Defence Cyber Analyst

Cyber Role Training (CyRT) is a suite of focussed cyber training courses that prepare individuals to undertake roles in the MODs defensive cyber organisation. Defence Cyber Analyst (DC1) equips you to act as the first human line of defence within a security operations centre, dealing with automated alerts from the network intrusion detection system that the security incident and event management system cannot resolve itself.

What you will learn

You will develop key skills in mapping the network, understanding why an alert was generated, how to investigate using logs and packet captures, how to triage an incident, resolve it and report onwards. Should the alert turn out to indicate a cyber-attack, the escalation process is also covered, locating the role of the analyst as part of a wider team.

How this course will help your career

This is the initial course to unlocking further career opportunities in defensive cyber.

Who can attend this course

• Military
• MOD civil servants
• Partners across government (PAG)

Security Check clearance required.

Before you attend

You will need to:

• complete pre learning on the Defence Learning Environment - details will be sent through once enrolled
• have completed the Cyber Foundation Pathway up to and including module 4 and are to be in, or posted to, an appropriate MOD defensive cyber role.

How the course will be taught

• Face-to-face

How you will be assessed

Practical and theory exams.