How did your career in DWP start?

Coming from a humanities background, I can’t say I’d ever imagined having a career in Cyber Threat Intelligence (CTI).

Having started training to become a lawyer, I joined DWP’s Security & Data Protection function through the Direct Appointment Scheme. I was initially doubtful that my skills would align with a role in cyber security due to the assumptions I held around people working in these positions, thinking they were exclusively computer scientists, security architects and engineers. I’m happy to say I’ve been proved wrong, having met a varied group of colleagues within the department who come from a range of backgrounds and experiences.

In DWP, our CTI function seeks to better understand adversary behaviour to protect departmental assets. Analysts use all-source collection techniques, applying stages of the intelligence cycle to advise on the likelihood of an event or scenario happening. Our team works to evaluate the veracity and impact of large amounts of quantitative and qualitative data from often disparate or conflicting sources. This means that we are often trying to create a detailed picture of the ‘threat landscape’ from blank or irregular puzzle pieces.

Using structured analytical techniques, DWP’s CTI analysts work to evaluate threats from a number of different adversaries, including hacktivists, financially motivated cyber criminals and hostile nation states. By effectively communicating the details of a threat, analysts enable senior civil servants in policy, risk and other functions to make decisions that impact the security of government, in turn protecting citizen data and critical national infrastructure.

Why I love my job

What I love about my role is that it marries both creativity and logic with critical thinking. If you’re seeking a career that offers professional development, challenges you and is highly rewarding, you may be ready for a career in DWP’s Threat Intelligence function. Whilst it isn’t true of all roles, it might be beneficial to have some background in network security principles – but this is not necessarily essential. The department are committed to upskilling its workforce and have a dedicated Profession and Capability team, who have developed learning pathways linked to particular roles.