Infrastructure Investigations Officer
Job summary
The National Cyber Crime Unit (NCCU) delivers both the threat leadership response and the National specialist operational response. This approach of retaining operational capability alongside the threat leadership element is a different approach to the way we tackle other mainstream SOC threats. It recognises the need to keep pace with technological change with in house specialist expertise working in a multi-disciplinary environment. Working on a national and international level we respond in fast time to rapidly changing threats. This is done using innovative approaches and ground breaking techniques to target cyber criminals causing the greatest threat to the UK. The NCCU are looking to implement a step change in the UK’s overall capability to tackle Cyber Crime, supporting our partners both in industry and Law enforcement to better protect themselves against Cyber Crime.
Our remit is wide with a variety of teams working across the 4 Ps ( Prepare, Pursue, Prevent, Protect).NCCU leads and co-ordinates Team Cyber UK’s response to cyber- crime, which assures a local, regional and national joint response. We work collaboratively with partners to understand the growing use of cyber as an enabler of serious crime types, developing long-term, sustainable capability to tackle the cyber threat, to enhance the law enforcement response. This enables the National Cyber Crime Unit to determine the most effective way of tackling the growing threat.
Job description
The Infrastructure Investigation team work to identify and map the infrastructure, architecture, operational capabilities and network used by cyber criminals, as well as extracting information which could attribute parts of the infrastructure to a real world person or produce more investigative leads.
The team achieve their aims by carrying out tasked work and by supporting the NCA and ROCU investigating teams, either with advice or by mapping infrastructure through data received and highlighting new attributes for further investigation or data requests. Their work often requires them to preserve evidential data and activity logs to support or progress investigations.
The team also serve as the UK's 24/7 Network point of contact. This 24/7 Network (also referred to as the G7 or G8 network) is centred on transnational mutual co-operation with international law enforcement colleagues, allowing them to request member foreign agencies to preserve data and accounts. The team are responsible for all foreign data preservation requests for UK Law Enforcement and deal with all foreign requests to the UK.
Duties and Responsibilities
Team working - You will be working closely with other NCA departments, national and international law enforcement agencies to identify threats from criminality and work in a challenging environment to pursue offenders
Problem Solving - Ability to breakdown complex problems into component parts and determine appropriate actions
Interpersonal Skills - The ability to communicate, interact and build effective working relationships with others. Ensuring you are approachable and able to communicate effectively
Case management - Role may require case management, and to create, maintain and update departmental records
Information Management - Ensure the quality, secure handling and dissemination of data/information, maintaining confidentiality, sensitivity and a duty of care in line with Agency policy
Specialist advice - Provide advice on legislation, policy, technical and tactical options to assist in the planning and implementation of investigations
Data analysis - Conduct systematic research and analysis of open and closed sources to assist the decision making of law enforcement agencies
Case management - Take responsibility for maintaining a case load, providing support to cyber crime investigations
Person specification
Skills, Knowledge and Experience
Report Writing - Report writing and drafting
Case management - Manage case material in line with NCA policies and procedures in line with the code of ethics
Analytics - Uses analytical skills, varied sources of information and different methodologies to support decision-making
Microsoft Office - Proficient in the use of Microsoft Office applications
Legislation (UK and International law) - A good level of knowledge and use of relevant legislation (UK and International law) affecting agency activity. Specifically the Computer misuse Act (CMA)
Information Management - A good understanding of information management & the handling of sensitive / confidential data
Cyber awareness - Understanding of the impact of new technologies. Hold appropriate Cyber skills to enable the collection and processing of available data to produce investigative opportunities
Internet Infrastructure - Knowledge of network/security applications and network analysis. Good knowledge or experience of investigating network or computer related incidents
Qualifications
Formal Intelligence analysis training for example:NIAT / GIAT / DIAM / NAP / NCA Analyst Foundation 1 / Intelligence Analyst (level 4) Apprenticeship / Forensic Analytics Intelligence Analysis course
AND
IPP Intelligence Analyst certification or Equivalent experience gained from performing Intelligence Analyst functions either previously or currently.
Any applications from candidates not meeting this eligibility criteria will not progress.
