NMC Cyber Detect Analyst

• As a member of the NMC Protective Monitoring Team you will respond to immediate security threats on NMC Monitored networks that may impact our client network. The NMC Protective Monitoring team’s goal is to detect, analyse, investigate, and respond to cyber security alerts using a combination of cutting-edge technology and a strong set of processes. The NMC Cyber Detect Analysts will work closely with teams across the NMC, typically with the Incident Response Teams to ensure security issues are addressed quickly upon discovery.

NMC Cyber Detect Analyst duties involve but are not limited to:

• Initial Triage of alerts - evaluation & detection
• Confirmation of false positive
• Incident data gathering and feedback on any gaps and issues in respect to Platform Content or tuning opportunities
• Reflection of incident severity based on analysis
• Escalation of potential incidents to customer or Senior Cyber Detect Analyst/CIMT Team as appropriate
• Trend Analysis of force-by-force events for presentation into forces at regular intervals
• Continuous input into the value and optimisation of content
• Regular Performance conversations with line manager
• A proactive approach to personal development and coaching conversations to challenge and develop yourself and others.
• Monitoring and triage of alerts across NMC Technologies.
• Accountable for the initial assessment of alerts via analysis of all data at your disposal in the alert’s context. Following guidance documentation where applicable in a timely manner.
• Responsible for engaging relevant stakeholders, e.g. The customer, Senior Cyber Detect Analyst or CIMT (Cyber Incident Management Team) following completion of alert assessments.
• Responsible for ensuring initial engagement direct with national police forces where relevant
• Must be in tune with situational awareness across national police forces, E.g., Change, Problem, Incident, Network Architecture, Critical Asset lists.
• Comprehensive understanding of all NMC services and their interoperability

• Experience working in a fast-paced operational environment
• Experience working within a team
• Experience working in a customer facing environment
• Knowledge of various security methodologies and processes
• Knowledge of commonly deployed Cyber Security tools and products
• Knowledge of common Internet protocols and applications
• Knowledge and hands on experience of IP networks and their key components
• A genuine enthusiasm and drive to work within Cyber Security
• Motivated and ambitious to work on your own initiative without needing direction
• Strong attention to detail
• Ability to multi-task, prioritise, and manage time effectively
• Excellent interpersonal skills and professional demeanour
• Excellent verbal and written communication skills
• Proficient in Microsoft Office Applications
• Proficient in the use of SIEM (Security Incident and Event Management) technology, in terms of handling alerts, analysis of the data within the alert and rationale on whether escalation or closure is required.
• Ability to convey technical speak into plain English to contextualise the alert with recommendations if applicable
• Ability to engage with all elements of the NMC proactively and professionally
• Ability to acquire SC and NPPV3 level clearances

• Balance is important and we want you to take time off to recharge - we offer 28 days’ annual leave plus bank holidays, rising to 30 days after 5 years of service. Holiday Purchase also available
• We care about your well-being - we have an EAP that offers not just welfare benefits but also retail discounts
• Plan for the future - we offer an excellent pension scheme and life assurance cover
• Put your mind at rest regarding your health - offering remote GP, mental health and physiotherapy appointments via video consultation
• Family - Enhanced maternity and paternity pay along with a flexible return to work
• Community - one paid day off per year for volunteering

You can find out more here: Benefits - Police Digital Service (pds.police.uk)

Diversity, equity and inclusion

We are committed to equal opportunity for all and will not discriminate on any grounds. We encourage applications from people from the widest possible span of experience. We particularly welcome applications from Black, Asian and Minority Ethnic (BAME) candidates and people with disabilities.

Working Arrangements

At the NMC, you will benefit from hybrid working, getting the advantages of both face-to-face team engagement and home working. NMC employees have the opportunity to work in our new modern office environment for in-person collaboration, however you will also get the opportunity to work from home 2 days a week.

All applicants must be eligible for NPPV3 and SC clearances. Successful applicants will require NPPV3 clearance to have been approved before starting with PDS.

True