Cyber Proactive Protection Analyst

Proactive Protection within HMRC’s Fraud Prevention Centre (FPC) plays a pivotal role in safeguarding customers and the organisation against identity-related fraud and emerging threats. This position supports the vision for proactive fraud prevention, ensuring HMRC remains resilient against evolving tactics through intelligence-led insights and advanced technical controls. Operating at the heart of the FPC’s mission, the role helps to anticipating risks, mitigate vulnerabilities, and deliver on innovative solutions that protect critical services and maintain public trust.

As an analyst in the Proactive Protection function, you will support in the delivery of preventive measures, including anomaly detection, adaptive controls, and threat intelligence integration. Working within a multidisciplinary team, the role demands a coordinated approach to fraud prevention, embedded governance and compliance frameworks, and championing continuous improvement through automation and advanced analytics

.

This post will require DV clearance, or be willing and able to achieve that level of clearance. This is considered a ‘Reserved Post’ under the Civil Service Nationality Rules and is open to UK nationals only.

Person specification

• Threat Intelligence integration: Working across HMRC for the collection, analysis, and application of threat intelligence to dynamically adapt proactive fraud prevention measures, technical controls, and ensuring leads are informed.
• Preventive Control Operation: Support the operation of technical security controls and detection capabilities, leveraging intelligence to prevent identity-related fraud before it occurs across all customer communications channels.
• Collaboration and Stakeholder Engagement: Utilising strong partnerships across FPC and HMRC (including our Customer Compliance teams, tax and customs service leads) and with external bodies to ensure a coordinated approach to fraud prevention and victim support,
• Innovation and Continuous Improvement: Support innovation in fraud prevention techniques, leveraging automation, anomaly detection, and advanced analytics to stay ahead of evolving threats, and ensure a prompt and effective response.
• Governance and Assurance: Maintain robust governance frameworks, ensuring compliance with legal, regulatory, and organisational standards for fraud prevention.

Essential Criteria:

• Experience using Security Information and Event Management (SIEM) platforms, preferably in a security operations setting.
• External Threat feeds experience.
• Experience working in a Cyber Operations environment.
• Analysis experience.
• Experience using SIEM platforms such as Splunk or Elastic.
• Scripting skills (e.g., Excel functions) and awareness of fraud risks in digital services.