Overview
Cyber Security Analyst role at HM Revenue & Customs. This position is part of the HMRC Security Identity team and involves supporting HMRC’s fight against identity fraud through data-driven investigations and proactive threat detection.
Base pay range
Direct message the job poster from HM Revenue & Customs
Location
Bristol Regional Centre - 3 Glass Wharf; Manchester Regional Centre - Three New Bailey
Job details
Apply before 11:55 pm on Friday 3rd October 2025
A Civil Service Pension with an employer contribution of 28.97%
About the job
Job summary
Discover a career in your hands at HMRC. We are looking for a proactive and analytical professional to support HMRC’s fight against identity fraud. You’ll help lead data-driven investigations into suspicious activity related to identity verification and authentication services, while mentoring others, influencing strategy, and building team capability in a dynamic and evolving environment. You will be part of the HMRC Security Identity team, working with partners to identify identity fraud activity and proactively search for threats.
Visit our YouTube channel to watch the full series and learn more about working at HMRC.
Other Security Information
The successful candidate will be required to apply for Developed Vetting (DV) clearance level once in post but must already hold or be willing to obtain Security Check (SC) clearance level before starting the role.
Transitional Sites Information
If your location preference is for the following site, note that these are not long-term sites for HMRC and you may be required to move to a new building in the future, subject to policy.
For more information on where you might be working, review this information on our locations (opens in a new window).
* Telford Plaza, Telford - moving to Parkside Court, Telford
Technical skills
Technical skills will be assessed during the selection process. There is no preparation required; further information will be provided to applicants who reach the interview stage.
Key responsibilities
* Manipulate and analyse large data sets and investigate suspicious activity.
* Learn, develop, and apply methods using data analytics techniques such as data mining, data matching, clustering analysis and outlier detection.
* Use basic scripting languages to develop visualisations and automate effective searches to build a growing analytical suite of capabilities.
* Demonstrate strong communication skills and ability to work across business and technical domains.
* Apply knowledge of security and fraud risks to digital services.
* Support and deputise for the senior analysts, producing clear, insightful reports and presentations for senior stakeholders.
* Be adaptable in a dynamic environment with shifting focus and emerging issues.
* Grow experience across different areas of identity work.
* Utilise experience of scripting (e.g., SPL, Python, SQL, KQL) to proactively search and discover anomalies.
* Identify process improvement areas and contribute to wider team aims.
* Experience using SIEM tools for investigations.
* Understand Identity, Verification and Authentication principles.
Qualifications
* Degree in data science, data analytics, cyber or other cyber qualifications (e.g., SANS).
* Experience of working in a cyber operations environment, specifically investigations.
* Active use of at least one of: Python, SQL, KQL, SPL.
* Please note: This is a Reserved Post for UK Nationals only.
Seniority level
* Associate
Employment type
* Full-time
Job function
* Analyst
* Industries: Government Administration and Government Relations Services
EEO statements and related information are provided as part of the role listing.
#J-18808-Ljbffr