CS Interview Coach

Information Security and Monitoring Specialist

Department for Work and Pensions

Department
Department for Work and Pensions
Location
London
Openings
1 post
Grade
HEO
Salary
£44,355 to £45,065
Closing
15 days left
Profession
Operational Delivery
Contract
Permanent
Security clearance
DV
Working pattern
Flexible working, Full-time, Job share, Part-time
Apply on Civil Service Jobs

Job summary

We are seeking a highly skilled and security-focused professional to join our Operational Capability (OC) Team as an Information Security and Monitoring Specialist.

In this role, you will support the detection and investigation of security incidents across the organisation, using advanced monitoring tools and SIEM- Security Information and Event Management systems. You will analyse alerts, identify threats, and work with internal and external stakeholders to ensure timely and effective responses to threats.

This post requires the successful candidate to be a British national and they will be subject to Developed Vetting (DV) clearance.

What they’re looking for

  • Key Responsibilities
  • Monitor and analyse system alerts and logs to detect suspicious or malicious activity.
  • Conduct proactive threat hunting and incident investigations.
  • Escalate and present potential incidents with comprehensive supporting evidence.
  • Collaborate with internal teams and external partners to coordinate responses to threats.
  • Take remedial actions following inappropriate internal behaviour or security breaches.
  • Oversee and support Rosa Local Security Officers across UK hubs.
  • Manage Rosa assets and act as Partner Security Officer, ensuring compliance and assurance.
  • Coordinate secure handling of sensitive materials across CRC and authorised partners.
  • Contribute to the development and continuous improvement of monitoring systems, processes, and playbooks.
  • Produce workforce analysis for CRC Senior Leadership.
  • Support workforce planning and strategic capability development alongside the Head of Operational Capability.
  • Provide operational support and resilience to the team as needed.
  • What We’re Looking For
  • We’re seeking a highly motivated and experienced professional who can demonstrate:
  • Essential Criteria
  • Experience in cyber security monitoring and incident response.
  • Strong analytical skills with the ability to interpret complex data and logs.
  • Experience in using SIEM tools and other security technologies.
  • Excellent communication and stakeholder engagement skills.
  • Ability to monitor, investigate and manage sensitive information with discretion.
  • Desirable Criteria
  • Experience working in a government or regulated environment.
  • Familiarity with confidential material handling and secure asset management.
  • Experience of managing multiple priorities and responding flexibly and effectively to competing demands, balancing priorities accordingly.

Behaviours you’ll be assessed on

This advert says the panel will score you against these behaviours at HEO level. Each one links to worked examples.

Job description

You will work as a member of the OC Team in the Department's Cyber Resilience Centre (CRC), at the forefront of detecting and investigating potential security threats across CRC. Your primary focus will be on identifying indicators of compromise and malicious activity, conducting in-depth analysis of system alerts and logs, and ensuring swift, effective responses to emerging risks.

You will work closely with stakeholders across CRC and the wider security community to coordinate responses, escalate incidents when necessary, and support investigations with clear, actionable intelligence. Your experience in Security Information and Event Management (SIEM) systems will be critical in driving informed decision-making.

You will also oversee local security officers, contribute to the development of monitoring capabilities, and support strategic workforce planning activities. This role requires a background in information security, incident response, and protective security practices, with the ability to operate discreetly and decisively in high-assurance environments.

Nationality requirements

Open to UK nationals only.

Selection process

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.

As part of the application process you will be asked to complete a CV and personal statement. Further details on this are listed on the application form.

Application

Candidates will be required to provide a CV covering work history, achievements in role and qualifications. Additionally, a Personal Statement is required, demonstrating how you meet the Essential Criteria (listed in responsibilities section) for this role (maximum 500 words).

The sift panel will use the information relating to your employment history (your CV) and your personal statement of suitability to assess your experience, skills and knowledge and Behaviours.

When giving details of your employment history, you should include details of the work that you have been involved in, outcomes, and your role therein.

All applications will be assessed and sifted based on the essential criteria in the advert, using the information you provide in your completed application form.

Interview

Successful candidates will be invited to a face to face interview where candidates will be assessed on Behaviours.

