Work for us

Home > Work for us > G5 Infrastructure Investigations Officer

G5 Infrastructure Investigations Officer

Digital, Data & Technology

£27,664 per annum*

*Plus £3,339 London weighting

About the role

The National Cyber Crime Unit (NCCU) leads the UK’s fight against cybercrime and uses specialist capabilities and expertise to support law enforcement partners across the UK and coordinate the entire UK response to cybercrime.

We are currently looking to recruit an Infrastructure Investigations Officer in our London office.

The Infrastructure Investigation team work to identify and map the infrastructure, architecture, operational capabilities and network used by cyber criminals, as well as extracting information which could attribute parts of the infrastructure to a real world person or produce more investigative leads.

The team achieve their aims by carrying out tasked work in support of NCA and ROCU investigation teams, either with advice or by mapping infrastructure through data received and highlighting new attributes for further investigation or data requests. Their work often requires them to preserve evidential data and activity logs to support or progress investigations.

The team also serve as the UK's 24/7 Network point of contact. This 24/7 Network (also referred to as the G7 or G8 network) is centred on transnational mutual co-operation with international law enforcement colleagues, allowing them to request member foreign agencies to preserve data and accounts.

The team are responsible for all foreign data preservation requests for UK Law Enforcement and deal with all foreign requests to the UK.

NCA welcomes applications from individuals with a range of Neurodivergent thinking styles and from those who may require reasonable adjustments.

Key Responsibilities

Be part of a team of officers delivering internet investigations and support the Cyber G7 24/7 protocol, acting as an Officer for National Cyber Crime Unit (NCCU) operationally tasked activity as required.
Provide advice on legislation, policy, technical and tactical options to assist in the planning and implementation of investigations, operations and prevention initiatives.
Conduct systematic research and analysis of open and closed sources to assist the decision-making of law enforcement agencies.
Develop and maintain effective working relationships with Internet stakeholders to foster collaborative working and international partnership to improve operational performance.
Hold appropriate Cyber skills to enable the collection and processing of available data to produce investigative opportunities.

The successful candidate will be able to demonstrate ability to:

Build working relationships with internal and external partners, across government and industry to support and enhance their technical capabilities.
Work collaboratively with other regional, national and international Law Enforcement partners in support of NCA operational activities.
This individual and the wider team will be UK Law Enforcement SPOC for data preservation requests from foreign Law Enforcement Partners.

Person Specification

To be successful in this role you will be an integral part of a team responsible for developing intelligence and evidential data collection opportunities using innovative techniques to combat existing and new threat areas of the internet exploited by serious organised crime

You will need to demonstrate the below behaviours:

Making Effective Decisions
Communicating and Influencing

You will also need to demonstrate the below technical and experience criteria:

Experience of investigating network or computer related incidents.
Knowledge of investigation techniques to determine cyber incidents.
Knowledge of network/security applications and network analysis.
Experience of working on a project and delivering against objectives.

You will also have the below qualifications or experience:

Desirable:

A STEM related degree
Network / Infrastructure certification eg CISCO, CCNA or Cyber Ops, Comp TIA N+
OSINT related courses.

Please note

The NCA is a 24/7 organization, and working patterns must support business requirements. You may be required to respond at short notice or outside of core hours.
Individuals will be required to undertake and pass a substance misuse test as part of pre-employment checks
The successful candidate will need to have a valid SC Vetting clearance or be willing to take and pass the Agency’s vetting clearance process at SC Level before taking up the role.
This is a 40 working hours per week role.