregation, analysis and contextualisation of healthcare and security information to produce actionable cyber threat intelligence
* Performing high‑level risk assessments of current and emerging threats to the health & social care estate
* Producing stakeholder‑specific intelligence reporting for internal and external stakeholders
* Providing specialist Cyber Threat Intelligence (CTI) support during high complexity incidents
The Senior Cyber Security Analyst – Threat Intelligence is responsible for collecting, analysing and disseminating cyber threat intelligence to identify threats to the systems, infrastructures, and resources critical to NHS England and across Health & Care.
Main duties of the job
The Senior Cyber Security Analyst (Threat Intelligence) will perform a supervisory role within the Threat Intelligence team as well as acting as a technical subject matter expert for other teams and stakeholders across Cyber Operations.
Responsibilities
* Generating Strategic and Technical Threat Intelligence products for CSOC stakeholders.
* Supervising a team of threat intelligence analysts as well as reporting and raising issues to senior leadership.
* Act as a quality and audit layer for written Threat Intelligence products.
* Making Cyber Threat Intelligence (CTI) decisions within Incident Response scenarios and leading in-depth CTI investigations.
* Act as the escalation tier for cyber threat intelligence tasks within Cyber Security tooling including EDR and SIEM tooling.
* Interrogate threat intelligence and internal security tooling to identify items of interest and potential cyber threats.
* Proactive research and assessment of Tactics, Techniques and Procedures (TTPs) of cyber threat groups.
* Development of analytical procedures to meet changing requirements and team development, as well as adapting to a rapidly changing security environment.
* Delivery of technical capability development, identification, and implementation of automation use cases within cyber threat intelligence and Security Operations.
* Supporting the ongoing development and continuous improvement of the CSOC's CTI function in line with industry best practice.
Person Specification
Knowledge
Essential
* Demonstrate the knowledge of collection, analyses and reporting of information from various sources to identify potential cyber threats, risks and vulnerabilities.
* Extensive knowledge of techniques, approaches and processes of digital threats; ability to detect, monitor, analyse and prevent digital threats.
Desirable
* Demonstrable knowledge of and ability to utilise a variety of specific tools for collecting, analysing, and presenting digital‑related evidence.
Skills and Experience
Essential
* Demonstrable knowledge of technologies and technology‑based solutions dealing with information security issues; ability to apply these in protecting information security across the organisation.
Desirable
* Working knowledge of concept, issues and techniques of endpoint security; ability to ensure security compliance of endpoint devices in various circumstances.
Qualifications
Essential
* Masters level degree in Cyber Security or a relevant subject, or equivalent level of experience.
Security Clearance
All NHS England Cyber Security personnel must hold Security Clearance level as a minimum. To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. The requirement can be reduced to three years continuous UK residency with additional overseas checks for the previous two years. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role will still be considered.
Disclosure and Barring Service Check
This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service to check for any previous criminal convictions.
#J-18808-Ljbffr