Army Defensive Cyber Security Operations
| Posting date: | 23 June 2025 |
|---|---|
| Salary: | £44,590 per year |
| Additional salary information: | A pension contribution of 28.97% based on the listed salary. |
| Hours: | Full time |
| Closing date: | 23 July 2025 |
| Location: | SP11 8HJ |
| Remote working: | Hybrid - work remotely up to 2 days per week |
| Company: | Ministry of Defence |
| Job type: | Permanent |
| Job reference: | 411027 |
Summary
An exciting job role exists in the Cyber and Security Team as the Defensive Security Operations Lead. This role works within the inclusive and innovative Cyber and Security team, part of the Information Directorate within Army Headquarters, a diverse and highly capable workforce. This post is an excellent opportunity for individuals looking to develop and progress their careers, both in technical delivery and management perspectives.
The successful candidate will be responsible for formulating, cohering and executing the Army’s response to a cyber event impacting the Army’s Digital Enterprise (ADE), in conjunction with other Top-Level Budgets (TLB) Stakeholders, on behalf of the Army Principal Security Advisor (PSyA) and Senior Information Risk Owner (SIRO)/Cyber Information Security Officer (CISO). This will involve reviewing and developing existing response plans, based on lessons identified (internally and other TLBs), testing them in table top exercises and wargames, and when an operational response is required to an incident, take the lead for the TLB response, typically looking across the organisation up to TLB Senior Leadership Team (SLT) and into Defence.
Secure behaviours play an integral role in protecting both the UK, and our Armed Forces, against external and internal threats. Through this role, you will have the opportunity to develop a broader understanding of the security risks facing the Army across the cyber domains. You will also become a member of the Government Security Profession, and there are further opportunities for continued professional development.
The successful candidate must be comfortable engaging with wider Defence, Government, and industry. Occasional travel within the UK will be required but this will rarely demand overnight stays.
The successful candidate will be required to:
Lead the Army’s operational response to a cyber event that affects the Army Digital Enterprise (ADE). This will include the direction and co-ordination of response by system managers and owners (including Senior Responsible Owners (SRO), subordinate staffs (e.g. Land Operations Command), contractors & service providers (e.g. Defence Digital)
Lead on the TLB engagement and support stakeholders engaged in the Army’s supply and contract chain, in the event of a cyber event
Develop and cohere Army incident response plans based on emerging threats, organisational changes and the lessons identified from previous events and operations
Deliver table top exercises, workshops and wargames to test response plans and inform the Army Senior Leadership Team
Coordinate the Army’s cyber intelligence requirements and lead on the dissemination of cyber threat intelligence to ensure stakeholders are threat informed
Work collaboratively with the Warning, Alert and Report Point (WARP), Security and Resilience staff to address cross-cutting security issues
Line Management of Military Defensive Cyber Security Post
If you are a strong communicator able to engage with stakeholders across government, work efficiently and at pace, across multiple IT systems and security classifications, we need you!
This post is an excellent opportunity for individuals looking to develop and progress their careers. Appropriate training courses will be provided to ensure the candidate has the skills and knowledge required to perform the role. The MOD offers support and development in your career, including training as part of your role. In the Army we are passionate about delivering great things for our people. But we also know you will have a life outside of work; we respect your priorities and are committed to flexible working practices to give you freedom to balance work and life.
Remote working within this role is something that can be discussed at interview stages or with your future line manager if you are found successful.
Please note, candidates will be redirected to the Civil Service Jobs website where you will need to submit your application form. Please note the closing date above is incorrect and cannot be amended so please check the closing date on Civil Service Jobs and allow enough time to submit your application form.
The successful candidate will be responsible for formulating, cohering and executing the Army’s response to a cyber event impacting the Army’s Digital Enterprise (ADE), in conjunction with other Top-Level Budgets (TLB) Stakeholders, on behalf of the Army Principal Security Advisor (PSyA) and Senior Information Risk Owner (SIRO)/Cyber Information Security Officer (CISO). This will involve reviewing and developing existing response plans, based on lessons identified (internally and other TLBs), testing them in table top exercises and wargames, and when an operational response is required to an incident, take the lead for the TLB response, typically looking across the organisation up to TLB Senior Leadership Team (SLT) and into Defence.
Secure behaviours play an integral role in protecting both the UK, and our Armed Forces, against external and internal threats. Through this role, you will have the opportunity to develop a broader understanding of the security risks facing the Army across the cyber domains. You will also become a member of the Government Security Profession, and there are further opportunities for continued professional development.
The successful candidate must be comfortable engaging with wider Defence, Government, and industry. Occasional travel within the UK will be required but this will rarely demand overnight stays.
The successful candidate will be required to:
Lead the Army’s operational response to a cyber event that affects the Army Digital Enterprise (ADE). This will include the direction and co-ordination of response by system managers and owners (including Senior Responsible Owners (SRO), subordinate staffs (e.g. Land Operations Command), contractors & service providers (e.g. Defence Digital)
Lead on the TLB engagement and support stakeholders engaged in the Army’s supply and contract chain, in the event of a cyber event
Develop and cohere Army incident response plans based on emerging threats, organisational changes and the lessons identified from previous events and operations
Deliver table top exercises, workshops and wargames to test response plans and inform the Army Senior Leadership Team
Coordinate the Army’s cyber intelligence requirements and lead on the dissemination of cyber threat intelligence to ensure stakeholders are threat informed
Work collaboratively with the Warning, Alert and Report Point (WARP), Security and Resilience staff to address cross-cutting security issues
Line Management of Military Defensive Cyber Security Post
If you are a strong communicator able to engage with stakeholders across government, work efficiently and at pace, across multiple IT systems and security classifications, we need you!
This post is an excellent opportunity for individuals looking to develop and progress their careers. Appropriate training courses will be provided to ensure the candidate has the skills and knowledge required to perform the role. The MOD offers support and development in your career, including training as part of your role. In the Army we are passionate about delivering great things for our people. But we also know you will have a life outside of work; we respect your priorities and are committed to flexible working practices to give you freedom to balance work and life.
Remote working within this role is something that can be discussed at interview stages or with your future line manager if you are found successful.
Please note, candidates will be redirected to the Civil Service Jobs website where you will need to submit your application form. Please note the closing date above is incorrect and cannot be amended so please check the closing date on Civil Service Jobs and allow enough time to submit your application form.