Army - Cyber Threat Intelligence Lead Analysts

UK Ministry of Defence; Hermitage; On-site; GBP 45,000; Full time

Job summary

The Ministry of Defence seeks two Cyber Threat Intelligence Lead Analysts to enhance cyber resilience within the Army. These roles focus on identifying cyber risks, employing advanced analytical tools, and contributing to national security in a collaborative, innovative environment. Ideal candidates will embrace flexible working practices and career development opportunities.

Benefits

25 days paid annual leave

Highly competitive pension scheme

Learning and Development opportunities

Flexible working practices

Qualifications

• Experience in cyber security, security incident response or technical IT.
• Strong interpersonal skills and ability to manage workloads independently.

Responsibilities

• Lead the monitoring and analysis of cyber threats to protect Army IT infrastructure.
• Develop threat models to identify security weaknesses and recommend measures.
• Manage a team and engage stakeholders across government and industry.

Skills

Knowledge of Cyber Security

Communication skills

Risk management

Analytical thinking

Education

Degree in a relevant field

Formal relevant certification (CISM, CISSP)

Job description

MOD, Corsham, SN13 9NR, Dennison Barracks Thatcham RG18 9TP

Job Summary

The Ministry of Defence employs over 50,000 Civil Servants. Within that, the Army Top Level Budget (TLB) employs around 12,000 MOD Civil Servants located at over 300 locations. Ours is a diverse workforce, with roles ranging from trainers, human resources, teachers, and psychologists to storekeepers, financiers, project and programme managers, and policy secretariat staff. There are many different functions and professions delivering key outputs for the Army.

Step into the future of warfare with the Information Directorate, where data drives decisions and digital dominance defines victory. We lead in strategic data management, intelligence, and cutting-edge technology, delivering the tools that give the Army a decisive edge on the modern battlefield.

As part of our civil servant team, you’ll be at the forefront of information warfare, countering disinformation, safeguarding critical data, and ensuring information integrity in a rapidly evolving digital battlespace. You’ll work with state-of-the-art tools, including AI, advanced analytics, and next-gen tech, helping the Army outthink, outmanoeuvre, and outpace its adversaries.

In the Information Directorate, you’ll turn that vision into reality. From strengthening cyber resilience to driving digital transformation on the front lines, your expertise will shape the Army’s future. You’ll collaborate with a diverse network of experts, deploying innovative strategies to maintain the Army’s dominance in an increasingly contested information environment.

This is more than a job—it’s your chance to redefine digital defence, push the boundaries of innovation, and directly contribute to the Army’s lethality and operational effectiveness.

Join us. Shape the future. Strengthen the force.

This position is advertised at 37 hours per week.

Job Description

We are currently looking for 2 Cyber Threat Intelligence Lead Analysts to conduct Cyber Threat Intelligence within the Army Cyber & Information Services Centre (ACyISOC), for 2 Military Intelligence Battalion (2MI) and Field Army (FA). These roles will operate within a diverse environment with a blended workforce of Civil Servants, military personnel and industry partners. These roles will be pivotal in understanding, monitoring, and mitigating cyber risks across the Army’s digital enterprise.

The ACyISOC is growing in maturity and the functions and roles are developing at pace. These roles have the opportunity to drive the direction of the ACyISOC and make a significant impact to reduce the cyber risk to the Army.

We are looking for a talented and motivated individuals who are team players, but equally comfortable working on their own to assure cyber security and ensure confidentiality, integrity and availability of Army operated and managed systems and networks.

Secure behaviours play an integral role in protecting both the UK, and our Armed Forces, against external and internal threats. Through this role, you will have the opportunity to develop a broader understanding of the security risks facing the Army across the cyber domain. You will also become a member of the Government Security Profession, and there are further opportunities for continued professional development.

The successful candidate must be comfortable engaging with wider Defence, Government, and industry. Occasional travel within the UK, primarily to Andover, Blandford will be required but this will rarely demand overnight stays.

