The Integrated Corporate Services (ICS) is a new shared corporate service, launched in July 2023. It will provide corporate services (HR, Finance, Digital, Commercial, Security and Estates) across the Department for Energy Security & Net Zero (DESNZ) and the Department for Science, Innovation & Technology (DSIT).  

Our team of just over 300 professionals will be leading the way in how these functions will be delivered in the future. Our ambition is to be the leading provider of integrated corporate services for government and set the standard for quality, efficiency, and innovation in our field. 

Our Inclusive Environment 

We are building an inclusive culture to make the Department a brilliant place to work where our people feel valued, have a voice and can be their authentic selves. We value difference and diversity, not only because we believe it is the right thing to do, but because it will help us be more innovative and make better decisions.  

We offer first-class flexible working benefits, excellent employee well-being support and a great pension. We are fortunate to have a range of excellent staff networks and are proud to be a Disability Confident Leader employer. We will support talented people from all backgrounds to build a career and thrive. 

We actively welcome applications from anyone who shares our commitment to inclusion. We will fully support candidates with a disability or long-term condition who require adjustments in our recruitment process. 

Find Out More 

We regularly run events where you can find out more about the department and tips for the application process. You can sign up for upcoming events here: https://www.tickettailor.com/events/departmentforenergysecurityandnetzero?  

You can also follow our LinkedIn Careers Page: https://www.linkedin.com/showcase/desnz-careers/  

Key responsibilities

● Incident Response and Management - lead and participate in complex incident investigations, utilising advanced techniques to identify the root cause, scope, and impact of security incidents.

● Analyse and interpret security data from multiple sources, including logs, network traffic, and endpoint data, to identify emerging threats and attack patterns.

● Threat Hunting and Analysis - proactively hunt for advanced threats and vulnerabilities within the environment using various threat intelligence sources and security tools.

● Azure Sentinel Expertise: You will configure, manage, and fine-tune Microsoft Azure Sentinel. Additionally, youll design and implement custom log queries and alerts within Azure Sentinel to enhance threat detection and incident response capabilities.

● Collaboration and Communication - communicate effectively with external vendors, technical and non-technical stakeholders, translating complex technical concepts into understandable terms.

● Participate in the development and enhancement of SOC processes, workflows, and procedures to improve incident response efficiency and effectiveness.

Skills and experience

Essential criteria

● Leadership experience within a SOC Team and a track record of coaching/mentoring and developing junior members of staff.

● Effective verbal and written communication skills, including the ability to lead on meetings with external vendors, technical and non-technical stakeholders, translating complex technical concepts into understandable terms.

● Experience using a Security Incident Event Management (SIEM) and security tooling in a Security Operations Centre (SOC) demonstrating improvements in processes, workflows, and incident response leading to greater efficiency and effectiveness. 

● Experience working in an enterprise technology setting, with a focus on Cyber Security.

● Demonstrable experience using a query language to work with large sets of data, preferably Kusto Query Language

Desirable Criteria

● Experience working with Cloud platforms (AWS, Azure)

● Relevant security-based certifications

● Documentation of incident, investigation, findings adhering to incident response procedures.

It is unusual that all candidates will meet all the desirable criteria. If your skills and experience look slightly different from what we have identified and you think you can bring value to the role and the team, we strongly encourage you to apply. We'd love to hear from you!   

The link to the technical/professional competency framework that candidates will be assessed against, is: https://ddat-capability-framework.service.gov.uk/skills#analysis-and-synthesis-data-analyst

We'll assess you against these behaviours during the selection process:

• Leadership
• Developing Self and Others

We'll assess you against these technical skills during the selection process:

• Analysis and Synthesis (data analyst)

The Department for Energy Security and Net Zero offers a competitive mix of benefits including:

• A culture of flexible working, such as job sharing, homeworking and compressed hours.
• Automatic enrolment into the Civil Service Pension Scheme, with an average employer contribution of 27%.
• A minimum of 25 days of paid annual leave, increasing by 1 day per year up to a maximum of 30.
• An extensive range of learning & professional development opportunities, which all staff are actively encouraged to pursue.
• Access to a range of retail, travel and lifestyle employee discounts.
• A hybrid office/home based working model where staff will spend a norm of 40-60% of their time in the office (minimum of 40%) over a month with flex dependent on balancing business and individual need.

Office attendance

The Department operates a discretionary hybrid working policy, which provides for a combination of working hours from your place of work and from your home in the UK. The current expectation for staff is to attend the office or non-home-based location for 40-60% of the time over the accounting period.

Job contact :

• Name : Craig Thurlby
• Email : [email protected]

Recruitment team

• Email : [email protected]