*Candidates that are successful but do not hold IPP Intelligence Analyst certification, must work towards and achieve IPP Intelligence Analyst certification upon commencement of the role.*
Behaviours
We'll assess you against these behaviours during the selection process:
- Communicating and Influencing
- Working Together
Technical skills
We'll assess you against these technical skills during the selection process:
- A strong understanding of internet protocols and domains.
- Experience of analysing complex datasets.
Benefits
Alongside your salary of £40,670, National Crime Agency contributes £11,782 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.New entrants to the NCA receive 26 days annual leave, rising to 31 on completion of 5 years continuous service, plus 8 bank holidays.
If qualifying criteria is met new joiners from UK Police Forces or the UK Intelligence Community (UKIC) will have service with those employers taken into account for continuous service purposes for annual leave entitlement only, this will be up to a maximum of 31 days leave (including 1 privilege day).
Other benefits include:
- Flexible working, including flexi-time, compressed hours and job sharing (in line with business requirements)
- Family friendly policies, notably above the statutory minimum
- Learning and Development opportunities
- Interest free loans and advances, including season tickets, childcare and rental deposits
- Housing schemes - Key Worker status
- Discounts and Savings with a wide variety of services including Cycle to Work, Smart Tech schemes, dental insurance, gym discounts and savings on everyday spending, available through the Reward Gateway , Edenred and Blue Light Card schemes.
- Staff support groups/networks
- Sports and social activities, including membership to the Civil Service Sports Council (CSSC)
Further information is available on the NCA Website.
Things you need to know
Artificial intelligence
Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.Selection process details
This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.How we will assess you
Your application will be assessed against the following:Technical - this will be assessed by 500 word examples on:- A strong understanding of internet protocols and domains.
- Experience of analysing complex datasets.
- Equivalent experience gained from performing Intelligence Analyst functions either previously or currently. - Only for candidates applying without IPP
- Experience of working on a project and delivering against objectives.
Longlist
In the event of a high number of applications, we may operate a longlist. Applicants will need to meet the minimum pass mark for the lead criteria.
- A strong understanding of internet protocols and domains.
Candidates who do not meet the minimum pass mark for the lead criteria will not progress to having their other criteria assessed. Applications must meet the minimum criteria to be progressed to the assessment stage.
You will receive an acknowledgement once your application is submitted.
We aim to have sift completed and scores released within 10 working days of the closing date of the advert. For high volume campaigns this timeframe may be extended.
Scores will be provided but further feedback will not be available at this stage.
For guidance on the application process, visit:NCA Applying and OnboardingAssessment 1
The format of this assessment will be Interview which will be tested on the criteria listed in the Success Profiles at Assessment section.
Success Profiles at AssessmentBehaviours- Communicating and Influencing
- Working Together
- A strong understanding of internet protocols and domains.
- Experience of analysing complex datasets.
- Experience of working on a project and delivering against objectives.
If successful but no role is immediately available, you may be placed on a reserve list for 12 months.
Reserve lists can be used to fill similar role types across the Agency where the assessment criteria is considered a match by the recruitment team and the business area.
In the event of a tie at the assessment stage, available roles will be offered in merit order using the following order:
- Lead criteria (behaviours/technical/experience)
- If still tied, desirable criteria will be assessed (if advertised)
- If still tied, application sift scores will be used
Feedback will only be provided if you attend an interview or assessment.
Security
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).See our vetting charter (opens in a new window).People working with government assets must complete baseline personnel security standard (opens in new window) checks.
Nationality requirements
This job is broadly open to the following groups:
- UK nationals
- nationals of the Republic of Ireland
- nationals of Commonwealth countries who have the right to work in the UK
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
- individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
- Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Working for the Civil Service
The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.
Diversity and Inclusion
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see theCivil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).Apply and further information
This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.Contact point for applicants
Job contact :
- Name : The Recruitment Team
- Email : central.recruitment@nca.gov.uk
Recruitment team
- Email : central.recruitment@nca.gov.uk
Further information
If you believe your application has not been treated fairly, email: Central.Recruitment@nca.gov.uk (quoting the vacancy reference).If unresolved, you may escalate your complaint to the Civil Service Commission.
Salary range
- £40,670 - £46,721 per year