Cybercrime Investigation Support - Stratford

Cybercrime Investigation Support - Stratford About the job
Job summary
Discover a career in your hands at HMRC. Whether you're seeking purpose, growth, or a workplace that gives you a true sense of belonging, hear from some of our employees as they share their story about what it's really like to work at HMRC.
Visit our YouTube channel to watch the full series and come and discover your potential.
HMRC is the UK's tax, payments and customs authority and we have a vital purpose: we collect the money that pays for the UK's public services and help families and individuals with targeted financial support.
Covert Operational Digital Exploitation (CODE) sits within HMRC's wider Fraud Investigation Service (FIS) responsible for the department's civil and criminal investigation work. FIS ensures that HMRC has an effective approach to taking on the most serious tax evasion and fraud.
CODE is the specialist support business area responsible for the provision of enhanced digital and covert specialist technological support to FIS investigations.
Working across Law Enforcement and government, CODE provides investigative tools and covert techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems which enable investigators to respond to serious and complex tax evasion and crime.
Job description
The Cybercrime Team utilise a range of technical capabilities, Intelligence tools and investigative work to detect, mitigate and investigate the most significant attacks against HMRC's online services, our customers, and our data.
Consisting of 3 strands working together to reduce cyber enabled harm to UK citizens, businesses and HMRC from organised criminal networks using technology to fraudulently access customers devices and online accounts.
Strategy and Business Management
This key area underpins and brings together the vision, purpose, and insights of the Cybercrime team. It ensures the ambition, strategic direction and priorities for the teams Strategy are set and actioned against HMRC's Strategy, the Risk Treatment Plan and Tactical priorities.
Business Management fulfils a variety of roles and functions in support of the Senior Leadership Team and wider team, including, inbox/diary management, recruitment, change management, knowledge management, including training and corporate assurance.
Technical Investigation
The Technical Investigators use their specialist skills in Digital Forensics, online log data analysis, malware analysis and knowledge of cyberspace and cybercriminals' tactics working alongside investigators to identify and develop investigations from inception to producing technical evidence for court. They use this insight to enhance HMRCs capability to defend and investigate cybercrime attacks.
Intelligence, Investigation & Operational Engagement
This area of the team utilises a range of covert and sensitive intelligence, investigation capabilities and partnerships to detect cybercrime attacks and identify online criminal actors posing a threat to HMRC online services, our data and customers.
Person specification
As a Cybercrime Investigation Support officer, you will provide support within the team, based across various Regional Centres, in the following areas:

• Cybercrime Intelligence, Investigation & Operational Engagement.
• Cybercrime Technical Investigation.
• Cybercrime Strategy and Business Management.

These roles will require occasional travel and overnight stays to various Regional Centres
The successful candidates will:

• Assisting in aspects of Cybercrime Investigations
• Assisting in reviewing digital forensic material
• Scheduling and maintaining case management records.
• Maintaining digital records of Investigations
• Assisting in authoring reports
• Assisting in identifying fraud by analysing data outputs from digital systems
• Handling evidence and writing witness statements which may result in presenting evidence in Court.

You will help to build HMRC capability in digital investigation by drawing operational learning from investigations to build and share knowledge and create efficiencies in future cases.
You will Keep up to date with cybercrime and security research and raise awareness of relevant material within the team. Attend training courses as required, which may include overnight stay.
During your probation you will be expected to develop your skills and knowledge within the three areas of the Cybercrime team and pass SANS SEC301 - Introduction to Cyber Security
This role comes with the expectation of regular travel to HMRC Regional Centres, particularly Bristol, Stratford and Nottingham
Essential Criteria

• Demonstrate a strong interest in Cybercrime and fraud detection.
• Demonstrate that you are an excellent team player, be able to work effectively with others, not only during the delivery of work but also in supporting colleagues working in challenging and fast-moving environment.
• Demonstrate strong IT skills such as:
  Microsoft Office 365
• Familiar with how the web works
• Experience in producing verbal and written reports for various stakeholders.
• Demonstrate practical and pragmatic with a problem-solving mind-set and an eye for precision and detail.

Desirable Criteria

• Excellent ability to communicate complex information to a variety of audiences both verbally and written.
• The ability to work independently, prioritising work accordingly.
• Familiar with programming
• Familiar with HMRC systems e.g. FCMS, CIP, SPLUNK, ETMP, SA
• Familiarity with the Criminal justice system and disclosure
• Qualifications relating to Cyber Security, Computer Forensics or Civil/Criminal Investigation
• Holds a full UK driving licence.

Additional Security Information
This post requires National Security Vetting at Security Check (SC) clearance level, and you must hold SC vetting or be willing to apply for SC vetting.
Flexibility