We'll assess you against these behaviours at the interview stage:

  • Making Effective Decisions
  • Communicating and Influencing
  • Changing and Improving

We will also ask a Technical question during the interview.

Application sifting will take place week commencing 19th October 2026 and interviews will take place from 2nd November 2026.

Further Information​

At the Department for Work and Pensions (DWP) we value diversity and inclusion and actively encourage and welcome applications from everyone, including those that are underrepresented in our workforce.

Find out more about working for DWP on the DWP Careers Hub.

Reserve List

A reserve list may be held for a period of 6 months from which further appointments can be made.

If you are placed on a reserve list but we cannot immediately offer you a post, please note:

  • If you are later offered the role you applied for, in a location you have expressed a preference for, and you decline the offer or are unable to take up the post within a reasonable timeframe you will be withdrawn from the campaign and removed from the reserve list, other than in exceptional circumstances (e.g. a contractual Part Time Working Pattern cannot be accommodated in the initial role offered or in cases of serious ill health).
  • If DWP makes an offer of an alternative role or location to that which you originally applied for, and you decline that offer, you will be able to remain on the reserve list.

Disability Confident Scheme

If high application volumes are received, the benchmark for candidates to proceed to the next stage may be raised. In line with our commitment to the Disability Confident Scheme (DCS), we aim to advance all candidates applying under the DCS who meet the minimum standard. However, we may only progress those candidates who best meet the required standards.

Reasonable Adjustments

We consider visible and non-visible disabilities, neurodiversity or learning differences, chronic medical conditions, or mental ill health. Examples include dyslexia, epilepsy, autism, chronic fatigue, or schizophrenia.

If you need a change to be made so that you can make your application, you should contact the Government Recruitment Service via DWPRecruitment.grs@cabinetoffice.gov.uk as soon as possible before the closing date to discuss your needs.

Complete the “Reasonable Adjustments” section in the “Additional requirements” page of your application form to tell us what changes or help you might need further on in the recruitment process. For instance, you may need wheelchair access at interview, or if you’re deaf, a Language Service Professional.

If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'Contact point for applicants' section.

Integrity, plagiarism and Civil Service Principles

The Civil Service values honesty and integrity and expects all candidates to abide by these principles.

Please ensure that all examples provided in your application are taken directly from your own experience and that you describe the examples in your own words.

Examples of plagiarism can include:

  • Presenting the work, ideas and experience of others as your own
  • Copying content or answers from an online or published source that is not your own

Disclosure and Barring Service and Internal Fraud Database Checks

To process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service on your behalf. However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing Pre-EmploymentChecks.grs@cabinetoffice.gov.uk stating the job reference number in the subject heading.

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant’s details held on the IFD will be refused employment. A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.

If successful and transferring from another Government Department, a criminal record check will be carried out.

Important

New entrants are expected to join on the minimum of the pay band.

Before applying for this vacancy, current employees of DWP should check whether a successful application would result in changes to their terms & conditions of employment, e.g. mobility, pay, allowances. If you are a current employee and are successful you must be able to be released from your current post within four weeks.

Those on protected TUPE/ COSoP terms and conditions applying on promotion or voluntary permanent level move will adopt DWP’s Terms and Conditions and this may have a different impact on pay and allowances. Please review this prior to acceptance of a role.

Civil Servants that would transfer into DWP from other government organisations, following successful application, will assume DWP's terms & conditions of employment current on the day they are posted, unless DWP has stated otherwise in writing. Accepting a post will be taken to mean acceptance of revised terms & conditions.

Civil Servants applying on promotion will usually be appointed to the salary minimum or within 10% of existing salary.

Any move to DWP from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may, however, be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility at the Childcare Choices Website.

For further information on National Security Vetting please visit the Demystifying Vetting website.

Feedback

Feedback will only be provided if you attend an interview or assessment.

Practise before you apply

Civil Service panels score every answer against the Success Profiles behaviours at HEO level. Practise STAR answers and get them marked against the same framework.

Start practising free

3 free questions · No card needed

Similar vacancies

Interview articles for HEO roles

All articles

Browse more like this