Cyber Threat Hunter – Cyber Direct Entry

Ministry of Defence - ZigZag Careers Pathway; United Kingdom; Hybrid; GBP 42,000 - 60,000; Full time

Job summary

A leading defense organization in the United Kingdom is looking for a Cyber Threat Hunter. This role focuses on proactively identifying advanced cyber threats and collaborating with cybersecurity teams. Candidates should possess a passion for cybersecurity, along with problem-solving and analytical skills. The position offers a competitive starting salary of £42,782 and additional benefits including professional training, military pension, and a supportive work environment. Applicants from diverse backgrounds are highly encouraged to apply.

Benefits

30 days annual leave

Free medical and dental care

Childcare benefits

Enhanced parental leave

Qualifications

• Experience or qualifications in cybersecurity.
• Willingness to learn programming languages.
• Experience in network security or digital forensics.
• Strong analytical and problem-solving skills.

Responsibilities

• Conduct intelligence-led threat hunting and analysis.
• Collaborate with cybersecurity teams on threat investigations.
• Monitor and analyze network traffic for malicious activities.
• Develop detection mechanisms for defense tools.
• Document incidents and provide technical reports.

Skills

Passion for cybersecurity

Programming/scripting languages

Network security

Digital forensics

Analytical skills

Team collaboration

Education

Professional certifications (CEH, OSCP, CompTIA Security+)

Job description

Cyber Threat Hunter – Cyber Direct Entry

JPAN: n/a

Grade: Mil OR4 – Leading Hand

Location: Multiple, including Southwest and Northwest England

Contract: Regular Military Commitment with bespoke TACOS

Security clearance: DV

Closing date: 28 Feb 2025

All offers of employment are subject to achieving UK security clearance. Applicants normally need at least five years of UK residency to gain this clearance.

Overview

Cyber Direct Entry offers an accelerated route into military cyber roles for individuals with proven cyber skills or aptitude. This programme strengthens the UK’s ability to respond to growing cyber threats.

You’ll receive tailored training focused on essential skills for operating in cyberspace. Traditional medical and fitness standards are not our immediate concern, and waivers can be applied where appropriate.

We value diversity and encourage applications from all backgrounds. Cyber talent comes from every identity, and we know that a diverse workforce makes us stronger.

The cyber sector includes many neurodivergent professionals, and we embrace neurodiversity. Different ways of thinking often lead to unique insights.

Formal qualifications are not essential. If you can show your skills and passion for cyber, we want to hear from you. Successful applicants will be fast‑tracked into operational cyber roles.

The below role represents one of many opportunities that will be available to you throughout your career. Final confirmation of cyber roles and locations will be made on completion of your initial training; decisions will take into account your skills, preferences and the needs of Defence.

The Role

A Cyber Threat Hunter proactively searches for indicators of advanced adversary activity that have evaded traditional detection tools, reducing the time between compromise and discovery. They use intelligence‑led and behavioural approaches to identify threats and collaborate with teams to investigate and remediate attacks.

Key Responsibilities

• Proactive Threat Hunting and Analysis – Conduct intelligence‑led and behavioural analysis to identify advanced adversary activities, anomalies, and potential threats that evade traditional detection tools, reducing the time between compromise and discovery.
• Incident Investigation and Remediation – Collaborate with cybersecurity teams to investigate identified threats, analyse intrusion artifacts (e.g., malware, source code), and implement remediation strategies to mitigate risks and prevent future incidents.
• Network Traffic and System Monitoring – Monitor and analyse network traffic, system logs, and metadata to detect malicious activities, identify vulnerabilities, and assess the operational impact of cybersecurity lapses.
• Development of Detection and Defence Mechanisms – Develop and optimise detection signatures, rules, and content for cyber defence tools, ensuring the organisation’s systems are hardened against emerging threats and vulnerabilities.
• Reporting and Documentation – Document and elevate incidents, provide technical reports, and deliver actionable intelligence to leadership and stakeholders, ensuring compliance with cybersecurity policies, laws, and regulations.

About You

• Has a passion for cybersecurity and an interest in protecting digital environments, shown through qualifications or practical experience.
• Can use or is willing to learn programming or scripting languages (e.g., Python, Java, PowerShell).
• Understands or has experience in areas like network security, digital forensics, penetration testing, or incident response.
• Brings strong analytical and problem‑solving skills and can adapt to complex challenges.
• Works well in diverse teams and can explain technical concepts clearly to non‑technical audiences.
• Preferred Qualifications: Professional certifications such as CEH, OSCP, or CompTIA Security+ are desirable, as is knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001) and incident response methodologies.

Security requirement: Candidates must achieve and maintain Developed Vetting (DV). Failure to do so may result in termination of employment.

Training

Fast‑tracked basic military training will introduce you to the Armed Forces without some traditional military skills (e.g., weapon training).

Bespoke professional training will provide foundational cyber skills for Defence and show how your work supports national security.

Ongoing specialist training and mentoring, including industry courses (e.g., SANS), will be available throughout your role.

Salary & Benefits

Base Salary: Starting at £42,782, with progression to over £60,000.

Additional cyber‑skills payments: From £6,270 per year for junior operators to £26,125 per year for highly experienced individuals.

Pension: Automatic enrolment in the non‑contributory Armed Forces Pension Scheme 2015 (opt‑out available).

Leave: 30 days annual leave plus eight UK bank holidays.

Other benefits: Free medical and dental care, childcare benefits, enhanced parental leave, and flexible service arrangements.

Applicationprocess

Application: submit CV via the SERVE portal. Eligibility checks are completed, and applications are sifted for suitability.

Interview: shortlisted candidates are invited to an interview covering technical skills, qualifications and suitability for military service (command, leadership and management experience).

Medical Assessment: all candidates must pass a medical screening.

Offer: successful candidates receive terms and conditions, and a job offer letter.

Don’t meet all the requirements? Get in touch anyway – we are keen to hear from talented individuals from diverse backgrounds. For questions or more information, contact: People‑Tx‑[e-mail].