Security Monitoring Associate - Planning Inspectorate - HEO

The Security Monitoring associate role is a key role with the Digital and Data and is part of a motivated inclusive security team who work collaboratively to ensure the Inspectorate’s networks and systems remain secure.   

This role will collect and analyse security event data arising from activity across the organisation, tune and improve rules generating security alerts, and follow up by investigating indicators of potentially malicious activity, escalating incidents or initiating responses. 

The Planning Inspectorate has a long and proud history in ensuring a fair planning system for England. The work we do has a significant impact on people’s lives, the communities where they live and the economy.

We want our colleagues to be able to work more flexibly and more collaboratively, exploring new and innovative ways to improve the way we provide services. 

For further information on the Planning Inspectorate, please see the information pack attached. You can also view our careers page at Civil Service Careers 

Job description

Are you passionate about Safeguarding critical digital assets? We’re looking for a Security Monitoring Associate who thrives on solving complex security challenges, staying ahead of evolving threats, and making a real impact. In this role, you’ll be a key player in protecting our infrastructure, data, and people from cyber threats.  

In today’s world, cybersecurity is more than just a technical discipline—it’s a mission-critical function that protects people, data, and innovation. At the Planning Inspectorate, we don’t just react to threats—we anticipate them, outsmart them, and build systems that are resilient by design.  

In this role you will work alongside passionate professionals who thrive on solving complex problems, staying ahead of adversaries, and continuously improving our security posture. Whether it’s analysing threat intelligence, responding to incidents, or hardening our infrastructure, your work will have a direct impact on the safety and success of our organisation.  

We believe in empowering our people with the tools, training, and trust they need to grow. If you're looking for a role where your curiosity is valued, your skills are sharpened, and your contributions truly matter—this is the place for you.  

Examples of tasks that would be undertaken include: 

• Monitor and analyse security events using SIEM tools (e.g., Splunk, QRadar) 
• Investigate and respond to security incidents and alerts 
• Perform vulnerability assessments and recommend remediation strategies 
• Collaborate with IT and DevOps teams to harden systems and networks 
• Support compliance efforts (e.g., ISO 27001, NIST, GDPR) 
• Contribute to threat intelligence and detection rule tuning 
• Participate in red/blue team exercises and tabletop simulations 

For full information on the role and assessment process please refer to the candidate pack attached.

Salary

New entrants to the Civil Service are expected to start on the minimum of the pay band. Internal rules apply to existing Civil Servants, i.e. level transfers move on current salary or the pay range minimum, transfers on promotion move to new pay range minimum or receive 10% increase. Either case is determined by whichever is the highest. 

Office Attendance 

This role is contractually based at Temple Quay House, Bristol which is currently out of use due to undergoing refurbishment work. In the interim, we have the use of alternative office space in very close proximity to Bristol Temple Meads railway station. We recognise and value the mutual benefits of hybrid working and have a flexible approach to in person attendance, which can vary dependent on the requirements of individual business units - the details of which can be discussed with candidates if invited to attend an interview.

Person specification

Essential Criteria

• Experience in analysing Security Information and Event Management (SIEM) SIEM reports and managing security incidents. 
• Excellent analytical and problem-solving skills. 
• Effective communication skills, with the ability to work well in a team. 
• Entry-level cyber security certifications e.g. Certified Security Operations Centre Analyst 
• Experience analysing project workshop outputs and compile them into documentation/artifacts.  

Desirable Criteria

• Experience in a similar role within the public sector. 
• Knowledge of incident response frameworks and best practices.
• Ability to handle confidential information with discretion.

Qualifications

Entry-level cyber security certifications e.g. Certified Security Operations Centre Analyst

Behaviours

We'll assess you against these behaviours during the selection process:

• Working Together
• Changing and Improving
• Making Effective Decisions

Technical skills

We'll assess you against these technical skills during the selection process:

• Intrusion detection and analysis
• Threat intelligence and threat assessment
• Cyber Security operations
• Government Security Profession career framework