The successful candidates will be required to:

• Lead the monitoring and analysis of cyber threats and security alerts to identify potential risks to the Army’s IT infrastructure, systems, and data. This involves using commercial and Defence security tools and threat intelligence feeds
• Lead on the collection, analysis and interpretation of threat intelligence data to understand the tactics, techniques, and procedures (TTPs) used by threat actors. This includes tracking emerging threats, vulnerabilities, and attack trends to proactively defend against cyber threats and produce actionable intelligence
• Lead on the development of threat models to identify potential attack vectors and security weaknesses in the Army’s systems. This involves assessing the security posture of systems, applications, and networks to prioritise security measures and controls
• Line management responsibilities for 1 Higher Executive Officer
  
  

If you are a strong communicator able to engage with stakeholders across government, work efficiently and at pace, across multiple IT systems and security classifications, we need you!

These posts are an excellent opportunity for individuals looking to develop and progress their careers. Appropriate training courses will be provided to ensure the candidates have the skills and knowledge required to perform the role. The MOD offers support and development in your career, including training as part of your role. In the Army we are passionate about delivering great things for our people. But we also know you will have a life outside of work; we respect your priorities and are committed to flexible working practices to give you freedom to balance work and life.

We are currently looking for 2 Cyber Threat Intelligence Lead Analysts to conduct Cyber Threat Intelligence within the Army Cyber & Information Services Centre (ACyISOC), for 2 Military Intelligence Battalion (2MI) and Field Army (FA). These roles will operate within a diverse environment with a blended workforce of Civil Servants, military personnel and industry partners. These roles will be pivotal in understanding, monitoring, and mitigating cyber risks across the Army’s digital enterprise.

The ACyISOC is growing in maturity and the functions and roles are developing at pace. These roles have the opportunity to drive the direction of the ACyISOC and make a significant impact to reduce the cyber risk to the Army.

We are looking for a talented and motivated individuals who are team players, but equally comfortable working on their own to assure cyber security and ensure confidentiality, integrity and availability of Army operated and managed systems and networks.

Secure behaviours play an integral role in protecting both the UK, and our Armed Forces, against external and internal threats. Through this role, you will have the opportunity to develop a broader understanding of the security risks facing the Army across the cyber domain. You will also become a member of the Government Security Profession, and there are further opportunities for continued professional development.

The successful candidate must be comfortable engaging with wider Defence, Government, and industry. Occasional travel within the UK, primarily to Andover, Blandford will be required but this will rarely demand overnight stays.

The successful candidates will be required to:

• Lead the monitoring and analysis of cyber threats and security alerts to identify potential risks to the Army’s IT infrastructure, systems, and data. This involves using commercial and Defence security tools and threat intelligence feeds
• Lead on the collection, analysis and interpretation of threat intelligence data to understand the tactics, techniques, and procedures (TTPs) used by threat actors. This includes tracking emerging threats, vulnerabilities, and attack trends to proactively defend against cyber threats and produce actionable intelligence
• Lead on the development of threat models to identify potential attack vectors and security weaknesses in the Army’s systems. This involves assessing the security posture of systems, applications, and networks to prioritise security measures and controls
• Line management responsibilities for 1 Higher Executive Officer
  
  

If you are a strong communicator able to engage with stakeholders across government, work efficiently and at pace, across multiple IT systems and security classifications, we need you!

These posts are an excellent opportunity for individuals looking to develop and progress their careers. Appropriate training courses will be provided to ensure the candidates have the skills and knowledge required to perform the role. The MOD offers support and development in your career, including training as part of your role. In the Army we are passionate about delivering great things for our people. But we also know you will have a life outside of work; we respect your priorities and are committed to flexible working practices to give you freedom to balance work and life.

Person specification

We are looking for people with relevant work experience in cyber, security, incident response, risk management or technical IT experience. Excellent written and verbal communication skills are essential.

