Defence Digital

**Details**:
**Reference number**:

- 260262**Salary**:

- £27,080- Allowances - A Recruitment and Retention allowance (RRA) of up to £9k is payable, paid in increments upon reaching the required level of competence.**Job grade**:

- Executive Officer**Contract type**:

- Permanent**Business area**:

- MOD - Strategic Command**Type of role**:

- Security**Working pattern**:

- Full-time**Number of jobs available**:

- 3Contents

Location

About the job

**Benefits**:
Things you need to know

Location
- MOD Corsham, Westwells Road, Corsham, Wiltshire, SN13 9NRAbout the job

**Job summary**:
Would you like to gain recognised qualifications through fully supported training and development?

Do you have the desire, motivation and ability to continue to learn and develop in a cutting-edge organisation?

This is a fantastic opportunity to start out in the field of cyber security, with no requirement for prior cyber security qualifications and experience.

We are Defence Digital and we provide digital and technology services to our Armed Forces, ensuring they can operate securely via radio, satellite, and the internet. Operating at scale, with an annual budget in excess of £2Bn and a diverse team of 2,500 colleagues, we're aiming to make our Armed Forces some of the most technologically advanced in the world. To do that we're growing our capabilities in disciplines like data science, automation and cyber security.

The MOD is at the forefront of cyber security within the UK government and the UK is a key player on the world stage in cyber.

If you can see yourself contributing to the world of Defence digital and technology, the next chapter of your career may be with us

This position is advertised at 37 hours per week

**Job description**:
This position sits within the Ministry of Defence Computer Emergency Response Team (MODCERT), part of the wider Joint Defensive Cyber Unit (JDCU).

MODCERT are at the core of MOD Defensive Cyber Operations, giving you experience of working with cyber teams within MOD (intelligence, forensics, malware analysis, enterprise security and more), other Government departments (including the National Cyber Security Centre, Cabinet Office and National Crime Agency), allied nations (with an opportunity for visits and exercises) and key industry partners.

The Incident Coordinator position will be responsible for responding to cyber security incident notifications, conducting investigations and producing cyber status and post incident reports. You will also highlight trends, such as emerging patterns of malicious activity, to aid both future capabilities and incident response.

You will work on live cyber incidents and military operations involving real-world adversaries, where your work is extremely valuable and will have a tangible effect on the defence of the UK, providing information to high levels of Government.

You will have ready access to a tailored training and development plan, including multiple internationally recognised qualifications and memberships (SANS, CISSP, etc.) and you will be rewarded for development and demonstrating your competence via additional allowances (up to £9000/year), allowing you to progress financially whilst in the role.

We are a small, highly specialised team with exciting plans and we’re growing, so now is a great time to join us and become part of our journey

**Person specification**:
Responsibilities include:

- Act as part of a team responsible for initial response to cyber security incident notifications and longer-term co-ordination, including escalation to the relevant Joint Defensive Cyber Unit (JDCU) and wider MOD teams as required.
- Co-ordinate the creation and dissemination of MODCERT and wider JDCU reporting, including regular cyber status reports, post incident reports and highlighting trends to aid both future capabilities and incident response.
- Engage with the National Cyber Security Centre (NCSC) on both long-term and emerging patterns of malicious activity.
- Work with other Government departments and foreign Nations, supporting national level visits, exercises and incidents when required.
- Support and cover the duties of other team members when absent and deputise for the Team lead when necessary.
- Be on call when required to support out-of-office incident reporting.

If you have the following skills and experience, we would love to hear from you
- Experience or ability to work in a technical team.
- Great interpersonal and relationship management skills.
- Confident in delivering briefings.

Desirable knowledge or experience (not essential, as training and development will be provided):

- Previous incident management experience.
- Knowledge or understanding of cyber security and the current threats to the UK.

Dependent on the business need, there may be a requirement to travel to meetings within the UK (or potentially occasional overseas visits). This post does not offer any assistance with relocation allowances.