Cyber Operations

Cyber Operations purpose is to support safe care and build public trust by building NHS England’s cyber resilience and enabling the wider health system to be cyber resilient, supporting Transformation Directorate’s purpose of delivering the best care and outcomes for the NHS.

The Cyber Operations Sub-directorate

The Cyber Operations Sub-directorate Consists Of Four Operational Areas

• Cyber Security Operations Unit (CSOU & SIO)
• Cyber Delivery Unit (CDU)
• Cyber Improvement Programme
• Chief Information Security Office Function (CISO)

Role Description

This role is for a Cyber Security Analyst in the Infrastructure and Networks teams within the Protective Monitoring area of the national CSOC. This is a Tier 2 role working with the Infrastructure and Networks team to help develop and improve existing analytical rules plus supporting Tier 1 junior analysts with triage and incident handling.

Responsibilities:

• Act as a Tier 2 Infrastructures and Networks analyst for the Security Operations team.
• Deputise for Senior Analysts in their absence.
• Act as an escalation point for Tier 1 Junior Analysts for incidents and investigations.
• Have previous experience of working in a SOC environment.
• Offer mentorship and guidance to Tier 1 Junior Analysts to support others and their own growth and development.
• Keep up to date with the latest security and technology developments, including researching and evaluating emerging cyber security threats and ways to manage them.
• Use advanced analytic tools including SIEMs and XDR platforms to determine emerging threat patterns and vulnerabilities.
• Apply experience and knowledge to assist with investigations of triggered security alerts.
• Assist with the refinement of Use Cases and identification of areas for improvement of overall security posture.
• Provide technical support to NHS organisations in investigating Infrastructure and Networks incidents.