
Security Operations Centre (SOC) Analyst
- Public sector
- Reading
- 12/05/2025
- £33,590.00 - £40,170.00 /yearly
- Permanent
Location
Job Type
Salary
Date Posted:
Expiration date:
Job ID
Work Location
The Department for Environment, Food and Rural Affairs (Defra) is the UK government department responsible for safeguarding our natural environment, supporting our world-leading food and farming industry, and sustaining a thriving rural economy. Our broad remit means we play a major role in people's day-to-day life, from the food we eat, and the air we breathe, to the water we drink.
Government security is undergoing a step change, and now is an exciting time to get involved. The security profession has an increasingly important role to play in a more digital world - the vision is to create an energetic, forward-thinking and technically proficient profession for government that leads the way in balancing security risks with the delivery of cost-effective, high-quality services. If you share our vision, and you are ready to drive innovation and push boundaries, we want to hear from you. Join us, and together we will create a great place for living, and a green and healthy future for all.
Defra's specialist security function is expanding the ability for its staff to work more securely and conduct business overseas whilst protecting themselves and departmental information.
Find out more about DDTS:
Defra's Security Operations Centre (SOC) is accountable for protecting DEFRA against cyber threats. Our SOC analysts monitor the network and investigate any potential security incidents.
We are seeking an individual to help build our capability. Working as part of a small team you will be accountable for providing security monitoring and incident response. Using cyber security techniques, you will be ensuring that the DEFRA's security is maintained.
Our Analysts are accountable for the day-to-day handling of alerts in our Security Information and Event Management (SIEM), incidents assigned to the Security Operations Centre and investigating indicators of compromise provided by Threat Intelligence.
As a Security Operations Centre (SOC) Analyst you will use a wide range of tools and technical expertise, currently focusing primarily on user behaviour, cloud security & application security.
Defra is transforming its IT security processes via a security improvement plan and approach in line with our new multi-supplier IT operating model. As we develop and grow against this plan the range of services that are protectively monitored by Defra's SOC will increases.
The SOC team is based in Reading and London. The successful applicant will be expected to travel into one of either office on regular basis working a shift pattern during the day to ensure continuous monitoring of the organisation.
We welcome applicants with experience of working in a Security Operations Centre and other technological backgrounds or graduates in a relevant subject who may wish to move into this field of work, it should be noted that you must demonstrate transferable technical skills and a keen interest in cyber security to be considered for the role.
Please note this post requires Security Check (SC) clearance. To gain (SC) clearance all applicants are required to have been a UK resident for a minimum of 5 years. If this requirement is not met, the individual will not be able to progress their application further.
The Civil Service marks each element of the selection process on a merit basis. You can visit the gov.uk website for further information on the Civil Service rating scale.
Ensure you have tailored your CV and your Personal Statement to the 'responsibilities' and 'skills and experience' section of the job advert by providing examples on how you are suitable for the role. You may find the STAR method helpful when writing your personal statement.
For further information on STAR, you can check out our hints and tips document.
We'll assess you against these behaviours during the selection process:
We'll assess you against these technical skills during the selection process:
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service D&I Strategy
As part of the application process, you will be assessed on your experience and will be asked to complete:
Further details around what this will entail are listed on the application form.
Sift
Sift will begin shortly after the advert closes.
Should there be a large number of applications, an initial sift will be conducted using your personal statement.
Candidates who pass the initial sift may be progressed to a full sift, or progressed straight to assessment or interview.
Sift dates to be confirmed.
Interview
If successful at sift stage, you will be invited to interview where you will be assessed on the Technical Skill and Behaviours listed above.
As part of the recruitment process you will be required to do a presentation. Full details will be provided later within the process.
Interview dates are to be confirmed. Please note that these may be subject to change.
Interviews will be held virtually on Microsoft Teams.
For further information on Success Profiles, please use the links below and watch our videos on Defra Jobs.
Near miss
Candidates who are judged to be a near miss at interview may be considered for other positions in Defra which may be at a lower grade, but have a potential skills match.
Reserve list
A reserve list may be held for a period of 12 months from which further appointments can be made.
Merit Lists
Where more than one location is advertised, candidates will be appointed in merit order for each location. You will be asked to state your location preference on your application.
Salary
New entrants to the Civil Service are expected to start on the minimum of the pay band. The internal roles rules apply to existing Civil Servants, i.e. level transfers move on current salary or the pay range minimum, transfers on promotion move to new pay range minimum or receive 10% increase. Either case is determined by whichever is the highest.
Location
As part of the pre-employment process for this post, successful candidate(s) will be able to agree a contractual workplace from those locations listed in this advert. The agreed contractual workplace is then the substantive and permanent place of work for the successful candidate(s).
Where the location is 'National' the successful appointee should discuss and agree an appropriate contractual location in line with both Defra's location policy and site capacity, prior to proceeding with pre-employment processes.
Successful applicants currently employed by the hiring Defra organisation for this post may choose to remain in their current contractual location or may choose to change contractual location to one of those listed above. This should be discussed and agreed prior to proceeding with pre-employment processes.
The agreed amount of time spent at a workplace for this post will reflect the requirement for Civil Servants to spend at least 60% of their working time in an organisation workplace with the option to work the remaining time flexibly from home. Working time spent at a workplace may include time spent at other organisational locations including field-based operational locations, together with supplier, customer or partner locations. This is a non-contractual agreement which is consistent with common Civil Service expectations.
Travel costs to non-contractual workplaces will be subject to departmental travel and subsistence policies. Travel costs to contractual workplaces are the responsibility of the employee.
The successful candidate is required to carry out all their duties from a UK location, and cannot do so from an overseas location at any time.
Defra includes the core department, APHA, RPA, Cefas and VMD.
NSV
For further information on National Security Vetting please visit the following page https://www.gov.uk/government/publications/demystifying-vetting
Visa Sponsorship Statement
Please take note that Defra does not hold a UK Visa & Immigration (UKVI) Skilled Worker License sponsor and are unable to sponsor any individuals for Skilled Worker Sponsorship.
Reasonable adjustments
If a person with disabilities is put at a substantial disadvantage compared to a non-disabled person, we have a duty to make reasonable changes to our processes.
If you need a change to be made so that you can make your application, you should:
Accessibility
If you are experiencing accessibility problems with any attachments on this advert, please contact the email address in the 'contact point for applicants' section.
Criminal Record Check
If successful and transferring from another government department, a criminal record check maybe carried out.
In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service on your behalf. However, we recognise in exceptional circumstance some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing [email protected] stating the job reference number in the subject heading.
Internal fraud database check
Applicants who are successful at interview will be, as part of pre-employment screening subject to a check on the internal fraud database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant's details held on the IFD will be refused employment.
A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5 year period following a dismissal for carrying out internal fraud against government.
Childcare Vouchers
Any move to DEFRA from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk
Feedback
Feedback will only be provided if you attend an interview or assessment.This job is broadly open to the following groups:
Microsoft PowerPoint - Candidate Information Pack Opens in new window (pdf, 2854kB)
We use necessary cookies to help our site function. We’d also like to use analytics cookies that help us make improvements by measuring how you use our website.
For more detailed information about the cookies we use, see our Cookies page.
Necessary cookies
Necessary cookies enable core website functionality such as network management, security and accessibility. You may disable these by changing your browser settings, but this may impact how the website functions.
Analytics cookies
We’d like to collect website analytics cookies information using Google Analytics to help us improve our website. We collect this data by running Google Analytics JavaScript on your device, which collects data about how you interact with our site. The data is collected in a way that does not directly identify anyone. For more information please see our Cookies page.