Senior Response Manager - Home Office Cyber Security Threat Intelligence in Salford

Location: Salford

Salary: 49,850 - 52,850 per year

Employment: Full time

Category: IT

Posted: Valid to: Employer: Home Office

Home Office Digital designs, builds and develops services for the rest of the department and for government. Every year our systems support up to 3 million visa applications, checks on 100 million border crossings, up to 8 million passport applications and deliver 140 million police checks on people, vehicles and property.

The Senior Response Manager with Cyber Threat Intelligence is responsible for supporting threat intelligence activities, including the monitoring, analysis and investigation of cyber security threats, events and incidents. Working as part of a specialist Threat Intelligence team, you will help develop and enhance capabilities to address emerging threats, implement complex intelligence-led solutions, and deliver strategic initiatives focused on threat analysis, risk reduction and continuous improvement across the organisation. You will also support the development and management of intelligence-driven responses to security incidents, collaborating with stakeholders across the business to ensure effective incident handling and strengthen defences against future threats.

You’ll be joining an expert team of cyber professionals, committed to reducing the exposure to cyber-attack of new and existing digital systems. You’ll be aided in your role by a diverse and supportive organisational culture, and a commitment to further your continuous development.

Where business needs allow, some roles may be suitable for a combination of office and home-based working. Where this is the case, employees will be expected to spend a minimum of 60% of their working time in the office.

Threat intelligence professionals support the identification, analysis and assessment of threats whilst helping to improve organisational readiness through exercises, threat hunting hypothesis generation and red team activity. The Threat Intelligence function also advises product and service owners on emerging threats, risks and potential mitigations.

As a Senior Response Manager in Cyber Threat Intelligence, your main responsibilities will be to:

• Carry out threat intelligence activities in line with defined Standard Operating Procedures.
• Provide advice on mitigation and escalate to a team leader where appropriate.
• Help conduct incident response exercises including red teaming and threat-hunting.
• Communicate the results of investigations and risk mitigations to improve the response to new threats and attack vectors.
• Conduct post-incident reviews.
• Identify, analyse and classify threats, adversary tactics, techniques and procedures (TTPs), security vulnerabilities in networks, systems and applications and mitigate or eliminate their impact.
• Assist in the prioritisation of those vulnerabilities through a risk-based approach.
• Triaging intelligence findings, recommending mitigating measures, and supporting vulnerability management activities by providing advice on ways to improve control mechanisms and reduce risk.
• Define intelligence requirements, methodologies and tools needed to identify and assess threats.
• Communicate common mitigation strategies and threat trends.
• Continuously seek to identify potential service and process improvements leveraging your knowledge of industry best practices, good judgment and problem-solving skills to execute security operations and investigations.

Due to the business requirements of this role, it is only available on a full-time basis. However, compressed hours are available.

Essential Skills

You’ll have a demonstrable passion for Threat Intelligence, with the following skills, knowledge or experience in:

• Conducting Threat Intelligence analysis, collection and investigations within a Security Operations Centre environment, with an understanding of vulnerability research, malware analysis and digital forensic techniques.
• Communicating complex threat intelligence and threat assessments to technical and non-technical audiences using analytical frameworks and probabilistic language.
• Using common threat analysis models and frameworks such as STIX, MITRE ATT&CK, Cyber Kill Chain and Diamond Model.
• Building strong partnerships across technical teams, suppliers and stakeholders.
• Leading or managing a team in a technical environment and supporting the development of intelligence requirements and capabilities.
• Utilising Security Information and Event Management (SIEM) and Threat Intelligence Platforms (TIPs).
• Applying cyber security risk and control frameworks such as NIST, ISO27001, Cyber Essentials and NCSC guidance.

Benefits

Alongside your salary of 49,850, Home Office contributes 14,441 towards you being a member of the Civil Service Defined Benefit Pension scheme. Some of the primary benefits include:

• A Civil Service Pension with employer contribution rates of at least 28.97%.
• In-year reward scheme for one-off or sustained exceptional personal or team achievements.
• 25 days annual leave on appointment, rising with service.
• 8 days of public holidays, plus 1 additional privilege day.

This role requires Security Check (SC) clearance. To be eligible, candidates must have lived in the UK continuously for the last 5 years. Failure to meet this residency requirement will result in your security clearance application being rejected.