Cyber Digital Forensics Analyst

UK Ministry of Defence; United Kingdom; Hybrid; GBP 42,782 - 60,000; Full time

Benefits offered by this job

Automatic enrolment in Armed Forces Pension Scheme

30 days annual leave plus bank holidays

Free medical and dental care

Childcare benefits

Enhanced parental leave

Flexible service arrangements

Job summary

A governmental defence agency in the UK is seeking candidates for cyber roles with opportunities for tailored training and development. The role involves conducting malware analysis, monitoring system performance, and addressing security incidents. Applicants should possess a passion for cybersecurity, analytical skills, and a willingness to learn programming languages. The base salary starts at £42,782, with progression potential and additional benefits including pension and leave.

Qualifications

• Passion for cybersecurity shown through qualifications or practical experience.
• Ability or willingness to learn programming or scripting languages.
• Experience in network security, digital forensics, penetration testing, or incident response.
• Strong analytical and problem-solving skills.

Responsibilities

• Conduct malware analysis and reverse engineering.
• Monitor and analyze system performance.
• Conduct incident response and trend analysis.
• Maintain and troubleshoot systems.
• Stay current on emerging threats.

Skills

Cybersecurity knowledge

Programming/Scripting (Python, Java, PowerShell)

Analytical skills

Teamwork

Education

Professional certifications (CEH, OSCP, CompTIA Security+)

Job description

Please note: This scheme is not open to personnel who are currently serving full time within the UK Armed Forces.

JPAN: n/a

Grade: Mil OR4

Location: Multiple, including Southwest and Northwest England

Contract: Regular Military Commitment with bespoke TACOS

Security clearance: DV

All offers of employment are subject to achieving UK security clearance. Applicants normally need at least five years of UK residency to gain this clearance.

Overview

Cyber Direct Entry offers an accelerated route into military cyber roles for individuals with proven cyber skills or aptitude. This programme strengthens the UK’s ability to respond to growing cyber threats.

You’ll receive tailored training focused on essential skills for operating in cyberspace. Traditional medical and fitness standards are not our immediate concern, and waivers can be applied where appropriate.

We value diversity and encourage applications from all backgrounds. Cyber talent comes from every identity, and we know that a diverse workforce makes us stronger.

The cyber sector includes many neurodivergent professionals, and we embrace neurodiversity. Different ways of thinking often lead to unique insights.

Formal qualifications are not essential. If you can show your skills and passion for cyber, we want to hear from you. Successful applicants will be fast-tracked into operational cyber roles.

The below role represents one of many opportunities that will be available to you throughout your career. Final confirmation of cyber roles and locations will be made on completion of your initial training; decisions will take into account your skills, preferences and the needs of Defence.

The Role

Conducts in-depth reactive analysis of systems and digital evidence to investigate security incidents and support vulnerability mitigation. May perform malware analysis and reverse engineering to uncover attack methods and impacts.

Key Responsibilities

• Conduct Malware Analysis and Reverse Engineering - Perform tier 1, 2, and 3 malware analysis and static malware analysis to uncover attack methods, impacts, and vulnerabilities, enabling effective mitigation strategies.
• Monitor and Analyse System Performance - Identify and address causes of system performance degradation, ensuring optimal availability and functionality of IT systems and infrastructure.
• Incident Response and Trend Analysis - Track and document cyber defence incidents from detection to resolution, perform trend analysis, and coordinate incident response functions to mitigate risks and improve organisational security posture.
• Maintain and Troubleshoot Systems - Monitor, report, and troubleshoot client-level computer systems, ensuring proper operation, maintenance, and security to support forensic investigations and system integrity.
• Stay Current on Emerging Threats - Monitor external data sources (e.g., cyber defence vendor sites, CERTs) to maintain awareness of evolving threats and vulnerabilities, providing actionable insights to enhance cyber defence strategies.

About You

We’re looking for someone who:

• Has a passion for cybersecurity and an interest in protecting digital environments, shown through qualifications or practical experience
• Can use or is willing to learn programming or scripting languages (e.g., Python, Java, PowerShell)
• Understands or has experience in areas like network security, digital forensics, penetration testing, or incident response
• Brings strong analytical and problem-solving skills and can adapt to complex challenges
• Works well in diverse teams and can explain technical concepts clearly to non-technical audiences

Preferred Qualifications: Professional certifications such as CEH, OSCP, or CompTIA Security+ are desirable, as is knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001) and incident response methodologies.

Security requirement: Candidates must achieve and maintain Developed Vetting (DV). Failure to do so may result in termination of employment.

Age: Aged 18 – 39 (You can start your application from 17 years old however you must be at least 18 years old on day of entry to basic training)

Nationality: Must be a citizen of the United Kingdom since birth (not naturalised) and must never have held any other nationality or citizenship (including joint nationality) with the exception of dual British Irish citizenship. Immediate family must be British citizens/nationals.

Training

• Fast-tracked basic military training will introduce you to the Armed Forces without some traditional military skills (e.g., weapon training)
• Bespoke professional training will provide foundational cyber skills for Defence and show how your work supports national security
• Ongoing specialist training and mentoring, including industry courses (e.g., SANS), will be available throughout your role

Salary & Benefits

• Base Salary: Starting at £42,782, with progression to over £60,000
• Additional cyber-skills payments: From £6,270 per year for junior operators to £26,125 per year for highly experienced individuals
• Pension: Automatic enrolment in the non-contributory Armed Forces Pension Scheme 2015 (opt‑out available)
• Leave: 30 days annual leave plus eight UK bank holidays
• Other benefits: Free medical and dental care, childcare benefits, enhanced parental leave, and flexible service arrangements

Application process

• Application: submit a CV via the SERVE portal. Eligibility checks are completed, and applications are sifted for suitability.
• Interview: shortlisted candidates are invited to an interview covering technical skills, qualifications and suitability for military service (command, leadership and management experience).
• Medical Assessment: all candidates must pass a medical screening.
• Offer: successful candidates receive terms and conditions, and a job offer letter.