Job Description

HM Land Registry (HMLR) is looking for a Senior Infrastructure Specialist – Red Team to join our growing IT Security Operations function. This is an exciting opportunity to become part of a new and developing Red Team capability, helping to strengthen HMLR’s cyber resilience through advanced security testing, adversary emulation, and threat-informed assessments. The role is aligned to HMLR's developing Red Team function within the IT Security Operations area.

As a specialist within the Security Cluster, you will emulate real-world threat actors to identify vulnerabilities, test security controls, and provide actionable intelligence that helps improve our security posture. Working closely with defensive security teams, engineering teams and operational stakeholders, you will play a key role in protecting the systems and services that support one of the UK's largest digital property registers.

This is an excellent opportunity for someone who enjoys technical challenge, problem-solving, and collaborative working, and who wants to help shape the future direction of Red Teaming within HMLR.

Salary

£49,443 - £60,527

This salary includes the Government Digital and Data Profession Pay Framework.

Accomplished: £60,527
Proficient: £54,952
Developing: £49,443

A Civil Service Pension with an employer contribution of 28.97%

Job description

The IT Operations Practice sits within the Digital, Data and Technology (DDaT) directorate and is responsible for the performance and delivery of the technical infrastructure that underpins HMLR's services. The practice brings together a wide range of technical teams responsible for supporting, monitoring and operating critical infrastructure and services across the organisation

Within the practice sits a mature security function responsible for operational security across HMLR's platforms and systems. As part of a newly emerging Red Team capability, you will have the opportunity to influence and develop how the function operates, working closely with Security Operations, Security Assurance, infrastructure engineering teams and other technical specialists across the organisation.

Working as part of a team safeguarding HMLR systems against cyber threats, you will explore the tactics, techniques and procedures used by malicious actors to infiltrate systems undetected. Through simulated attacks, penetration testing and adversary emulation activities, you will identify weaknesses and provide evidence-based recommendations that help improve detection, response and security controls.

Main Duties

• Emulate the actions of threat actors to identify exploitable vulnerabilities across HMLR systems and services.
• Carry out penetration testing activities against networks, applications and computer systems.
• Perform simulated attacks to assess the effectiveness of defensive controls and detection capabilities.
• Identify security weaknesses, misconfigurations and attack paths, ensuring findings are communicated to the appropriate operational teams.
• Assess risks associated with security findings and potential vulnerabilities.
• Analyse attacker entry points and exploitation methods using real-world threat intelligence.
• Communicate priority risks, vulnerabilities and recommendations clearly to technical and non-technical stakeholders.
• Support the identification, prioritisation and implementation of security control improvements.
• Plan, coordinate and deliver adversary emulation and Red Team engagements.
• Provide actionable threat intelligence and security insights to Blue Teams and other security functions.
• Assess and enhance security controls, threat intelligence processes and incident response capabilities.
• Maintain awareness of the evolving cyber threat landscape and the tactics, techniques and procedures used by threat actors.
• Produce clear documentation, technical reports and recommendations that support informed decision-making across the Security Cluster.

Additional Requirement

• Occasional travel will be required to HM Land Registry offices, supplier locations and other Government departments, which may include overnight stays.
• The role will require occasional planned out-of-hours working to support IT changes, maintenance activities and security testing exercises.
• The post is covered by HMLR's flexible working hours agreement.
• Participation in an on-call rota may be required.
• The successful candidate will be required to obtain and maintain the appropriate level of Security Clearance and will be subject to additional background checks.

Person specification

To be successful in this role, you will be required to demonstrate the following criteria throughout the recruitment process. 

Essential Technical Skills and Qualifications:

• Holds a qualification in Information Technology or a related area (Degree level or equivalent) or significant experience in an IT field
• Advanced skills in the management of at least three of a range of security technologies such as: - SIEM, EDR-XDR, CTEM, DAST, WAF/DDoS, Entra ID, IPS/IDS, PKI, SASE, AWS, Infrastructure as Code
• Proficient in Security Related Data Collection & analysis
• Proficient in one of: - Python, Perl, SQL Assembly, PowerShell, Shell scripting

Desirable Technical Skills and Qualifications:

• Ethical Hacking Essentials (EHE)
• Certified Ethical Hacker (CEH)
• Extensive knowledge in the security of either Windows, Linux or Mainframe systems
• Extensive knowledge in the operation of security controls in cloud services such as AWS or Azure
• Web application testing and exploitation
• Network penetration testing and exploitation
• Reconnaissance, Attack Surface Mapping and Exposure Management

Essential Experience: 

