NMC Cyber Security Engineer

NMC Cyber Security Engineer - Police Digital Service

Salary starting at £50,000 per annum.

The new National Management Centre (NMC) in Wigan is part of Police Digital Services and provides visibility and control of information risks for policing. It supports the 24x7x365 nature of police operations, providing a threat detection and response capability for digital services before, during and after cyber-attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both the national and force level.

About Police Digital Service

To protect people from harm in our rapidly changing world, police services must not only keep up with technology and business changes but develop capabilities and ways of working that will enable them to adapt to and deal with the complexity of modern criminality.

Our Values

• We value People
• We do the right thing
• We are innovative
• We are one Team
• We are proud and passionate

Key Responsibilities

• The NMC Cyber Security Engineer will be responsible for creating, configuring, and maintaining the technology platforms and tooling that support security operations within the National Management Centre. As well as ensuring that systems are configured and available to meet NMC objectives, you will also provide support to police forces for onboarding and maintaining system log sources. Working as part of a dedicated and flexible team, you will play a key role in helping to protect front-line policing from cyber-attacks.
• Configuration and maintenance of the NMC central Microsoft Azure, Lighthouse, and Sentinel platform.
• Development, maintenance, and deployment of detection rules and other SIEM content.
• Creation of custom solutions using both low-code and traditional development approaches.
• Providing support to forces for the configuration of Sentinel and log sources.
• Testing and implementing new Sentinel connectors.
• Working with wider NMC teams, contributing to Continual Service Improvement and innovations.
• Creation and ongoing maintenance of technical design documentation.
• Working with the PDS design team and wider NMC operational teams to create, test, and implement new tools and technologies.
• Leveraging Microsoft support for technical assistance and information regarding roadmap features.

What you need to succeed in the role

• Experience of supporting and developing SIEM platforms in the context of a Security Operations Centre.
• Experience of log source configuration and parsing, as part of a SIEM implementation, including experience of data normalisation using RegEx.
• Experience and relevant certification in cloud services design and administration.
• Practical experience in the creation, testing, implementation, and support of custom tooling to support Security Operations.
• Experience working with APIs.
• Practical experience in software development and scripting, preferably PowerShell and Python.
• Initiative and the ability to produce quality work without close supervision.
• Good written and verbal communication skills, particularly in relation to technical subjects.
• Attention to detail and genuine passion for maintaining high quality software configuration.
• Broad cyber security awareness and practical experience.

Diversity, equity and inclusion

We are committed to equal opportunity for all and will not discriminate on any grounds. We encourage applications from people from the widest possible span of experience. We particularly welcome applications from Black, Asian and Minority Ethnic (BAME) candidates and people with disabilities.

Working arrangements

At the NMC, you will benefit from hybrid working, getting the advantages of both face-to-face team engagement and home working. NMC employees have the opportunity to work in our new modern office environment for in-person collaboration, however you will also get the opportunity to work from home 2 days a week.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Analyst

Industries

Information Services

• Experience of supporting and developing SIEM platforms in the context of a Security Operations Centre.
• Experience of log source configuration and parsing, as part of a SIEM implementation, including experience of data normalisation using RegEx.
• Experience and relevant certification in cloud services design and administration.
• Practical experience in the creation, testing, implementation, and support of custom tooling to support Security Operations.
• Experience working with APIs.
• Practical experience in software development and scripting, preferably PowerShell and Python.
• Initiative and the ability to produce quality work without close supervision.
• Good written and verbal communication skills, particularly in relation to technical subjects.
• Attention to detail and genuine passion for maintaining high quality software configuration.
• Broad cyber security awareness and practical experience.