Incident Analyst - Joint Security Coordination Centre (JSyCC)

Defence Security and Resilience (DSR) exists to keep the UK’s Defence secure and resilient against evolving threats. Our mission is critical: protecting the people, assets, and information that underpin national defence at home and overseas. We set policy, counter hostile threats, and enable Defence to operate confidently in a complex and dynamic risk environment.

As part of DSR, you’ll be at the heart of shaping strategy, driving innovation, and embedding a culture of security and resilience across Defence. If you want to make a real impact on Defence security, tackle high-profile challenges, and collaborate with experts across government and industry, this is your opportunity.

About the Strategic Security Centre (SSC)

The SSC is Defence’s central hub for security and resilience, turning insight into action. We integrate threat intelligence, risk assessments, and performance data into a real-time enterprise-wide picture, providing situational awareness that identifies emerging trends and priorities. From setting strategic direction to commissioning threat assessments and horizon scanning, the SSC ensures Defence stays ahead of risks and is ready to respond.

This position is advertised at 37 hours per week.

About the role

This is an exciting role within the Joint Security Coordination Centre (JSyCC), the team that oversees and coordinates responses to security incidents across Defence. JSyCC is part of the SSC and plays a critical role in turning incident data, operational insight and analysis into meaningful action for DSR.

As a JSyCC Security Incident Analyst you will:

• Review and assess Security Incident Reporting Forms (SIRFs) flagged as serious & severe risk to Defence and liaise with the Warning Advice Reporting Point (WARP) to drive investigation outcomes.
• Analyse security incidents, identifying patterns, trends, and opportunities for tactical & strategic improvements.
• Produce clear, actionable insights and recommendations to strengthen security measures and prevent future incidents.
• Collaborate with internal and external stakeholders, including, SJC GUARDIAN, Ministry Defence Police, CyDR and Defence Intelligence, to enhance security processes.
• Contribute to continuous improvement of the Defence Incident Management Database (DIMDb) (the MOD’s central repository for security incident data), ensuring data integrity and usability for tactical and strategic decision-making.

Flexible working patterns may be considered, but due to operational requirements, part-time & job share is not suitable due to business critical need. Some domestic travel will be required between RAF Wyton and London depending on the candidate's work location.

For the successful candidate, we will provide training and development in Defence security, JSyCC processes and additional analytical capability where needed to support success in the role.

The role is open to Sole UK Nationals only.

Open to UK nationals only.

This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours and Experience.

Prior to completing the full application candidates will be required to successfully complete and pass a Civil Service Numerical test.

Candidates will be required to provide CV details to include job history; qualification details and previous skills and experience.

Candidates will be required to provide a Personal Statement which provides examples of how they meet the criteria listed in the essential/desirable criteria section (no more than 500 words).

At sift, you will be assessed against your CV, Personal Statement and the following Behaviours:

• Working Together
• Changing and Improving
• Communicating and Influencing

If a large number of applications are received your personal statement & the lead Behaviour (Working Together) will be scored only.

At Interview, you will be assessed against the following Behaviours:

• Working Together
• Changing and Improving
• Communicating and Influencing

The interviews will be face to face and will be held at RAF Wyton.

Interviews are scheduled to take place mid to late September.

Further Information:

Should you be invited to complete the online tests, please allow sufficient time to complete the tests and the remainder of the full application form; only candidates who are successful at the test stage will be invited to complete the remainder of the application by clicking ‘Submit Application’. Your application must be completed by 23:55 on the closing date of the vacancy. Late submissions cannot be accepted. The tests are not timed, as they work by giving you harder questions if you answer the previous question correctly, and easier if you get it wrong. You should allow up to an hour for each test, and each test must be completed before you will be invited to complete the second part of your application. Internet access will be required for the duration of the test. Please refer to the attached Candidate Guidance for further information.

Candidates that reach the minimum required pass mark will have their results saved as a banked score against the following tests:

• New Civil Service Verbal Test
• New Civil Service Numerical Test

When a candidate has a banked score they’re not asked to re-take the same test providing it is set at the same level. Scores will be banked for a 6 month period from the date of test completion. If a candidate is invited to take the same test against multiple vacancies, the banked score will be recognised against all vacancies and all active applications will progress.

CSJT scores cannot be banked as each test is generated from the behaviours required for a specific role which will vary between recruitment campaigns.

If you require any particular arrangements (for example due to a disability or health problem) to be made in order for you to complete the online test you MUST contact the DBS Enquiry Centre on 0800 345 7772 BEFORE accessing the online test.

Opening times Mon -Friday 0800- 1600 hrs.

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

There may be occasions where it is not practicable or appropriate to interview all DCS candidates that meet the minimum criteria for the job. For example, in certain recruitment situations such as a high volume of applications, seasonal demand, or peak periods, the employer may wish to limit the overall number of interviews offered to both DCS and non-DCS applicants.

As a result of the changes to the UK immigration rules which came into effect on 1 January 2021, the Ministry of Defence will only offer sponsorship for a skilled worker visa under the points-based system, where a role has been deemed to be business critical. This role does not meet that category, and we will not sponsor a visa. It is therefore NOT open to applications from those who will require sponsorship under the points-based system.

Should you apply for this role and be found to require sponsorship, your application will be rejected and any provisional offer of employment withdrawn.

The Ministry of Defence requires all candidates who are successful at interview to declare any outside interests. These declarations will be discussed with successful candidates following the interview process and before a formal offer of employment is made, as some outside interests may not be compatible with MOD civilian roles. This will not, in the majority of cases, prevent employment in MOD, but it is a measure that must be taken to ensure that appropriate mitigations can be put in place to manage any potential, perceived or actual conflicts of interest from the first day of employment.

The Ministry of Defence adopts a zero-tolerance approach to unacceptable behaviours, which includes bullying, harassment, sexual harassment, discrimination, and victimisation. You will not be eligible and will not be considered for this post if you have been dismissed from a role for such unacceptable behaviours within the last five years. This will also apply if you resign or otherwise leave a role but, because of an adverse decision, would have been dismissed for gross misconduct had you continued in that employment. Pre-employment checks will be carried out.

Feedback will only be provided if you attend an interview or assessment.