The National Cyber Crime Unit is the UK lead for tackling the threat from Cyber Crime. Working on a national and international level we respond in fast time to rapidly changing threats. This is done using innovative approaches and ground-breaking techniques to target cyber criminals causing the greatest threat.

The Internet and Infrastructure team work to identify and map the infrastructure, architecture, operational capabilities and network used by cyber criminals, as well as extracting information which could attribute parts of the infrastructure to a real-world person or produce more investigative leads.

The team achieve their aims by carrying out tasked work and by supporting the NCA and ROCU investigating teams, either with advice or by mapping infrastructure through data received and highlighting new attributes for further investigation or data requests. Their work often requires them to preserve evidential data and activity logs to support or progress investigations.

The team also serve as the UK's 24/7 Network point of contact. This 24/7 Network (also referred to as the G7 or G8 network) is centred on transnational mutual co-operation with international law enforcement colleagues, allowing them to request member foreign agencies to preserve data and accounts. The team are responsible for all foreign data preservation requests for UK Law Enforcement and deal with all foreign requests to the UK.

To be successful in this role you will supervise a team responsible for developing intelligence and evidential data collection opportunities using innovative techniques to combat existing and new threat areas of the internet exploited by serious organised crime.

Job description

Key Responsibilities
• Be part of a team of officers delivering internet investigations and support to the Cyber G7 24/7 protocol, acting as an Officer for NCCU operationally tasked activity as required.
• Provide advice on legislation, policy, technical and tactical options to assist in the planning and implementation of investigations, operations and prevention initiatives.
• Conduct systematic research and analysis of open and closed sources to assist the decision-making of law enforcement agencies.
• Develop and maintain effective working relationships with Internet stakeholders to foster collaborative working and international partnership to improve operational performance.
• Hold appropriate Cyber skills to enable the collection and processing of available data to produce investigative opportunities.
 

Responsibilities

The successful candidate will be able to demonstrate an ability to:
• Build working relationships as appropriate with internal and external partners, across government and industry to support and enhance their technical capabilities. The successful candidate will be required to work collaboratively with other regional, national and international LE partners like ROCA’s G7/G8 members in support of NCA operational activities.
• This individual and the wider team will be UK LE SPOC for data preservation requests from foreign LE Partners.

You will be able to demonstrate the behavioural and technical criteria set out below.

Desirable qualification criteria but not essential
• A STEM related degree
• Network / infrastructure accreditation eg CISCO/ CCNA, Comp TIA N+
• OSINT related courses

Behaviours

We'll assess you against these behaviours during the selection process:

• Making Effective Decisions
• Delivering at Pace
• Communicating and Influencing

Technical skills

We'll assess you against these technical skills during the selection process:

• • Experience of investigating network or computer related incidents.
• • In-depth understanding of the acquisition of internet communications data.
• • Experience of cyber investigation and case management (desirable, not essential)

Security

Successful candidates must pass a disclosure and barring security check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check