Defence Digital Incident Coordinator
| Posting date: | 21 May 2025 |
|---|---|
| Salary: | £29,580 per year, pro rata |
| Hours: | Full time |
| Closing date: | 20 June 2025 |
| Location: | SN13 9NR |
| Remote working: | On-site only |
| Company: | Ministry of Defence |
| Job type: | Permanent |
| Job reference: | 405320 |
Summary
As Incident Coordinator, you’ll be responsible for responding to cyber security incident notifications, conducting investigations and producing cyber status and post incident reports. You’ll also highlight trends, such as emerging patterns of malicious activity, to aid both future capabilities and incident response.
You’ll work on live cyber incidents and military operations, involving real-world adversaries, where your work will have a tangible effect on the defence of the UK, providing information to high levels of Government.
This position sits within the MOD Computer Emergency Response Team (MODCERT), part of the wider Joint Defensive Cyber Unit (JDCU), and is at the core of MOD Defensive Cyber Operations. You’ll work with cyber teams within MOD (intelligence, forensics, malware analysis, enterprise security and more), other Government departments (including the National Cyber Security Centre (NCSC), Cabinet Office and National Crime Agency), allied nations (with an opportunity for visits and exercises) and key industry partners.
Responsibilities:
Act as part of a team responsible for initial responses to cyber security incident notifications and longer-term co-ordination, including escalation to the relevant JDCU and wider MOD teams as required.
Co-ordinate the creation and dissemination of MODCERT and wider JDCU reporting, including regular cyber status reports, post incident reports, highlighting trends to aid both future capabilities and incident response.
Engage with the NCSC on both long-term and emerging patterns of malicious activity.
Work with other Government departments and foreign nations, supporting national level visits, exercises and incidents when required.
Deputise for the Team lead when necessary.
Be on call when required to support out-of-office incident reporting.
You’ll work on live cyber incidents and military operations, involving real-world adversaries, where your work will have a tangible effect on the defence of the UK, providing information to high levels of Government.
This position sits within the MOD Computer Emergency Response Team (MODCERT), part of the wider Joint Defensive Cyber Unit (JDCU), and is at the core of MOD Defensive Cyber Operations. You’ll work with cyber teams within MOD (intelligence, forensics, malware analysis, enterprise security and more), other Government departments (including the National Cyber Security Centre (NCSC), Cabinet Office and National Crime Agency), allied nations (with an opportunity for visits and exercises) and key industry partners.
Responsibilities:
Act as part of a team responsible for initial responses to cyber security incident notifications and longer-term co-ordination, including escalation to the relevant JDCU and wider MOD teams as required.
Co-ordinate the creation and dissemination of MODCERT and wider JDCU reporting, including regular cyber status reports, post incident reports, highlighting trends to aid both future capabilities and incident response.
Engage with the NCSC on both long-term and emerging patterns of malicious activity.
Work with other Government departments and foreign nations, supporting national level visits, exercises and incidents when required.
Deputise for the Team lead when necessary.
Be on call when required to support out-of-office incident reporting.