Security Officer

The NHS is building a culture that is positive, compassionate and inclusive - and we all have our part to play.
As employers we are committed to protecting and promoting the physical and mental health and wellbeing of all our colleagues. This underpins our values as set out in the NHS Constitution and supports us to be an Employer of Choice, while helping our colleagues to deliver high quality services for our patients and communities.
As a flexible employer, we want to support you to work in a way that is best for the NHS, our patients and you. Talk to us about how we might be able to accommodate a flexible working arrangement whether that's a job share, part time, hybrid working or another flexible pattern. In addition, although the role advertised may have a 'home' office base indicated, we remain committed to supporting flexibility around workplace locations. If it works for the service, we will do our best to make it work for you., As a Security Officer, you will rotate around the CSOC into 4 main areas: Protective Monitoring, Incident Management, Threat Intelligence and Threat Hunting. As part of Protective Monitoring, you will join the analyst pool team responsible for triaging cyber alerts ranging from identity & access alerts, networking alerts and XDR. Within Threat Hunting, you will conduct daily hunting investigations using prewritten queries across a range of multi-tenant hunting platforms, including but not limited to M365D XDR, Microsoft Sentinel and Splunk. The Threat Intelligence team perform the collection, aggregation, analysis and contextualisation of healthcare and security information to produce actionable cyber threat intelligence. The Incident Management team provide end-to-end management of cyber security incidents as well as making security control recommendation and are also involved with fielding several cyber security related queries from the public and NHS staff.
The post of Security Officer has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 10% per annum.
Please be aware that RRP is none contractual and subject to review, The main duties you would be involved with are as follows:
+ Work within the Cyber Security Operations Centre (CSOC) with exposure to the Threat Intelligence, Threat Hunting, Protective Monitoring or Incident Management teams.
+ Work as part of the Protective Monitoring team to investigate detections of potential Cyber Security incidents and to triage and raise incidents to organisations and NHS staff
Work as part of the Theat Hunting team to investigate multi-tenant threat hunting platforms - M365 XDR, Microsoft Sentinel and Splunk and review automated threat hunt queries
+ Work as part of the Threat Intelligence team to collect, aggregate and contextualise healthcare security information to produce cyber security intelligence
+ Work as part of the Incident Management team to provide end-to-end management of incidents including the initial triage/analysis as well as to make effective security control recommendations
+ Provide an initial analysis on security data to identify potential threats and formulate recommendations and actions to consider in order to remediate and respond.
+ Support senior colleagues in assessing, planning, and advising stakeholders on security measures that will help protect NHS England from security breaches and attacks on its computer networks and systems.
+ Keep up to date with the latest security and technology developments, including researching and evaluating emerging cyber security threats and ways to manage them., Please ensure your supporting statement includes demonstratable evidence and specific examples on how you meet the criteria for each of the key skills specified. This will be used in both the shortlisting and interview processes
Important: Please be aware there are residency requirements you need to meet:
All NHS England Cyber Security personnel must hold security clearance SC level as a minimum. To meet National Security Vetting requirements, you must have resided in the UK for a minimum of 3 out of the past 5 years for SC clearance. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered.
Please make sure you meet these requirements before applying for this role. You don't need to have SC already, however, failure to achieve the requirements for SC after offer, will result in the job offer being withdrawn.
If you like what you have read and think you have the skills and experience, we need then don't delay, apply today! We get lots of applications for our roles and so we sometimes have to close our posts early. Don't miss out!
Our commitments to you
We are passionate about creating an inclusive workplace that promotes and values diversity. We know that different ideas, perspectives and backgrounds create a stronger and more creative work environment that delivers better patient outcomes. We strive to ensure our people feel trusted, valued and empowered. We're passionate about nurturing and developing people. When you join us, we want you to grow and excel, and we offer many opportunities for you to do that. We welcome your talent and enthusiasm irrespective of age, disability, neuro-divergence, sex, gender identity and gender expression, race or ethnicity, religion or belief, sexual orientation, or other personal circumstances. We have policies and procedures to ensure that all applicants are treated fairly and consistently at every stage of the recruitment process, including the consideration of reasonable adjustments for people who have a disability and/or who are neuro-divergent.
Applications from job seekers who require sponsorship to work in the UK under the Skilled Worker route are welcome and will be considered alongside all other applications. For further information visit the UK Visas and Immigration website.
Please note that we currently do not accept applications via recruitment agencies.
The NHS Business Services Authority is responsible for the processing of your application; a privacy notice is attached to advise you on how we will process your personal data.
If you have applied via NHS Jobs, your submitted application will be imported into our preferred third-party recruitment system. All subsequent information regarding your application will be generated from apps.trac.jobs. If you are appointed to a post, information will also be transferred into the NHS Electronic Staff Records system.

The NHS England board have set out the top-level purpose for the new organisation to lead the NHS in England to deliver high-quality services for all, which will inform the detailed design work and we will achieve this purpose by:
+ Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities.
+ Making the NHS a great place to work, where our people can make a difference and achieve their potential.
+ Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care
+ Optimising the use of digital technology, research, and innovation
+ Delivering value for money.
If you would like to know more or require further information, please visit https://www.england.nhs.uk/.
Colleagues with a contractual office base are expected to spend, on average, at least 40% of their time working in-person.
Staff recruited from outside the NHS will usually be appointed at the bottom of the pay band., NHS England