Job overview

As a Security Officer, you will rotate around the CSOC into 4 main areas: Protective Monitoring, Incident Management, Threat Intelligence and Threat Hunting. As part of Protective Monitoring, you will join the analyst pool team responsible for triaging cyber alerts ranging from identity & access alerts, networking alerts and XDR. Within Threat Hunting, you will conduct daily hunting investigations using prewritten queries across a range of multi-tenant hunting platforms, including but not limited to M365D XDR, Microsoft Sentinel and Splunk. The Threat Intelligence team perform the collection, aggregation, analysis and contextualisation of healthcare and security information to produce actionable cyber threat intelligence. The Incident Management team provide end-to-end management of cyber security incidents as well as making security control recommendation and are also involved with fielding several cyber security related queries from the public and NHS staff.

The post of Security Officer has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 10% per annum.

Please be aware that RRP is non contractual and subject to review.   

Please be aware that should you be successful in this position, you will be hired to the job title of Security Officer and this job title is advertised to attract the right skills needed for the role.    

Main duties of the job

The main duties you would be involved with are as follows:

• Work within the Cyber Security Operations Centre (CSOC) with exposure to the Threat Intelligence, Threat Hunting, Protective Monitoring or Incident Management teams. 
• Work as part of the Protective Monitoring team to investigate detections of potential Cyber Security incidents and to triage and raise incidents to organisations and NHS staff
• Work as part of the Theat Hunting team to investigate multi-tenant threat hunting platforms – M365 XDR, Microsoft Sentinel and Splunk and review automated threat hunt queries
• Work as part of the Threat Intelligence team to collect, aggregate and contextualise healthcare security information to produce cyber security intelligence
• Work as part of the Incident Management team to provide end-to-end management of incidents including the initial triage/analysis as well as to make effective security control recommendations
• Provide an initial analysis on security data to identify potential threats and formulate recommendations and actions to consider in order to remediate and respond.
• Support senior colleagues in assessing, planning, and advising stakeholders on security measures that will help protect NHS England from security breaches and attacks on its computer networks and systems. 
• Keep up to date with the latest security and technology developments, including researching and evaluating emerging cyber security threats and ways to manage them.

Working for our organisation

The NHS England board have set out the top-level purpose for the new organisation to lead the NHS in England to deliver high-quality services for all, which will inform the detailed design work and we will achieve this purpose by:

• Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities.
• Making the NHS a great place to work, where our people can make a difference and achieve their potential.
• Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care
• Optimising the use of digital technology, research, and innovation
• Delivering value for money.

If you would like to know more or require further information, please visit https://www.england.nhs.uk/.

Colleagues with a contractual office base are expected to spend, on average, at least 40% of their time working in-person.

Staff recruited from outside the NHS will usually be appointed at the bottom of the pay band.

If you are successful at interview, we will run an Inter Authority Transfer (IAT) in the Electronic Staff Record system (ESR). This transfer gathers valuable information from a previous or current NHS employer to support the onboarding process, including; statutory and mandatory competency status, Continuous Service Dates (CSD), and annual leave entitlement.  You will have the opportunity throughout the recruitment process to inform us if you do not consent.