Senior Cyber Security Analyst

Role overview

Security operations and incident response

• Detect, triage, investigate, and respond to cyber events and incidents using security monitoring and analysis tools.
• Lead and support incident response through investigation, containment, eradication, and resolution under agreed procedures.
• Analyze alerts, conduct threat hunting using IoCs and threat intelligence, and assess emerging threats and vulnerabilities.
• Support major incidents, post-incident reviews, and lessons learned; participate in out-of-hours or major incident work when required.
• Work with infrastructure, cloud, network, and development teams to resolve complex security issues and improve response procedures.

Security engineering and improvement

• Tune monitoring solutions, design detections and alerts, and identify opportunities to automate routine security activities.
• Evaluate security services, controls, and tooling; support platform onboarding and vulnerability management.
• Develop operational metrics, dashboards, and reporting, and contribute security input to project and product delivery.

Leadership and professional practice

• Advise technical and non-technical stakeholders and respond to security enquiries across Digital, Data and Technology and the wider business.
• Mentor analysts, maintain technical documentation and playbooks, and support security standards and procedures.
• Build relationships with colleagues, suppliers, and partners and contribute to continuous improvement and security culture.

Salary and pension

• Salary is £60,291–£70,987, including a 20% Digital, Data and Technology Annual Pay supplement; base salary is £50,243–£59,156.
• Civil Service Pension with an employer contribution of 28.97%.

Locations

• The posting lists Edinburgh and Glasgow as locations.

Employment details

Requirements

• Experienced Senior Cyber Security Analyst with expertise relevant to security operations and cyber incident response.
• Able to provide technical advice and guidance to technical and non-technical stakeholders.
• Able to mentor and support Cyber Security Analysts and promote knowledge sharing.
• Able to participate in out-of-hours or major incident activities when required.