Cyber Security Manager (Home Based)

Cyber Threat Intelligence Lead – Leeds About the job Discover a career in your hands at HMRC. Whether you\\\\\\\’re seeking purpose, growth, or a workplace that gives you a true sense of belonging, hear from some of our employees as they share their story about what it\\\\\\\’s really like to work at HMRC. Visit our YouTube channel to watch the full series and come and discover your potential. HMRC is the UK\\\\\\\’s tax, payments, and customs authority. Our vital purpose is to collect the money that pays for the UK\\\\\\\’s public services and help citizens with targeted financial support. As such, the need to protect and preserve the ability of HMRC to function and serve the public against threats posed by possible cyber-attacks is critical. Cyber Threat Operations (CTO) is part of the Cyber Security Delivery (CSD) function in HMRC Security. CTO covers a diverse range of responsibilities across the span of anti-phishing, brand abuse management, cyber threat intelligence, data science, and threat hunting. We are seeking an G7 Cyber Threat Intelligence Lead, who will report to the G6 Head of CTO. The successful candidate will manage three SO Cyber Threat Intelligence Managers and one SO Threat Hunting Manager. As the Cyber Threat Intelligence Lead, on a day-to-day basis you will be overseeing and directing the work of Cyber Threat Intelligence and Threat Hunting which will involve: • Overseeing the delivery of high quality cyber threat analysis at the tactical, operational, and strategic levels, managing all aspects of this including stakeholder requirements, technical collection and investigation methods, and employment of analytical best practice; • Developing and maintaining threat understanding through subject matter expertise and productive partnerships and networks across wider government departments. Driving the production of intelligence to inform our understanding of the current and future threat landscape for HMRC, its people, and platforms; • Supporting efforts to drive towards increased automation and adoption of AI-enabled capabilities where appropriate; • Proven ability to manage and lead teams operating in cyber intelligence and/or threat hunting; • Familiarity with open source (clear, deep, and dark web) investigations and associated tooling such as Cyjax, Flashpoint, Silobreaker etc • Familiarity with cyber threat intelligence models and frameworks like the Diamond Model, MITRE ATT&CK etc • Relevant cyber or intelligence qualifications such as CCTIM, GCTI etc Managing a Quality Service Alongside your salary of £56,344, HM Revenue and Customs contributes £16,322 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides. HMRC operates both Flexible and Hybrid Working policies, allowing you to balance your work and personal commitments. We welcome applications from those who need to work a more flexible arrangement and will agree to requests where possible, considering our operational and customer service needs. We offer a generous leave allowance, starting at 25 days and increasing by a day for every year of qualifying service up to a maximum of 30 days. Pension – We make contributions to our colleagues\\\\\\\’ Alpha pension equal to at least 28.Family friendly policies. To find out more about HMRC benefits and find out what it\\\\\\\’s really like to work for HMRC hear from our insiders or visit Thinking of joining the Civil Service A name-blind CV detailing your work experience to-date, as well as any relevant qualifications. We acknowledge that AI can assist you in your application. Managing a Quality Service Interviews will take place via video link. We understand mistakes sometimes happen but if you contact us later than two working days(Monday-Friday) before the vacancy closes, we will not be able to reopen your application for you. A reserve list may be held for up to 6 months from which further appointments may be made for the same or similar roles – if this applies to you, we\\\\\\\’ll let you know via your Civil Service Jobs account. Contact the UBS Recruitment team via as soon as possible before the closing date to discuss your needs. Complete the \\\\\\\”Assistance required\\\\\\\” section in the \\\\\\\”Additional requirements\\\\\\\” page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you\\\\\\\’re deaf, a Language Service Professional. Important information for existing HMRC contractual homeworkers This role may be suitable for existing HMRC employees who are contractual homeworkers. Occasional attendance to the office will be required where there is a business need. Please consider the advertised office locations for this role when applying and only select locations from the \\\\\\\’location preferences\\\\\\\’ section that you can travel to. As part of our legitimate interests, we are testing the use of new technologies such as automation and/or Artificial Intelligence in the assessment for CV, personal statement and behaviour statement. Please note that for this specific vacancy, this testing may run in parallel with our standard assessment process and will not influence or determine the outcome of your application in any way. You can read the Civil Service Jobs and HMRC Privacy Notices for more information about our lawful basis for processing your personal data and HMRC\\\\\\\’s use of AI. If you don\\\\\\\’t want your data to be used as part of the trial, please send your Application ID and the Vacancy Reference to Customer facing roles in HMRC require the ability to converse at ease with members of the public and provide advice in accurate spoken English and/or Welsh where required. Recording of interviews is prohibited unless explicit agreement is sought in line with the UK General Data Protection Regulations. Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government. Please note that, if you are applying for roles on a part-time basis, the salary agreed will be pro-rata, reflective of the working hours agreed within your contract. Successful candidates must undergo a criminal record check. People working with government assets must complete baseline personnel security standard (opens in new window) checks. Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy. Diversity and Inclusion The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).