Cyber visibility lives or dies on its data, and this role owns that end of it. Under the team lead you would analyse the sources that describe assets, configurations and vulnerabilities, validate what has been onboarded, and lead the technical discussions about correlation and procedure rather than waiting to be told.

It is not a back-room post. A real part of it is representing the agency to stakeholders — presenting findings, making recommendations, and writing the documentation that survives you.

What you would be doing

• Analyse data sources covering assets, configurations and vulnerabilities.
• Validate the data sources that have been onboarded.
• Lead technical discussions on sources, correlation and standard operating procedures.
• Prepare and present technical findings, recommendations and documented results.
• Support data source discovery, onboarding and the data lifecycle.
• Review the service for depth, compliance and vulnerability exposure.
• Represent the agency to stakeholders with presentations and recommendations.
• Document the processes, and integrate the data with other consumption points in the cyber security centre.

What you would bring

• At least three years supporting a cyber security environment.
• At least two years with data visualisation tools — Power BI, Tableau or Grafana — and the ability to read both structured and unstructured data.
• Enterprise application integration and data synchronisation experience.
• Relational databases: PostgreSQL or Microsoft SQL Server.
• LDAP and Active Directory integration.
• REST API development and integration.
• Cyber security fundamentals — risk analysis, threat modelling, secure handling of data, and tools for vulnerability assessment, forensics and log correlation.
• Sound understanding of switching, routing and security technology, and of the TCP/IP stack underneath them.
• Fluent professional English, and the ability to work alone and in a team.

A degree in a related discipline with three years of post-related experience, or roughly ten years of progressive experience instead. Jira APIs and Splunk Enterprise are strong assets, as is prior work in a military or governmental organisation.