Senior Security Incident Analyst
| Posting date: | 16 July 2025 |
|---|---|
| Salary: | £42,614 to £45,081 per year |
| Hours: | Full time |
| Closing date: | 29 July 2025 |
| Location: | Blackpool |
| Company: | Government Recruitment Service |
| Job type: | Permanent |
| Job reference: | 405443/2 |
Summary
The Security Incident Response Team ensure that DWP can respond effectively to security incidents impacting people, assets and information and are proactive in the protection and recovery from security incidents. As a part of this busy team, you will work collaboratively with internal and external stakeholders to:
- Protect DWP people, assets, and information by responding effectively and efficiently to security incidents
- Prioritise people, actively promoting the health, safety, and wellbeing of SIRT colleagues and others
- Increase the resilience of DWP and improving our ability to respond to security incidents effectively through practise
- Learn from experience, using patterns of information and intelligence to protect DWP from the reoccurrence of security incidents
- Support DWP to effectively protect DWP people, priorities, citizens, and wider society during crisis events
- Continually review and improve the response platform, procedures and products
As a Senior Security Incident Analyst, you will:
- Lead the response to security incidents in accordance with DWP and His Majesty’s Government policies and standards
- Coordinate multiple internal and external stakeholders to effectively triage, contain, eradicate, recover and learn from security incidents
- Chair response forums and invoke Security Incident Response Plans and Playbooks to ensure effective and timely incident recovery
- Communicate situational awareness and brief senior leaders on security incidents and response activity
- Provide effective stakeholder management to ensure remediation activities are focused on responding to security incidents in an effective and timely manner
- Update systems and record Management Information accurately – including KPI’s to inform DWP Executive Team and Security & Data Protection Senior Leadership Team requirements
- Manage the response to security alerts and notices from external agencies, including suppliers, Arms-length Bodies, the National Cyber Security Centre and Cabinet Office
- Provide security related advice and guidance on the threat environment and security incidents
- Contribute to the continual improvement of security and resilience in DWP
- Develop and maintain security incident response policies, procedures, and playbooks
- Support the development of technical incident response capability
- Represent SIRT at security events and governance meetings and support the delivery of security incident response awareness and education
- Participate in regular drilling / exercising and learning events to build capability and embed incident response procedures
- Provide ‘incident management’ stakeholder input to the development of new capabilities within CRC and across DWP
SIRT provide a 24 hour 7 day a week, 365 day a year service. The successful candidate will be expected to provide cover out of hours 1 week in every 6. This attracts an on call allowance.
Proud member of the Disability Confident employer scheme
Disability Confident
About Disability Confident
A Disability Confident employer will generally offer an interview to any applicant that declares they have a disability and meets the minimum criteria for the job as defined by the employer. It is important to note that in certain recruitment situations such as high-volume, seasonal and high-peak times, the employer may wish to limit the overall numbers of interviews offered to both disabled people and non-disabled people. For more details please go to Disability Confident.