Information Security & Monitoring Specialist

Government Recruitment Service; City Of London; On-site; GBP 40,000 - 55,000; Full time

Job summary

A UK government department is seeking a skilled Information Security and Monitoring Specialist to join their Operational Capability Team. This role involves detecting and investigating security incidents, utilizing advanced monitoring tools to analyze alerts and identify threats, and collaborating with stakeholders to ensure effective responses. The successful candidate will need to be a British national subject to Developed Vetting clearance and should have a strong background in information security and incident response.

Qualifications

• Experience working in teams focused on security operations.
• Knowledge of protective security practices.
• Ability to operate discreetly in high-assurance environments.

Responsibilities

• Detect and investigate security incidents across the organization.
• Analyze alerts and identify threats.
• Coordinate responses with internal and external stakeholders.
• Contribute to monitoring capabilities and strategic planning.

Skills

Experience with SIEM systems

Incident response skills

Ability to conduct threat analysis

Strong communication skills

Job description

We are seeking a highly skilled and security-focused professional to join our Operational Capability (OC) Team as an Information Security and Monitoring Specialist.

In this role, you will support the detection and investigation of security incidents across the organisation, using advanced monitoring tools and SIEM- Security Information and Event Management systems. You will analyse alerts, identify threats, and work with internal and external stakeholders to ensure timely and effective responses to threats.

This post requires the successful candidate to be a British national and they will be subject to Developed Vetting (DV) clearance.

You will work as a member of the OC Team in the Department's Cyber Resilience Centre (CRC), at the forefront of detecting and investigating potential security threats across CRC. Your primary focus will be on identifying indicators of compromise and malicious activity, conducting in-depth analysis of system alerts and logs, and ensuring swift, effective responses to emerging risks.

You will work closely with stakeholders across CRC and the wider security community to coordinate responses, escalate incidents when necessary, and support investigations with clear, actionable intelligence. Your experience in Security Information and Event Management (SIEM) systems will be critical in driving informed decision-making.

You will also oversee local security officers, contribute to the development of monitoring capabilities, and support strategic workforce planning activities. This role requires a background in information security, incident response, and protective security practices, with the ability to operate discreetly and decisively in high-assurance environments.