NZ soldier joins cyber drills in Philippines for first time

New Zealand Army soldier Lance Corporal Luke Donovan is taking part in the cyber component of Exercise Balikatan in the Philippines, marking New Zealand's first participation in the annual military drills.

Donovan, from Palmerston North, is serving as a host analyst in a cyber team alongside military personnel from the United States and the Philippines. In that role, he looks for signs that a malicious actor may have compromised a network or system.

Exercise Balikatan is a bilateral US-Philippine exercise spanning air, land, sea, space and cyber operations. This year's programme also includes Australia, France, Japan, Canada and New Zealand.

The cyber component centres on simulated attacks and defensive operations in a closed cyber range. Participants must identify threats, track hostile activity and respond across separate networks designed to mirror operational pressure.

Working with partner forces has been a highlight, Donovan said.

"One of the biggest highlights has been working alongside my teammates from the United States Navy and the Philippine Navy. It has been awesome learning about their roles, their countries, and swapping stories from service," he said.

He described a training environment built around sustained monitoring and rapid communication between teams and command structures.

"We have been defending a simulated and virtualised network against simulated threats.

"Each team has a different network, which really tests how well we communicate and manage issues across the command chain within the cyber environment."

Cyber pathway

The 24-year-old joined the New Zealand Army in 2020 after developing an interest in computers at an early age. The service offered a path to formal technical training while allowing him to work directly with systems and networks.

"I grew up really interested in computers, building PCs, figuring out how systems work, and gaming in my spare time.

"My uncle, who was serving at the time, encouraged me to look at the Army, specifically as an Information Systems Operator.

"It stood out as a chance to get proper training in computers while working hands-on with technology every day, which lined up well with what I already enjoyed doing."

His training includes Cisco Certified Network Associate Level 1 and Level 2 certifications and a year of study at University College of Learning towards a Bachelor of Information and Communication Technology. Since joining the Army cyber team, he has also gained certifications including OSDA, eCIR, eCTHP and eEDA, and continues further study through SANS courses.

The role requires regular technical preparation as well as practical work during exercises.

"A lot of our time is spent studying for courses, preparing and running lessons for the team so we can keep learning from each other, and getting ready for exercises by sharpening our skills and toolsets.

"During exercises, things step up a notch. We are usually on the tools for seven to nine hours a day, building hunt plans, researching activity, and chasing down anything that looks suspicious.

"No two exercises are the same, especially when we are working alongside partner nations, which keeps things challenging and interesting."

The Army's participation reflects the growing role of cyber operations in multinational military activity, where digital defence is integrated alongside conventional domains. The scenarios used in the cyber range are designed to reflect the pace and frequency of attacks armed forces may face in operational settings.

Donovan said the field offered a path for people interested in combining technical training with military service.

"Cyber in the NZ Army is an exciting and fast-growing space and being involved at the ground level puts you in a great position to receive world-class training at no cost, work alongside some of the best in the field, and take part in challenging and engaging exercises with partners from around the world."