Details
Reference number
445540
Salary
£40,670 - £46,721
This role attracts a SPOT Rate salary. SPOT Rate offers a progressive increase in pay to reflect the skills and experience of the officer.
The post holder will be required to be part of an on call 24/7 rota. If you do perform on-call duties, where eligible, you will be entitled to an On-Call allowance for each session you are on-call
Roles based in London will receive an additional London Weighting (Per Annum) of £4218
A Civil Service Pension with an employer contribution of 28.97%
GBP
Job grade
Executive Officer
G5
Contract type
Permanent
Business area
NCA - Threat Leadership - National Cyber Crime Unit (NCCU)
Type of role
Information Technology
Intelligence
Operational Delivery
Policing
Working pattern
Flexible working, Full-time, Part-time
Number of jobs available
1
Contents
* Location
* About the job
* Benefits
* Things you need to know
* Apply and further information
Location
Birmingham, London*, Warrington
* For roles based in London, your contractual place of work will be Stratford. While the Stratford site is expected to become operational from November 2025 – March 2026, you will be required to carry out your contractual duties from Vauxhall or another reasonable location on a temporary basis during the interim period.
Please note that, as Stratford will be your contractual place of work, any subsequent move from a temporary location will not entitle you to payments for travel time or costs under the Relocation and Excess Travel Policy.
About the job
Job summary
The National Cyber Crime Unit (NCCU) delivers both the threat leadership response and the National specialist operational response. This approach of retaining operational capability alongside the threat leadership element is a different approach to the way we tackle other mainstream SOC threats. It recognises the need to keep pace with technological change with in house specialist expertise working in a multi-disciplinary environment. Working on a national and international level we respond in fast time to rapidly changing threats. This is done using innovative approaches and ground breaking techniques to target cyber criminals causing the greatest threat to the UK. The NCCU are looking to implement a step change in the UK's overall capability to tackle Cyber Crime, supporting our partners both in industry and Law enforcement to better protect themselves against Cyber Crime.
Our remit is wide with a variety of teams working across the 4 Ps ( Prepare, Pursue, Prevent, Protect).NCCU leads and co-ordinates Team Cyber UK's response to cyber- crime, which assures a local, regional and national joint response. We work collaboratively with partners to understand the growing use of cyber as an enabler of serious crime types, developing long-term, sustainable capability to tackle the cyber threat, to enhance the law enforcement response. This enables the National Cyber Crime Unit to determine the most effective way of tackling the growing threat.
Job description
The Infrastructure Investigation team work to identify and map the infrastructure, architecture, operational capabilities and network used by cyber criminals, as well as extracting information which could attribute parts of the infrastructure to a real world person or produce more investigative leads.
The team achieve their aims by carrying out tasked work and by supporting the NCA and ROCU investigating teams, either with advice or by mapping infrastructure through data received and highlighting new attributes for further investigation or data requests. Their work often requires them to preserve evidential data and activity logs to support or progress investigations.
The team also serve as the UK's 24/7 Network point of contact. This 24/7 Network (also referred to as the G7 or G8 network) is centred on transnational mutual co-operation with international law enforcement colleagues, allowing them to request member foreign agencies to preserve data and accounts. The team are responsible for all foreign data preservation requests for UK Law Enforcement and deal with all foreign requests to the UK.
Duties and Responsibilities
Team working - You will be working closely with other NCA departments, national and international law enforcement agencies to identify threats from criminality and work in a challenging environment to pursue offenders
Problem Solving - Ability to breakdown complex problems into component parts and determine appropriate actions
Interpersonal Skills - The ability to communicate, interact and build effective working relationships with others. Ensuring you are approachable and able to communicate effectively
Case management - Role may require case management, and to create, maintain and update departmental records
Information Management - Ensure the quality, secure handling and dissemination of data/information, maintaining confidentiality, sensitivity and a duty of care in line with Agency policy
Specialist advice - Provide advice on legislation, policy, technical and tactical options to assist in the planning and implementation of investigations
Data analysis - Conduct systematic research and analysis of open and closed sources to assist the decision making of law enforcement agencies
Case management - Take responsibility for maintaining a case load, providing support to cyber crime investigations
Person specification
Skills, Knowledge and Experience
Report Writing - Report writing and drafting
Case management - Manage case material in line with NCA policies and procedures in line with the code of ethics
Analytics - Uses analytical skills, varied sources of information and different methodologies to support decision-making
Microsoft Office - Proficient in the use of Microsoft Office applications
Legislation (UK and International law) - A good level of knowledge and use of relevant legislation (UK and International law) affecting agency activity. Specifically the Computer misuse Act (CMA)
Information Management - A good understanding of information management & the handling of sensitive / confidential data
Cyber awareness - Understanding of the impact of new technologies. Hold appropriate Cyber skills to enable the collection and processing of available data to produce investigative opportunities
Internet Infrastructure - Knowledge of network/security applications and network analysis. Good knowledge or experience of investigating network or computer related incidents
Qualifications
Formal Intelligence analysis training for example:
NIAT / GIAT / DIAM / NAP / NCA Analyst Foundation 1 / Intelligence Analyst (level 4) Apprenticeship / Forensic Analytics Intelligence Analysis course
AND
IPP Intelligence Analyst certification or Equivalent experience gained from performing Intelligence Analyst functions either previously or currently.
