Intelligence Collection coordinates NCA niche collection capabilities against the Agency’s highest priorities. Intelligence Collection includes forensics, open source, covert human intelligence sources, undercover officers and technical collection capabilities.

Sitting within Intelligence Collection is NCA DICE – the Dark Web Intelligence, Collection and Exploitation team which combines separate capabilities to counter the cyber-enabled threats posed to the UK from online activity. NCA DICE support intelligence development for more traditional investigations, with a particular focus on the illegal activities conducted on the Dark Web, and provide coordination and intelligence development to our regional policing partners under the UK|DICE banner.

The team is threat agnostic, however currently has a focus the sale of illegal commodities on Dark Web marketplaces including firearms and high threat drugs (for example synthetic opioids such as fentanyl), and the targeting of Child Sexual Abuse offenders operating on anonymising platforms. The team also seeks to better understand the structure of Dark Web marketplaces and platforms themselves in order to further inform law enforcement activity and improve the NCA’s strategic understanding of Dark Web criminality.

National Covert Internet Targeting Team-NCIT’s mission is to deliver a new covert internet investigations capability across the clear web and dark web. Their work generates investigative leads against a range of actors involved in Child Sexual Abuse (CSA) in order to safeguard children through advanced open source techniques, and increase the NCA's knowledge and understanding of the CSA landscape online.

Job description

The National Covert Internet Targeting team (NCIT) uses advanced open source techniques to conduct Covert Internet Investigations, targeting high threat Child Sex Abuse (CSA) offenders operating on the clear and dark web. NCIT are looking to recruit candidates with significant experience of online investigations.

The successful candidate will focus on the identification and attribution of online CSA offenders through advanced open source intelligence (OSINT), and develop intelligence to produce target packages, thereby enabling an effective operational response to tackling online CSA offending. The role will also include the analysis of communications data alongside cryptocurrency transactions to further assist with attribution of CSA offenders.

You will also be required to conduct strategic research into emerging and existing online threats relating to CSA to enhance and support operational knowledge.

NCIT activity complements the work of Undercover Online Officers and open source investigations to provide intelligence, evidence and strategic insight into online CSA, therefore candidates will need to have a strong and current understanding of online investigations. Experience in the use of virtual currencies and the exploitation of encrypted online services such as dark web marketplaces and CSA platforms is desirable. An interest in social media and emerging online technology would also be advantageous.

NCIT has a specific focus on CSA and applicants will be expected to work directly in tackling child sexual exploitation and abuse. This will involve exposure to CSA imagery and material, and therefore you should consider the sensitive nature of the work before deciding to apply. All officers working on or supporting this type of operational activity will undergo a psychological assessment on taking up the role and at regular intervals once in post. By applying for this role applicants are confirming that they are willing to work on CSA operations.

The post holder must also have the ability to confidently develop and maintain joint working with national and international law enforcement partners and within the UKIC community.

For this role you will need to be able to successfully complete a DV clearance upon entry and a covert internet investigation course. Candidates with previous experience and understanding of covert internet investigative techniques are especially encouraged to apply for this post.
 

Responsibilities

The successful candidate will focus on the identification and attribution of online CSA offenders through advanced open source intelligence (OSINT), and develop intelligence to produce target packages, thereby enabling an effective operational response to tackling online CSA offending.

NCIT activity complements the work of Undercover Online Officers and open source investigations to provide intelligence, evidence and strategic insight into online CSA, therefore candidates will need to have a strong and current understanding of online investigations.

***All NCA officers must hold SC Enhanced upon entry as a minimum. To meet the National Security Vetting requirements for this role you will need to have resided in the UK for a minimum of 3 out of the past 5 years. For more information please see the Candidate information Pack***

***Candidates must have the ability to obtain DV whilst in the post***

Qualifications

The following qualifications/skills are essential to the role and proof will be required at interview:

• IPP accreditation or the ability to achieve IPP within 6 months.

Please ensure the dates of any accreditations you are relying on, are entered on to the CV.

Should you progress to the assessment stage of the process, you will be required to provide a copy of the original certificate.

Behaviours

We'll assess you against these behaviours during the selection process:

• Changing and Improving
• Making Effective Decisions

Technical skills

We'll assess you against these technical skills during the selection process:

• Recent experience in the research and development of online investigations.
• Proven experience of using open source tools and techniques.
• Good understanding of the challenges of online investigations and relevant UK legislation.
• Experience of identifying, assessing and managing risk in an online environment

Security

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check

Medical

Successful candidates will be expected to have a medical.