Defence Digital – Cyber Security Analyst

at  Ministry of Defence

JOB SUMMARY

Defence Digital are part of the Ministry of Defence and at the cutting edge of advancing digital technology for national security.
At our Security Operations Centre at MOD Corsham, we’re looking for Cyber Security Analysts to join our team and advance the delivery of 24/7 Defensive Cyber Operations.
This role involves executing daily operational tasks, monitoring alerts, and ensuring the security of the MOD’s digital assets and data. If you are detail-oriented, possess strong analytical skills and have a passion for cyber security, come join our team.
We’ll provide many excellent learning and development opportunities, tailored to your role and beyond. You’ll be able to gain industry recognised qualifications through a range of professional courses and training providers and we’ll support you throughout the process.
View our video to see what it’s like Working at Defence Digital
This role attracts additional allowances including a regular shift allowance, weekend premiums, and a Market Skills Allowance (MSA) of up to £9k per annum.
This position is advertised at 37 hours per week.
Strategic Command is going through a significant transformation programme which aims to improve the way the Command conducts its business and delivers for Defence and the nation. As a consequence of this, all posts within Strategic Command Headquarters and in time the wider organisation, are/will be subject to review and potential changes as we continuously improve across the period of the transformation programme. These changes may be minor or could be more substantive and will generate new opportunities. Throughout, the Command’s transformation programme is committed to following the MOD’s framework on managing and supporting people through the change process and places an emphasis on early and open consultation and engagement with the Command’s personnel and Trade Unions.

JOB DESCRIPTION

Within the Global Operations and Security Control Centre (GOSCC), the Security Operations Centres (SOCs) provide a coherent, holistic and coordinated approach to Cyber Defence, under execution of the MOD’s Defensive Cyber Operation.
The Defensive Monitoring and Incident Response elements are responsible for the 24/7/365 detection of, and response to, Cyber incidents impacting the MOD’s Digital Enterprise.
As an analyst, you will use tooling, processes and information, from a multitude of sources, to identify, analyse, triage and report cyber events that occur, or might occur, within the network. This will enable you to support protecting the information, systems and networks from threats.

The successful candidate(s) will be required to:

• Monitor security alerts and incidents using a variety of security tools and technologies.
• Analyse and triage security incidents to determine the severity and impact.
• Respond to security incidents, including containment, eradication, and recovery actions.
• Conduct initial investigations and document findings.
• Collaborate with other teams to develop and implement effective security measures.
• Maintain and update SOC processes and procedures.
• Participate in the development and tuning of security monitoring and detection strategies.
• Provide regular reports and updates on security posture and incident response activities.
• Stay current with the latest cyber security trends, threats, and technology.

SOME OF THE QUALITIES AND SKILLS WE ARE LOOKING FOR:

• Acute attention to detail
• Resilient and results oriented
• Ability to keep calm under pressure, use your initiative, be an analytical thinker and develop your skills
• Personable, task focused and able to build relationships with the core team and wider colleagues
• A passion for security and technology and identifying and solving problems
• An understanding of cyber threats and associated methodologies and frameworks such as Mitre ATT&CK and NIST.
• Motivation, commitment and the desire to continue to learn

NICE TO HAVE

• A degree in Cyber Security or a related subject
• Great organisation, timekeeping, and prioritisation skills.
• Experience in leading, supporting, coaching and mentoring colleagues.
  Previous experience or technical knowledge can help but we’re looking for the core skills and the motivation and ability to learn, so we can support your continuous development in the role.

SECURITY CLEARANCE AND NATIONALITY REQUIREMENTS

If not already held, successful candidates will be required to obtain DV clearance prior to taking up employment. This position is open to sole UK nationals only.