Any applications from candidates not meeting this eligibility criteria will not progress.
*Candidates that are successful but do not hold IPP Intelligence Analyst certification, must work towards and achieve IPP Intelligence Analyst certification upon commencement of the role.*
Behaviours
We'll assess you against these behaviours during the selection process:
* Communicating and Influencing
* Working Together
Technical skills
We'll assess you against these technical skills during the selection process:
* A strong understanding of internet protocols and domains.
* Experience of analysing complex datasets.
Benefits
Alongside your salary of £40,670, National Crime Agency contributes £11,782 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
New entrants to the NCA receive 26 days annual leave, rising to 31 on completion of 5 years continuous service, plus 8 bank holidays.
If qualifying criteria is met new joiners from UK Police Forces or the UK Intelligence Community (UKIC) will have service with those employers taken into account for continuous service purposes for annual leave entitlement only, this will be up to a maximum of 31 days leave (including 1 privilege day).
Other benefits include:
* Flexible working, including flexi-time, compressed hours and job sharing (in line with business requirements)
* Family friendly policies, notably above the statutory minimum
* Learning and Development opportunities
* Interest free loans and advances, including season tickets, childcare and rental deposits
* Housing schemes - Key Worker status
* Discounts and Savings with a wide variety of services including Cycle to Work, Smart Tech schemes, dental insurance, gym discounts and savings on everyday spending, available through the Reward Gateway, Edenred and Blue Light Card schemes.
* Staff support groups/networks
* Sports and social activities, including membership to the Civil Service Sports Council (CSSC)
Further information is available on the NCA Website.
Things you need to know
Artificial intelligence
Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.
Selection process details
This vacancy is using Success Profiles, and will assess your Behaviours, Experience and Technical skills.
How we will assess you
Your application will be assessed against the following:
Technical - this will be assessed by 500 word examples on:
* A strong understanding of internet protocols and domains.
* Experience of analysing complex datasets.
Experience - this will be assessed by 500 word examples on:
* Equivalent experience gained from performing Intelligence Analyst functions either previously or currently. - Only for candidates applying without IPP
* Experience of working on a project and delivering against objectives.
A panel will assess how well your application demonstrates the requirements outlined above.
Longlist
In the event of a high number of applications, we may operate a longlist. Applicants will need to meet the minimum pass mark for the lead criteria.
* A strong understanding of internet protocols and domains.
Candidates who do not meet the minimum pass mark for the lead criteria will not progress to having their other criteria assessed. Applications must meet the minimum criteria to be progressed to the assessment stage.
You will receive an acknowledgement once your application is submitted.
We aim to have sift completed and scores released within 10 working days of the closing date of the advert. For high volume campaigns this timeframe may be extended.
Scores will be provided but further feedback will not be available at this stage.
For guidance on the application process, visit:
NCA Applying and Onboarding
Assessment 1
The format of this assessment will be Interview which will be tested on the criteria listed in the Success Profiles at Assessment section.
Success Profiles at Assessment
Behaviours
* Communicating and Influencing
* Working Together
Technical
* A strong understanding of internet protocols and domains.
* Experience of analysing complex datasets.
Experience
* Experience of working on a project and delivering against objectives.
Assessment Outcome
Outcomes will be communicated via the NCA recruitment portal.
If successful but no role is immediately available, you may be placed on a reserve list for 12 months.
Reserve lists can be used to fill similar role types across the Agency where the assessment criteria is considered a match by the recruitment team and the business area.
In the event of a tie at the assessment stage, available roles will be offered in merit order using the following order:
* Lead criteria (behaviours/technical/experience)
* If still tied, desirable criteria will be assessed (if advertised)
* If still tied, application sift scores will be used
Feedback is provided only to those who attend an assessment.
You will be subject to vetting and pre-employment checks before appointment.
Once the vacancy closes, the advert will no longer be accessible. Please save a copy for your records.
We encourage all candidates to visit the NCA Careers Page for more information.
Full advert details for this vacancy can found on the advert on the NCA Recruitment Portal. Please follow the link to apply at advertisers' site.
Feedback will only be provided if you attend an interview or assessment.
Security
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check .
See our vetting charter .
People working with government assets must complete baseline personnel security standard (opens in new window) checks.
Nationality requirements
This job is broadly open to the following groups:
* UK nationals
* nationals of the Republic of Ireland
* nationals of Commonwealth countries who have the right to work in the UK
* nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)
* nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
* individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
* Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Further information on nationality requirements
Working for the Civil Service
The Civil Service Code sets out the standards of behaviour expected of civil servants.
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles .
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.
Diversity and Inclusion
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy .
Apply and further information
This vacancy is part of the Great Place to Work for Veterans initiative.
Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.
Contact point for applicants
Job contact :
* Name : The Recruitment Team
* Email :
Recruitment team
* Email :
Further information
If you believe your application has not been treated fairly, email: (quoting the vacancy reference).
If unresolved, you may escalate your complaint to the Civil Service Commission.