Security Operations Centre Specialist in Swansea

Are you an experienced cyber security professional who would like the opportunity to play a key role within our Security Operations Centre (SOC)? Do you have experience of analysing and addressing threats? If so, we'd love to hear from you! The Security Operations Centre (SOC) is central to protecting DVLA's critical digital services, ensuring the security and resilience of systems relied upon by millions of citizens every day. The SOC team provide various services such as technical protective monitoring, threat intelligence and hunting, incident response and forensics, working closely with internal stakeholders and specialist suppliers to identify, investigate and respond to cyber threats. Operating within a rapidly evolving threat landscape, the team plays a key role in safeguarding one of the UK's largest public sector digital estates. Joining our department comes with many benefits, including:

• Employer pension contribution of 28.97% of your salary. Read more about Civil Service Pensions here
• 25 days annual leave, increasing by 1 day each year of service (up to a maximum of 30 days annual leave), plus 8 bank holidays and a privilege day for the King's birthday
• Flexible working options where we encourage a great work-life balance.

Read more in the Benefits section below! Find out more about what it's like working at DVLA - Driver and Vehicle Licensing Agency - Civil Service Careers

This role undertakes technical protective monitoring, monitoring of security events and performance of security tools, as well as investigating and handling (or assisting in handling) security events. This role is responsible for undertaking all aspects of SOC activity, including hands‑on monitoring of SIEM (security incident and event management) tools and other sources of alerts and of threat intelligence, maintaining the relationship with the vendors and suppliers of SOC products, including where relevant contract management responsibilities. You will work as part of our Cyber Security Services team monitoring, identifying and responding to security relevant events. We deliver significant and high‑profile on‑line services to the public, with cyber security being viewed as an essential activity in which the organisation continues to invest.

Responsibilities

• Responsible for monitoring operational IT Security, producing regular management reports, undertaking trend analysis, tracking resource, evaluating the fitness for purpose and effectiveness of security processes.
• Manages incident and event management processes complying with SLAs.
• Interprets and contributes to the development of SOC playbooks, alarms and policies. Ongoing assurance of fitness for purpose of SOC playbooks, alarms and policies.
• Provides expert advice and recommendations regarding risk assessments and business impact analysis for defined information systems and managing the maintenance processes including quality review.

Great line management is important to us as an organisation, and we will equip and support line managers to develop the skills they need. We aim to empower line managers to create teams where people can flourish and deliver excellent outcomes for the public.