TECHNICAL SKILLS

We’ll assess you against these technical skills during the selection process:

• Cyber Security operations
• Intrusion detection and analysis
• Threat understanding

Benefits
Alongside your salary of £28,300, Ministry of Defence contributes £7,641 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

Our benefits include:

• Learning and development tailored to your role with a dedicated minimum of 5 days per year
• 25 days paid annual leave rising (by 1 day per year) to 30 days upon completion of five years’ service
• Ability to roll up to 10 days annual leave per year
• In addition to eight public holidays per year, you will also receive leave for HM The King’s birthday
• A Civil Service pension with an average employer contribution of 27%
• Parental and Adoption Leave
• Discounts on a range of services within and external to the civil service – Defence Discount Service, Civil Service societies for Sports and Leisure, Healthcare, Insurance, Motoring, Company discounts with Virgin, Vodafone, and Microsoft Office.
• In year rewards and ‘thank you’ schemes such as vouchers and gift cards
• A culture encouraging inclusion and diversity
• Please see Benefits Leaflet for more detail

EQUALITY AND DIVERSITY

Our people are at the heart of everything we do at Defence Digital. It’s vital that our workforce reflects the diversity of both our audience and the wider society in the UK, so we’re proud to be an equal opportunities employer and we actively seek candidates from diverse backgrounds and communities. We also recognise the importance of a good work life balance, so we do everything we can to accommodate flexible working, including part-time and job shares for all our roles. Please just let us know in your application or at any stage throughout the process if this is something you want to explore.
Defence Digital operates an organisation model in which every individual belongs to a Government Profession. The successful applicant will be posted into one of the defined Government Professions on Standard Terms of Reference for the grade. Defence Digital reserves the right to move individuals between roles, within their allocated profession, to meet the needs of the business and in support of agile resourcing.
Within Defence Digital each profession is led by a Professional Head of Community who will lead professional development and support the Continuous Professional Development path for their group.
The post does not offer relocation expenses.
External recruits who join the MOD who are new to the Civil Service will be subject to a six-month probation period.
Please Note: Expenses incurred for travel to interviews will not be reimbursed.
Please be advised that the Department is conducting a review of all pay related allowances which could impact on those allowances that the post currently being advertised attracts.
Any move to MOD from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk/.
The Ministry of Defence is committed to providing a safe and healthy working environment for its staff which includes educating them on the benefits of not smoking, protecting them from the harmful effects of second-hand smoke and supporting those who want to give up smoking. Under the Smoke-Free Working Environment policy, Smoking and the use of all tobacco products (including combustible and chewing tobacco products) will not be permitted anywhere in the Defence working environment however some exemptions are in place, please refer to local guidance. The policy is Whole Force and includes all Defence personnel, contractors, visitors and other non-MOD personnel. All applicants seeking, considering, or accepting employment with the Ministry of Defence should be aware of this policy and that it is already in place at a number of Defence Establishments.
MOD Recruitment Satisfaction Survey – we may contact you regarding your experience to help us improve our customer satisfaction. The survey is voluntary and anonymous. You may however be given the opportunity to provide additional information to help us improve our service which includes the collection of some personal data as defined by the United Kingdom General Data Protection Regulation (UK GDPR). The MOD Privacy Notice sets out how we will use your personal data and your rights.
Things you need to know

TECHNICAL SKILLS

• Cyber Security operations
• Intrusion detection and analysis
• Threat understanding
  The Government Security Profession Career Framework and the aligned Monitoring Associate role used in this vacancy can be found at: Government Security Profession career framework (publishing.service.gov.uk)
  The Civil Service embraces diversity and promotes equality of opportunity. There is a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. If you need to advise us that you need additional help or reasonable adjustments for the recruitment process, please contact: DBSCivPers-Resourcingteam3@mod.gov.uk .
  As a result of the changes to the UK immigration rules which came into effect on 1 January 2021, the Ministry of Defence will only offer sponsorship for a skilled worker visa under the points based system, where a role has been deemed to be business critical.
  The role currently being advertised has not been assessed as business critical and is therefore NOT open to applications from those who will require sponsorship under the points based system. Should you apply for this role and be found to require sponsorship, your application will be rejected and any provisional offer of employment withdrawn.
  Feedback will only be provided if you attend an interview or assessment.

NATIONALITY REQUIREMENTS

Open to UK nationals only.

Information Technology
Security
Other