Cyber & Specialist Operations Command (CSOC) PSYA - Security Incident Management Advisor


Location
Northwood
Hours
Full Time - 37 hours per week
Salary
£30,740 per annum
About the Role
The Security Incident Management Advisor role is part of a small, busy team comprising The Warning, Advice and Reporting Point (WARP), which is CSOC’s focal point for all security incidents within the Command. You will triage and record incidents, direct investigations, and forward reports to relevant departments. Your role includes conducting data and trend analysis, identifying lessons to influence policy, and enabling CSOC Sub-Commands to understand their security strengths and weaknesses.
This post sits within the Principal Security Advisor (PSyA) team, providing advice to the Commander CSOC (4*) on all security issues relating to the command. This includes advising on HMG and MOD security policy, evaluating security risks and protective measures, and providing strategic oversight of all security activities across CSOC sites, units, and personnel worldwide. The team also offers advice, direction, and support to constituent organisations as required.
The WARP serves as the main point of contact for general security questions and ensures security messaging is disseminated to Sub-Commands and formations operating in varying threat environments globally.
Working in a mixed civilian and military team, you will need to be flexible, adaptable, and able to act on your own initiative while quickly developing strong working relationships with a wide range of customers.
Being embedded within a team of security experts will allow you to gain extensive knowledge and experience of security functions in a complex and challenging environment. Exposure to Defence, HQ CSOC, and constituent organisations will provide valuable insight across a range of security specialisations.
Key responsibilities include operating the CSOC WARP as the single point for issuing security messages and receiving security incident reports, triaging incidents, tasking investigations, managing incident lifecycles, conducting statistical analysis using Excel and other tools, and assisting in managing investigations into security breaches, incidents, and near misses to ensure lessons are learned and improvements made.
Examples of incidents include loss or theft of classified or personal information, breaches of security policy, incorrect transmission or insecure handling of classified information, security incidents concerning MOD computer networks, hostile reconnaissance, intrusions onto Defence property, and loss or theft of items attractive to criminal and terrorist organisations (ACTO).
You will also assist in fostering a strong security culture across the command, support team members with security enquiries, provide office management functions to triage security advice requests, and assist with general team administration.
Some UK travel may be required. Participation in an out-of-hours duty roster is required on a rotational basis.
Experience
Experience in security incident management, including triaging and directing investigations, is essential. You must be able to understand the nature and severity of security breaches and apply a triage process to direct appropriate counter compromise, impact assessment, and investigative activity. Experience with data input, extraction, and statistical analysis using tools such as Excel is required. Previous work within a security or defence environment is advantageous.
About you
You will be an enthusiastic individual with strong interpersonal, organisational, and collaborative skills. The role requires managing a busy workload and high volume of throughput while balancing business needs. You must be flexible, adaptable, able to work on your own initiative, and develop effective working relationships with a wide range of stakeholders. Sound judgement and the ability to make timely, informed decisions are essential. You must be a sole UK national and able to obtain Developed Vetting clearance.
Qualifications
You must be suitably qualified and experienced to make sound breach management assessments and judgements. Security clearance at Developed Vetting level is required prior to appointment. This post is only open to sole UK nationals. No specific academic qualifications are stipulated, but relevant security or investigative training and certifications will be advantageous.
Ministry of Defence





















