Army Defensive Cyber Security Operations in Andover

Step into the future of warfare with the Digital Security & Intelligence Directorate, where data drive decisions and digital dominance define victory. We lead strategic data management, intelligence, and cutting-edge technology to deliver the tools that give the Army a decisive edge on the modern battlefield. As part of our mixed military and civil service team, you will be at the forefront of the Army's efforts to secure the Army's digital network, safeguarding data, and ensuring information integrity in a rapidly evolving digital battlespace.

Working with state-of-the-art tools, including AI, advanced analytics, and next-gen tech, you will help the Army outthink, outmanoeuvre, and outpace its adversaries. In the Digital Security & Intelligence Directorate, you will turn that vision into reality. From strengthening cyber resilience to driving digital transformation on the frontlines, your expertise will shape the Army's future. Collaborating with a diverse network of experts, you will deploy innovative strategies to maintain the Army's dominance in an increasingly contested information environment.

This is more than just a job - it's your chance to redefine digital defence, push the boundaries of innovation, and directly contribute to the Army's operational effectiveness. This position is advertised at 37 hours per week.

This role works within the inclusive and innovative Cyber & Security Team, led by a Senior Civil Servant with a diverse and highly capable workforce. An exciting job role exists in the Cyber Security Team as the Defensive Security Operation Lead. This is an excellent opportunity for professional development and career progression, both in technical delivery and management perspectives.

You will be responsible for formulating, cohering, and executing the Army's response to a cyber event impacting the Army's Digital Enterprise, in conjunction with other stakeholders on behalf of the Army's Principal Security Advisor and Senior Risk Owner/Chief Information Security Officer. This will involve reviewing and developing existing response plans based on lessons identified, testing them in tabletop exercises and wargames, and when an operational response is required to an incident, taking the lead for the Army response, typically looking across the organisation up to Senior Leadership and into Defence.

Secure behaviours play an integral role in protecting both the UK and our Armed Forces against external and internal threats. In this role, you will also become a member of the Government Security Profession, with further opportunities for continued professional development.

If you are a strong communicator able to engage with stakeholders across government, work efficiently and at pace across multiple IT systems and security classifications, we need you. Appropriate training courses will be provided to ensure you have the skills and knowledge required to perform in this role.

We are looking for a talented and motivated individual, able to lead a team and, where necessary, operate individually to ensure confidentiality, integrity, and availability of Army-operated data systems. You must be comfortable engaging with wider Defence, Government, and industry. Occasional travel within the UK will be required, but this will rarely demand overnight stays.

• Lead the Army's operational response to cyber events that affect the Army Digital Enterprise, including the direction and coordination of response by system managers and owners.
• Lead the engagement to support all stakeholders engaged in the Army's supply and contract chain in the event of a cyber event.
• Develop and cohere Army Incident response plans based on emerging threats, organisational changes, and lessons identified from previous events and operations.
• Deliver tabletop exercises, workshops, and wargames to test response plans and inform the Army Senior Leadership Team.
• Coordinate the Army's Cyber intelligence requirements and lead on the dissemination of cyber threat intelligence to ensure stakeholders are threat informed.
• Line management of Military Defensive Cyber Security Post.

• Relevant work experience in Cyber and Network Security Operations.
• Comfortable engaging with wider Defence, Government, and industry.
• Ability to work with diverse internal and external stakeholders and build strong relationships.
• Highly organised and able to deal with multiple requests/priorities with competing deadlines.
• Effective written and verbal communication skills.
• Ability to display a positive and professional attitude.
• Good judgement and strong interpersonal skills.
• Ability to work under pressure.

• Experience of working in Security, Risk Management, Cyber.
• Experience of performance management and lessons analysis.
• A formal relevant certification, but not limited to the CISM, CISSP, Degree, HND, HNC, or extensive relevant work experience.
• Membership of one or more recognised Professional Security Body.
• Previous experience working in a security environment.
• Previous experience working in a military environment.
• Understanding of the National Institute of Security and Technology (NIST) Framework.
• Experience in Cyber Incident Management.