Senior Response Manager - Senior SOAR & Detection-as-Code (DaC) Analyst - Home Office Cyber Security Operations Centre

Manchester Digital; Manchester; Hybride; GBP 45 000 - 55 000; Plein temps

Avantages offerts par ce poste

Civil Service Pension

25 days leave

8 public holidays + 1 privilege day

Hybrid work

Résumé du poste

Home Office Digital designs, builds and develops services for government security needs. This Senior SOAR & DaC Analyst role focuses on automation, detection and response, crafting playbooks and integrations using SOAR platforms.

You will work with SOC teams to reduce risk and improve incident handling while applying repeatable DaC methodologies. The role offers a full-time and flexible pattern, with some office/home-based arrangements.

Qualifications

• Experience in a Security Operations Centre environment.
• Designing and maintaining security automation workflows.
• Experience with detection content and alerting.
• Ability to communicate investigations clearly and persuade stakeholders.
• Ability to lead a technical team in demanding environments.

Responsabilités

• Carry out security monitoring, detection and response activities to standards.
• Identify, analyse and investigate indicators across networks, systems and apps.
• Triage security events and alerts; support investigations and improvements.
• Support incident response activities including red teaming and threat hunting.
• Develop monitoring use cases and detection content; improve alert effectiveness.
• Define and enhance processes, tooling and security controls to identify threats.
• Drive service and process improvements using best practices and problem-solving.

Connaissances

Security operations

SOAR platforms

Detection-as-Code

Incident response

Team management

Outils

SOAR platforms

Description du poste

Job Summary

Home Office Digital designs, builds and develops services for the rest of the department and for government. Every year our systems support up to 3 million visa applications, checks on 100 million border crossings, up to 8 million passport applications and deliver 140 million police checks on people, vehicles and property.

Watch this short video to hear from members of Home Office Digital talking about the projects they work on and their experience of working here: Working for Home Office Digital.

Job Description

We are seeking a Senior Response Manager to join the Cyber Security Operations Centre (CSOC) as a Senior SOAR & Detection-as-Code (DaC) Analyst. This role focuses on improving cyber detection, response and automation capabilities through security automation, response playbooks and Detection-as-Code practices. You will design, develop, test, maintain and improve security automation workflows, response playbooks and integrations using SOAR platforms or comparable automation technologies, while applying structured and repeatable DaC methodologies.

You will work with SOC teams and other business areas to improve incident handling, implement complex solutions for emerging threats, contribute to relevant standards and process improvements, and reduce operational effort and future risk.

As a Senior Response Manager your main responsibilities will be to:

• Carry out security monitoring, detection and response activities in line with agreed standards, providing advice on mitigation, escalation and risk reduction.
• Identify, analyse and investigate indicators of malicious activity across networks, systems and applications, supporting effective threat detection and incident response.
• Triage security events and alerts, supporting investigations and recommending improvements to monitoring controls, detection coverage and overall security posture.
• Support incident response activities, including red teaming and threat hunting exercises, communicating investigation outcomes and contributing to lessons learned and post-incident reviews.
• Develop, review and continuously improve monitoring use cases, detection content and alert effectiveness across a range of security technologies.
• Define and enhance processes, tooling and security controls to identify emerging threats, strengthen detection capabilities and implement effective mitigation strategies.
• Drive service and process improvements by applying industry best practice, sound judgement and problem-solving skills to support efficient security operations and investigations.

Working Pattern

This role is available on a full-time basis with the option of compressed hours working. This role is also suitable for part-time working hours, with a minimum requirement to work 4 days / 30 hours per week due to business requirements.

Person specification

Essential Skills

• Conducting investigations and working in a ‘Security Operations Centre’ environment, supporting security operations and incident response activities.
• Designing, developing, testing maintaining and improving security automation workflows, response playbooks and integrations using SOAR platforms or comparable automation technologies, while applying DaC methodologies.
• Communicating in a verbal and written manner, and a good understanding of the use of different channels and formats for different audiences.
• Building strong partnerships with peers across an organisation and navigating the complex landscape of technologies, 3rd party suppliers, and other teams.
• Managing a team in a technical environment.

SFIA capability framework

Skills for the Information Age (SFIA) version 8 is the technical framework that sets the standard capability and development of alllevels in the Home Office. This is a link to the capability framework: All skills A - Z English (sfia-online.org).

We use set SFIA technical skills to form our interview questions and we will assess you against these technical skills during the selection process.

The essential skills listed above are reflective of the Home Office Government Digital and Data Profession Career Framework (based on the industry standard SFIA framework). Use the SFIA Levels of responsibility to understand what would be expected for each technical skills listed below.

Delivery and Operation

• Service Management
  • Incident management (USUP) – Level 3
  • Problem management (PBMG) – Level 3
• Security Services
  • Security operations (SCAD) – Level 3

People and skills

• People management
  • Performance management (PEMT) – Level 3 (Generic Level 3 descriptor)
  • Resourcing (RESC) – Level 3

Relationships and engagement

• Stakeholder management
  • Stakeholder relationship management (RLMT) – Level 3 (Generic Level 3 descriptor)

Technical skills

• Incident management (USUP) – Level 3
• Problem management (PBMG) – Level 3
• Security operations (SCAD) – Level 3
• Performance management (PEMT) – Level 3
• Resourcing (RESC) – Level 3
• Stakeholder relationship management (RLMT) – Level 3

Benefits

Alongside your salary of £49,850, Home Office contributes £14,441 towards you being a member of the Civil Service Defined Benefit Pension scheme.

• A Civil Service Pension with employer contribution rates of at least 28.97%.
• In-year reward scheme for one-off or sustained exceptional personal or team achievements.
• 25 days annual leave on appointment, rising with service.
• 8 days of public holidays, plus 1 additional privilege day.
• Where business needs allow, some roles may be suitable for a combination of office and home-based working. This is a non-contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office.

Why work for us...

Find out more information at: Benefits - Home Office Careers, but some of the primary ones are:

• A Civil Service Pension with employer contribution rates of at least 28.97%.
• In-year reward scheme for one-off or sustained exceptional personal or team achievements.
• 25 days annual leave on appointment, rising with service.
• 8 days of public holidays, plus 1 additional privilege day.
• Where business needs allow, some roles may be suitable for a combination of office and home-based working. This is a non-contractual arrangement where all employees will be expected to spend a minimum of 60% of their working time in an office.

Sign-up on our websiteto receive emails with information about careers at the Home Office.