• Experience of technical information gathering, analysis and problem solving of security related issues
• Experience of operating technologies, such as:- SIEM, XDR, WAF, Windows/Linux, Firewalls, Web Proxies, Virtualisation or Containers, Active Directory or Entra ID
• Experience in Infrastructure as Code and DevOps
• Experience in threat analysis and security incident response
• Excellent communication skills and the ability to work effectively as part of a team
• Strong leadership demonstrated through coaching or mentoring

Desirable Experience:

• Software Engineering Fundamentals
• Advanced experience in designing and documenting security systems and controls
• Experience in Malware Analysis & development
• Experience in cyber security testing
• Experience in planning and executing attack simulations
• Experience in applying standard frameworks to map attacker behaviour

Please note that desirable criteria will only be assessed in the event of high application numbers or as a tiebreaker. 

For further information please see the attached job description. 

Behaviours

We'll assess you against these behaviours during the selection process:

• Making Effective Decisions
• Leadership
• Communicating and Influencing
• Managing a Quality Service

Benefits

Alongside your salary of £48,400, HM Land Registry contributes £14,021 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window).

#WeAreHMLR

At HM Land Registry our vision is a world leading property market as part of a thriving economy and a sustainable future. We are unique in terms of the economic and social impacts of our work, our ability to make a positive difference to the lives of our customers, our sense of mission, and our great people. They are the foundation of all we have achieved and all we aspire to in the future. We want our people to feel proud to work for HM Land Registry and able to fulfil their full potential.

We have a strong and positive culture, a commitment to inclusivity, an emphasis on continuous learning and development, and flexible ways of working. We offer competitive pay and annual leave, attractive pension options and a wide range of other benefits.

• We have integrity – we value honesty, trust and doing the right thing in the right way.
• We drive innovation – we are forward-thinking, embrace change and are continually improving our processes.
• We are professional – we value and grow our knowledge and professional expertise.
• We give assurance – we guarantee our services and provide confidence to the property market.

https://www.gov.uk/government/organisations/land-registry/about/recruitment#what-hm-land-registry-can-offer-you

Things you need to know

Artificial intelligence

Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours.

We are working with our recruitment partner (Inspire People) for this campaign. 

Inspire People will assess your CV and compile a longlist of applications for HM Land Registry to sift.

If you progress through this stage, you will need to complete a short, pre-recorded video with Inspire People. Alternatively, you can provide written answers to the questions​. HM Land Registry will then sift these applications.

Please make sure your CV outlines how you meet the Technical Skills and Essential Experience

Please review your application form before clicking ‘submit’ – once you have submitted, you will not be able to amend your application. Ensure your application form is received by the closing date for receipt of applications – this is 11:55pm on the advertised date.

Successful candidates at sift will be invited to a blended interview held face- to -face at our Plymouth office. 

Candidates can refer to notes within their interview but they should be used as a prompt only.

The interview will assess the experience and behaviours listed in the attached job description.

HMLR is accredited to the Disability Confidence Scheme, which denotes organisations which have a positive attitude towards disabled people. Disabled applicants who meet the minimum essential criteria at the shortlisting stage are guaranteed an invitation to interview.

If any candidate requires the panel to consider a reasonable adjustment or there is anything else they would like the panel to take into consideration they are asked to notify us of this at application stage where possible or during the process as soon as it becomes a requirement.

The Civil Service values honesty and integrity and expects all candidates to share these values. Please ensure all examples provided throughout the recruitment process are representative of your own experience. Any instances of plagiarism or other forms of cheating (including the improper use of artificial intelligence) will be investigated and, if proven, the application will be withdrawn.

Please note that we will only offer sponsorship for a skilled worker visa where a role is in a certain business critical category. This role does not meet that category, and we will not sponsor a skilled worker visa. You must ensure you have the appropriate right to work in the UK before applying. 

HMLR expect everyone to spend at least 60% of their working time in the office. 

You can find more information on how we use your personal data on our website

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).

See our vetting charter (opens in a new window).

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

Apply and further information

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.

The Civil Service welcomes applications from people who have recently left prison or have an unspent conviction. Read more about prison leaver recruitment (opens in new window).

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job contact: Inspire People 

• Name: Andrew Medhurst - Inspire People
• Email: andrew@inspirepeople.net

Recruitment team:

• Email: hrresourcingteam2@landregistry.gov.uk

Further information

If you feel your application has not been treated in accordance to the Recruitment Principles and you wish to make a complaint, please email hrresourcingteam2@landregistry.gov.uk in the first instance. If you are not satisfied with the response you receive from HM Land Registry then you may take your complaint to the Civil Service Commission: http://civilservicecommission.independent.gov.uk/making-complaint/