Cyber Defence Lead

**Location**:London / Bristol / Manchester / Glasgow - 1-2 days per week in the office

**Note**:SC Clearance is required for this role

We are the Cabinet Office’s cyber security team, and our mission is to secure the department against cyber threats, and enable it to deliver for the people of the United Kingdom. We protect our nationwide internal IT infrastructure and high-profile citizen-facing digital services such as GOV.UK, by governing, delivering and assuring cyber security capabilities for the department.

**What you’ll do**
The Cyber Defence team delivers cyber threat intelligence, threat detection, incident response and vulnerability management capabilities for the Cabinet Office and is responsible for defending both internal IT infrastructure and citizen-facing services. You will be reporting to the Head of Cyber Security and will be responsible for leading and improving the Cyber Defence team. You’ll also feed into our wider cyber security strategy and roadmap, and take a leadership role in the cyber security team.

**As Cyber Defence Lead**, **your main responsibilities would be**:

- To lead the Cabinet Office’s cyber defence function, by providing strategic direction and
coordinating day-to-day delivery of threat intelligence, threat detection, incident response, vulnerability management and ethical hacking capabilities
- To identify and deliver opportunities for continual improvement of the cyber defence function
- To lead the technical response to major cyber security incidents and critical vulnerabilities impacting the Cabinet Office
- To brief senior stakeholders on the cyber threat to the Cabinet Office
- To work closely alongside other cyber security functions, supporting the continual improvement of wider capabilities
- To work with Government Security Group, the National Technical Authorities (e.g., NCSC) and
law enforcement to ensure knowledge sharing and collaboration
- To take a leadership role in the cyber security team, the wider Cabinet Office, and the government
security and risk management communities
- To act as an escalation point for, and provide coaching and mentoring to, senior security analysts Cyber incidents can and do arise on a 24/7 basis. The team operates an out-of-hours on call rota, which you will be expected to join

**You’ll have;**
- A breadth of experience across cyber threat intelligence, detection and response
- Experience investigating, managing and coordinating the response to, major cyber
incidents
- An in-depth understanding of the tools, techniques and procedures used by threat actors
- Experience operating effectively at a strategic level
- Experience taking a leadership role in a cyber security function
- An understanding of how to influence senior management and communicate with both technical and non-technical audiences
- An active interest in coaching and mentoring others

**Desirable**:
? Have experience leading security operations or cyber defence capabilities
?Have an understanding of Agile environments, continual delivery techniques and DevOps
cultures
? Have experience with cloud environments such as AWS

**Should you require reasonable adjustments at any point during the recruitment process or if there is a more accessible way for us to communicate, please do let me know.**

**If you consider yourself to have a disability or if you are a veteran, and you meet the essential criteria for the role, PSR provides a ‘Guaranteed Interview’ scheme whereby you will have the opportunity to discuss this role and your suitability with a member of our PSR Sourcing team.**

***- Please be aware that this role can only be worked within the UK and not Overseas._