Job description
Cyber Defence Centre - Detect Analyst- 1 year secondment / Fixed term contract
- (009515)The Bank of England is the UK's central bank. Our mission is to deliver monetary and financial stability for the British people.
Within Cyber Security you will be working with people who are passionate about protecting the security and stability of Thank Bank of England's Technology estate. Whether it is identifying threats, uncovering vulnerabilities or ensuring robust and resilient infrastructure, you’ll be working at the cutting edge in a security-centric organisation.
The function focuses on ensuring security by design, and ensuring we have safe, stable and resilient systems. Collaborating closely with colleagues across Technology and throughout the organisation you will help the division safeguard the critical systems and information which the organisation is responsible for.
The Cyber Defence Centre (CDC) is responsible for detecting and responding to cyber-attacks against the Bank of England. The CDC is made up of three key functions: Threat, Detect and Respond. The Cyber Defence Analyst will report to the Cyber Detect Lead and will assist in defence from cyber-attacks by ensuring the CDC has cutting-edge detections informed by threat intelligence and data analysis techniques.
Primary responsibilities will be to develop and improve the CDC's cyber attack detection capability as well as performing security monitoring and incident response activities. The analyst will also assist with the analysis and consumption of threat intelligence by the CDC to support detect and respond capabilities. Specifically, the analyst will distil intelligence to enhance their knowledge of attack methodology and behaviours, i.e. tactics, techniques and procedures (TTPs), and combine this with data analysis techniques to create bespoke attack detections for the CDC’s security monitoring capability.
The analyst will have the opportunity to develop competencies and skills across each of the CDC’s core remits: Threat, Detect and Respond. This will ensure the role has varied day-to-day responsibilities, as well as exposure to a range of cutting-edge technology in cyber security, data analytics and intelligence. The analyst will support the CDC Detect Lead in reviewing existing detections and ensuring these remain relevant against emerging threats and technology.
- Understanding of cyber security fundamentals, including knowledge of common cyber threats and attacker tactics, techniques and procedures (TTPs)
- Experience analysing detailed technical information and apply it to the subject area
- Ability and willingness to learn new technical cyber security concepts and approaches
- Experience of working with or in a cyber security operations environment
- Experience with cyber security monitoring processes
- Knowledge of, or practical experience using Splunk or similar SIEM tooling
- Knowledge of incident response principles
- Understanding of cyber threat intelligence concepts
- Understanding of common operating system and networking principles
- Knowledge of data or statistical analysis techniques
- Knowledge of cloud services and/or infrastructure
- Experience using MITRE ATT&CK or similar cyber frameworks
Our Approach to Inclusion
The Bank values diversity, equity and inclusion. We play a key role in maintaining monetary and financial stability, and to do that effectively, we believe we need a workforce that reflects the society we serve.
At the Bank of England we want all colleagues to feel valued and respected, so we're working hard to build an inclusive culture which supports people from all backgrounds and communities to be at their best at work. We celebrate all forms of diversity, including (but not limited to) age, disability, ethnicity, gender, gender identity, race, religion, sexual orientation and socioeconomic status. We believe that it’s by drawing on different perspectives and experiences that we’ll continue to make the best decisions for the public.
We welcome applications from individuals who work flexibly, including job shares and part time working patterns. We've also partnered with external organisations to support us in making adjustments for candidates and employees in the recruitment process where they're needed.
For most roles where work can be carried out at home, we aim for colleagues to spend half of their time in the office, with a minimum of 40% per month. Subject to that minimum requirement, individuals and managers should work together to find what works best for them, their team and stakeholders.
Finally, we're proud to be a member of the Disability Confident scheme. You can find more information on what this means here. If you wish to apply under this scheme, you should check the box in the ‘Candidate Personal Information’ under the ‘Disability Confident Scheme’ section of the application.
Salary and Benefits Information
This specific role offers a base salary of circa £41,350 - £48,960 per annum (depending on skills and experience) on a full-time basis. We encourage flexible working, part time working and job share arrangements. Part time salary and benefits will be on a pro-rated basis as appropriate.
In addition, we also offer a comprehensive benefits package as detailed below:
- A non-contributory, career average pension giving you a guaranteed retirement benefit of 1/95th of your annual salary for every year worked. There is the option to increase your pension (to 1/50th) or decrease (to 1/120th) in exchange for salary through our flexible benefits programme each year.
- A discretionary performance award based on a current award pool.
- A 7% benefits allowance with the option to take as salary or purchase a wide range of flexible benefits. (Note that from April 2023 and for the Benefits year 2023/24, this will increase to 8%)
- 26 days’ annual leave with option to buy up to 12 additional days through flexible benefits.
- Private medical insurance and income protection.
National Security Vetting Process
Employment in this role will be subject to the National Security Vetting clearance process (and typically can take between 6 to 12 weeks post offer) and the passing of additional Bank security checks in accordance with the Bank policy. Further information regarding the vetting and security clearance requirements for the role will be provided to the successful applicant, and information about how the Bank processes personal data for these purposes, is set out in the Bank’s Privacy Notice at Privacy and the Bank of England | Bank of England.
The Application Process
Important: Please ensure that you complete the ‘work history’ section and answer ALL the application questions fully. All candidate applications are anonymised to ensure that our hiring managers will not be able to see your personal information, including your CV, when reviewing your application details at the screening stage. It’s therefore really important that you fill out the work history and application form questions, as your answers will form a critical part of the initial selection process.
The closing date for applications is 08/09/2023