Cyber Subject Matter Expert
Job Title: Cyber Subject Matter Expert
Department: Public Sector
Reports to: Programme Lead
Direct Reports: None
Job purpose:
Our vision is for Capita Learning to be a strategic learning partner for our clients. This will allow us to improve our clients' organisational capability and jointly deliver better business outcomes for them. To achieve this, we need to simplify, be truly client focused and invest in our Learning capability.
The Cyber Specialist will play a central role in the development of training materials by applying deep technical knowledge of cyber threats, detection engineering, and defence systems, underpinned by hands-on experience in deploying, configuring, and maintaining information systems and networks. You will contribute to the design of accurate, relevant, and operationally aligned content by translating complex technical processes into structured learning outputs. You must be able to demonstrate strong analytical, communication, and documentation skills, supporting the development of an array of products to support theory, synthetic, practical training, and progression/confirmation exercises, while ensuring alignment with policy, procedures, and evolving operational requirements.
SME Responsibilities:
Course Design & Development (DSAT-Aligned)
- Support the development of cyber security engineering courses covering threat detection, infrastructure and networks training.
- Translate operational threat intelligence into structured learning objectives, modules and assessment criteria.
- Contribute to Training Needs Analysis (TNA) activities by defining required Threat Intelligence competencies across Defence roles.
- Review and assure course content for accuracy, relevance and Defence alignment.
Threat Intelligence Integration into Training
- Apply hands-on experience in deploying, configuring and maintaining systems and networks to ensure training content reflects real-world environments.
- Apply hands-on experience in cyber threats and detection engineering to ensure training content reflects real-world environments.
- Develop case studies, scenarios, and practical exercises to support the development of deployed system and network training.
- Develop case studies, scenarios, and practical exercises incorporating realistic cyber detection tasks.
Stakeholder Collaboration
- Work closely with Defence Cyber Academy (DCA) instructors, DSAT practitioners and course designers
- Provide expert input into course reviews, governance and assurance activities.
Skills/Knowledge & Experience:
Essential Skills:
- SC Clearance
- Strong experience in Cyber Threat Intelligence, detection engineering, or cyber operations.
- Hands-on experience with System and network deployment, configuration, and maintenance, Detection technologies (SIEM, EDR, logging/monitoring tools)
- Deep understanding of Threat intelligence life cycle, MITRE ATT&CK and adversary TTPs
- Proven ability to translate complex technical concepts into structured training or documentation.
- Strong stakeholder engagement skills within complex MOD environments.
- Strong written communication skills, with the ability to explain complex concepts clearly and concisely.
- Experience in creating exercises, simulations or practical learning activities.
- Exceptional interpersonal skills and an ability to build strong relationships with top-level stakeholders.
- Flexibility to travel to face-to-face meetings when required (Defence Cyber Academy, Shrivenham).
- Exhibit a can-do attitude, adapting to support Capita Learning to deliver its priorities.
Desirable Skills:
- Experience in deploying/sustaining Military IS networks, and performing the role of detections engineer within a CyISOC.
- Experience working with cyber training platforms, labs or simulation tools.
- Exposure to curriculum development or course assurance processes.
- Understanding of Defence Systems Approach to Training (DSAT) and Joint Service Publication (JSP 822) quality standards, stages, activities and outputs required.
Personal attributes:
- A great team player with respect of colleagues and customers alike.
- Excellent communication skills, with an ability to convey complex and technical information simply and succinctly to a variety of stakeholders.
- Leads by example.
- Highly motivated.
- Critical thinking and Analytical.
Guidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business in relation to this vacancy.
Reference: 3130831715
Cyber Subject Matter Expert
Posted on Jun 30, 2026 by Lorien
Job Title: Cyber Subject Matter Expert
Department: Public Sector
Reports to: Programme Lead
Direct Reports: None
Job purpose:
Our vision is for Capita Learning to be a strategic learning partner for our clients. This will allow us to improve our clients' organisational capability and jointly deliver better business outcomes for them. To achieve this, we need to simplify, be truly client focused and invest in our Learning capability.
The Cyber Specialist will play a central role in the development of training materials by applying deep technical knowledge of cyber threats, detection engineering, and defence systems, underpinned by hands-on experience in deploying, configuring, and maintaining information systems and networks. You will contribute to the design of accurate, relevant, and operationally aligned content by translating complex technical processes into structured learning outputs. You must be able to demonstrate strong analytical, communication, and documentation skills, supporting the development of an array of products to support theory, synthetic, practical training, and progression/confirmation exercises, while ensuring alignment with policy, procedures, and evolving operational requirements.
SME Responsibilities:
Course Design & Development (DSAT-Aligned)
- Support the development of cyber security engineering courses covering threat detection, infrastructure and networks training.
- Translate operational threat intelligence into structured learning objectives, modules and assessment criteria.
- Contribute to Training Needs Analysis (TNA) activities by defining required Threat Intelligence competencies across Defence roles.
- Review and assure course content for accuracy, relevance and Defence alignment.
Threat Intelligence Integration into Training
- Apply hands-on experience in deploying, configuring and maintaining systems and networks to ensure training content reflects real-world environments.
- Apply hands-on experience in cyber threats and detection engineering to ensure training content reflects real-world environments.
- Develop case studies, scenarios, and practical exercises to support the development of deployed system and network training.
- Develop case studies, scenarios, and practical exercises incorporating realistic cyber detection tasks.
Stakeholder Collaboration
- Work closely with Defence Cyber Academy (DCA) instructors, DSAT practitioners and course designers
- Provide expert input into course reviews, governance and assurance activities.
Skills/Knowledge & Experience:
Essential Skills:
- SC Clearance
- Strong experience in Cyber Threat Intelligence, detection engineering, or cyber operations.
- Hands-on experience with System and network deployment, configuration, and maintenance, Detection technologies (SIEM, EDR, logging/monitoring tools)
- Deep understanding of Threat intelligence life cycle, MITRE ATT&CK and adversary TTPs
- Proven ability to translate complex technical concepts into structured training or documentation.
- Strong stakeholder engagement skills within complex MOD environments.
- Strong written communication skills, with the ability to explain complex concepts clearly and concisely.
- Experience in creating exercises, simulations or practical learning activities.
- Exceptional interpersonal skills and an ability to build strong relationships with top-level stakeholders.
- Flexibility to travel to face-to-face meetings when required (Defence Cyber Academy, Shrivenham).
- Exhibit a can-do attitude, adapting to support Capita Learning to deliver its priorities.
Desirable Skills:
- Experience in deploying/sustaining Military IS networks, and performing the role of detections engineer within a CyISOC.
- Experience working with cyber training platforms, labs or simulation tools.
- Exposure to curriculum development or course assurance processes.
- Understanding of Defence Systems Approach to Training (DSAT) and Joint Service Publication (JSP 822) quality standards, stages, activities and outputs required.
Personal attributes:
- A great team player with respect of colleagues and customers alike.
- Excellent communication skills, with an ability to convey complex and technical information simply and succinctly to a variety of stakeholders.
- Leads by example.
- Highly motivated.
- Critical thinking and Analytical.
Guidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business in relation to this vacancy.
Reference: 3130831715
Alert me to jobs like this:
Amplify your job search:
Expert career advice
Increase interview chances with our downloads and specialist services.
Visit Blog