We are looking for enthusiastic individuals who can handle the pressure of coordinating a wide range of activities and should be comfortable working within the cyber and security profession, willing to challenge established norms and process and be prepared to adapt to changing priorities. Applicants should display a positive and professional attitude. Have sound judgement and interpretive ability, to apply novel solutions to issues. Strong interpersonal skills are required, as well as the ability to work under pressure. Applicants should be able to manage their workload with minimal supervision.

It is essential that candidates should be able to demonstrate:

• Knowledge of Cyber Security
• Understanding of Intelligence processes and frameworks
• Ability to work with diverse internal and external stakeholders and build strong relationships
• Highly organised and able to deal with multiple requests/priorities with competing deadlines
  
  

Desirable Skills

• Experience of working in Security or Cyber
• Experience of managerial or leadership responsibilities
• A formal relevant certification, but not limited to the CISM, CISSP, Degree, HND, HNC, or extensive relevant work experience
• Membership of one or more recognised Professional Security Body
• Have previous experience working in a security environment
• Understanding of the National Institute of Security and Technology (NIST) Framework
  
  

This is a Reserved post open to UK Nationals only due to the nature and classification of the information. You will be required to obtain Security Clearance to take up this post.

Behaviours

We'll assess you against these behaviours during the selection process:

• Communicating and Influencing
• Making Effective Decisions
• Changing and Improving
• Delivering at Pace
  
  

We only ask for evidence of these behaviours on your application form:

• Communicating and Influencing
• Making Effective Decisions
  
  

Alongside your salary of £44,590, Ministry of Defence contributes £12,917 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

The Army prides itself on being a supportive employer and where possible encourages flexible working, helping you to maintain a great work/life balance.

Other Benefits For Army Civil Servants Include

• 25 days paid annual leave rising (1 day per year) to 30 days upon completion of 5 years’ service
• Highly competitive pension scheme
• Personal and professional development of skills
• Alternative working patterns for many roles
• Access to the Employee Assistance Programme (EAP), a free service that assists you with achieving a productive, healthy environment that is conducive to a healthy lifestyle
• Enhanced parental and adoption leave
• 6 days special leave per year which can be used for volunteering activities
• Learning and Development
  
  

We believe that everyone has the potential to make a difference and you will be supported to help you learn and advance in your career. This includes working towards membership of a professional body and/or undertaking a modern apprenticeship as part of your role.

A modern apprenticeship is a combined package of work and training. Through the schemes available you will gain a professional qualification, practical experience, and the broader skills required to develop in your current role and pave the way for your future career.

We are passionate about Smarter Working and believe that a combination of flexible working practices, digital technology and modern workspaces will give you the opportunity to enjoy a healthy work-life balance, while ensuing you deliver your outcomes effectively and efficiently – we expect you to know where to be to have the most impact, balancing your individual needs with that of your team and the organisation. However, recognising the benefits of face to face working, especially for new joiners, there is an expectation that you would be in the office at least 60% of the time (3 days a week).

The post does not offer relocation expenses.

External recruits who join the MOD who are new to the Civil Service will be subject to a six-month probation period.

Please Note: Expenses incurred for travel to interviews will not be reimbursed.

Please be advised that the Department is conducting a review of all pay related allowances which could impact on those allowances that the post currently being advertised attracts.

Any move to MOD from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax-Free Childcare. Determine your eligibility at https://www.childcarechoices.gov.uk/.

The Ministry of Defence is committed to providing a safe and healthy working environment for its staff which includes educating them on the benefits of not smoking, protecting them from the harmful effects of second-hand smoke and supporting those who want to give up smoking. Under the Smoke-Free Working Environment policy, Smoking and the use of all tobacco products (including combustible and chewing tobacco products) will not be permitted anywhere in the Defence working environment however some exemptions are in place, please refer to local guidance. The policy is Whole Force and includes all Defence personnel, contractors, visitors and other non-MOD personnel. All applicants seeking, considering, or accepting employment with the Ministry of Defence should be aware of this policy and that it is already in place at a number of Defence Establishments.

