Cybercrime Analyst Higher Officer

Job Description

SummaryAt HMRC we are committed to creating a great place to work for all our colleagues; an inclusive and respectful environment that reflects the diversity of the society we serve.We want to maximise the potential of everyone who chooses to work forus and we offer a range of flexible working patterns and support to make a fulfilling career at HMRC accessible to you.Diverse perspectives and experiences are critical to our success and we welcome applications from all people from all backgrounds with theexperience and skills needed to perform this role.HMRC is the UKs tax, payments and customs authority and we have a vital purpose: we collect the money that pays for the UKs public services and help families and individuals with targeted financial support.DigitalSupport and Innovation (DSI) sits within HMRCs wider Fraud Investigation Service (FIS) responsible for the departments civil and criminal investigation work. FIS ensures that HMRC has an effective approach to taking on the most serious tax evasion and fraud.Workingacross Law Enforcement and government, DSI provides investigative tools and covert techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems to enable investigators to respond to seriousand complex tax evasion and crime.Job descriptionThe Cybercrime Team tackles the ever-changing cybercrime threats to our online services, creating a fluid work environment where the working days are rarely the same. You will be able to continually learn asthe crime techniques evolve, be constantly challenged, and enjoy the thrill of the digital pursuit of sophisticated adversaries.ResponsibilitiesThe Cybercrime team gather intelligence and investigate online fraud and its enablers, which provides evidence-backedrisk insight and advice to shape the security of HMRC services.The successful candidate will work collaboratively as part of the team, assisting in the technical analysis of seized devices and investigating the impact of cyber-crime on HMRC systems and services.Weare looking for a cybercrime and digital forensics analyst to join our growing team. You must possess real enthusiasm for the topic and drive, constantly looking for new methods to enhance our visibility, awareness and capabilities.You will be building onskills by assisting senior colleagues with forensic analysis of digital media and services to support investigations and our understanding of criminal threats. Your analysis will provide operational learning from attacks to shape the design our digital servicesat national scale. Assist senior colleagues with the cybercrime aspects of HMRC criminal investigations by collating analysing and explaining a variety of internal and external data sources to support criminal justice outcomes. Provide expert witness statementsand attending court in support of Criminal investigations as required. Assist in the forensic examination of relevant devices, including malware and intrusion analysis. This may include both on site examinations and laboratory-based acquisitions as well. Helptest new forensic methodologies as required, carry out experiments to validate forensics findings and results. Keeping abreast of emerging technologies and methodologies that impact the work of the cybercrime team. Assist colleagues acting as a technical consultantassisting operational, policy and software development teams with advice on defensive and detective methods to counter cyber-crime threats. Assist in the analysis and manipulation of large complex data sets, devising new methods as required. Maintaining knowledgeon cybercrime and cyber security through personal development and research.Essential Criteria Demonstrable experience working in the Cyber Security/incident response/Digital forensics field. Possess an ability to examine digital devices in a methodical andprecise way and have an aptitude for problem solving . Experience with commercial and open source digital forensic tools for example: X-Ways Cellebrite Volatility Able to adapt to a fast moving, changeable environment. This role requires National SecurityVetting at Developed Vetting (DV) level clearance and you must hold DV vetting or be willing to apply for DV vetting.Desirable criteria Scripting and programming, e.g. Python. Malware analysis tools, Disassemblers & Debuggers. Industry recognised certificationsand qualifications within Information Security/Cyber Security/Digital forensics & attack methodologies (particularly to web services).Examples include: Digital Forensics vendor specific qualifications. SANS GIAC certifications. CompTIA Certifications. OSCP.Membership of professional bodies, like the CIISec, would be welcome. Knowledge of relevant UK law enforcement legislation would be helpful (CPIA, PACE, IPA, RIPA, CMA).BehavioursWell assess you against these behaviours during the selection process: MakingEffective Decisions Working Together Delivering at PaceTechnical skillsWell assess you against these technical skills during the selection process: Digital Forensics Knowledge / Cyber Security KnowledgeBenefits Learning and development tailored to your roleAn environment with flexible working options A culture encouraging inclusion and diversity A Civil Service pensionPlus a flexibility payment. This post attracts a Level 2 Flexibility Payment (FP) that is paid monthly with salary. This FP allows HMRC flexibilityto change your work pattern, at short notice, to meet business needs. You will be expected to work longer hours from time to time, at weekends and outside your normal working hours/days (including bank holidays).In applying for a position and accepting theFP you agree that you can and will meet those flexibility requirements.Team members that are moving offices as a result of the Locations Programme will be entitled to a Moves Adjustment Payment for three years where they incur additional costs. This is calculatedbased on the difference between the costs of travelling to and from the new and old office, over a weekly period. You will get more detail on this as part of targeted locations move communications.Apply before 11:55 pm on Tuesday 18th January 2022