Cyber Defence Analyst

Cyber Role Training (CyRT) is a suite of focussed Cyber training courses that prepare individuals to undertake roles in the MoDs Defensive Cyber organisation. Defence Cyber Analyst (DC1) equips a Defensive Cyber Analyst to act as the first human line of defence within a Security Operations Centre, dealing with automated alerts from the Network Intrusion Detection System that the Security Incident & Event Management system cannot resolve itself.

Key skills are developed in mapping the network, understanding why an alert was generated, how to investigate using logs and packet captures, how to triage an incident, resolve it and report onwards. Should the alert turn out to indicate a cyber-attack, the escalation process is also covered, locating the role of the analyst as part of a wider team.

This is the initial course to unlocking further career opportunities in Defensive Cyber.