MOD Recruitment Satisfaction Survey – We may contact you regarding your experience to help us improve our customer satisfaction. The survey is voluntary and anonymous. You may however be given the opportunity to provide additional information to help us improve our service which includes the collection of some personal data as defined by the United Kingdom General Data Protection Regulation (UK GDPR). The MOD Privacy Policy Notice sets out how we will use your personal data and your rights.

Selection process details

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours and Experience.

At application you will be asked to provide a CV and Statement of suitability of no more than 750 words demonstrating your suitability for the role against the person specification, to include any experience working in a Technology or Cyber Security role, or managerial experience in a technical role.

At Sift, you will be assessed agaisnt your CV, Statement of suitability and the following Behaviours:

• Communicating and Influencing
• Making Effective Decisions (lead behaviour)
  
  

When choosing your Behaviour examples, please make sure you use real life scenarios that relate to your own experiences. Whilst technology may help to enhance your written submission, presenting the ideas of others or those generated by technology, could result in your application being rejected.

Applications will be sifted using all elements listed above, but in the event of a high number of applications, a sift will be conducted on the lead behaviour only: Making Effective Decisions.

At Interview, you will be assessed against the following Behaviours:

• Changing and Improving
• Delivering at Pace
• Making Effective Decisions
• Communicating and Influencing
  
  

Application sifting will be scheduled to take place within 7 days of the application closing date. Interview dates are to be confirmed but these will be held in person in Corsham. We endeavour to keep to these time frames, but these are subject to change around business needs.

Candidates will be asked to select their preferred location. Offers will be made in to the successful candidate within each chosen location.

The Ministry of Defence requires all candidates who are successful at interview to declare any outside interests. These declarations will be discussed with successful candidates following the interview process and before a formal offer of employment is made, as some outside interests may not be compatible with MOD civilian roles. This will not, in the majority of cases, prevent employment in MOD, but it is a measure that must be taken to ensure that appropriate mitigations can be put in place to manage any potential, perceived or actual conflicts of interest from the first day of employment.

The Ministry of Defence adopts a zero-tolerance approach to unacceptable behaviours, which includes bullying, harassment, sexual harassment, discrimination, and victimisation. You will not be eligible and will not be considered for this post if you have been dismissed from a role for such unacceptable behaviours within the last five years. This will also apply if you resign or otherwise leave a role but, because of an adverse decision, would have been dismissed for gross misconduct had you continued in that employment. Pre-employment checks will be carried out.

The Civil Service embraces diversity and promotes equality of opportunity. There is a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. If you need to advise us that you need additional help or reasonable adjustments for the recruitment process, please contact: [e-mail] .

As a result of the changes to the UK immigration rules which came in to effect on 1 January 2021, the Ministry of Defence will only offer sponsorship for a skilled worker visa under the points based system, where a role has been deemed to be business critical. This role does not meet that category and we will not sponsor a visa. It is therefore NOT open to applications from those who will require sponsorship under the points based system.

Should you apply for this role and be found to require sponsorship, your application will be rejected and any provisional offer of employment withdrawn.

Feedback will only be provided if you attend an interview or assessment.

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours and Experience.

Security

Successful candidates must undergo a criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).See our vetting charter (opens in a new window).

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Successful candidates must undergo a criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).See our vetting charter (opens in a new window).

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

Open to UK nationals only.

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job Contact

• Name : David Duncan
• Email : [e-mail]
  
  

Recruitment team

• Email : [e-mail]
  
  

Further information

Please ensure you read the attached candidate information document prior to completing your application. If you are dissatisfied with the service you have received from DBS, or believe that DBS has failed to follow the recruitment process in line with the Civil Service Commission principles of selection for appointment on merit on the basis of Fair and Open competition, you can raise a formal complaint by writing to DBS at the following address: Defence Business Services, Scanning Hub, Room 6124, Tomlinson House, Norcross Lane, Blackpool, FY5 3WP. If after raising your complaint with DBS you remain dissatisfied you can complain directly to the Civil Service Commission at the following address: Civil Service commission, Room G/8, 1 Horse Guards Road, London, SW1A 2HQ Or by email: [e-mail].