Senior Security Analyst

Senior Security Analyst - Threat & Vulnerability Management
A yearly allowance of up to £5,000 might be available depending on skills and experience

Glasgow or Darlington or Llandudno - please note SLC offer a blended working model which will typically be 2 days in the office and 3 days from home.

Pension:
A Civil Service Pension with an employer contribution of 28.97%. Please refer to the Civil Service Pensions website for more information.

Full time

Culture is at the heart of everything we do at SLC and we are guided by our five values which help make SLC a great place to work:
Accountability : We deliver on commitments, own our successes and mistakes, and strive for quality outcomes.
Join SLC’s Cyber Security team and lead the proactive evaluation and management of threats, vulnerabilities, and exposures to strengthen our security posture. You’ll drive both traditional Vulnerability Management and Continuous Threat Exposure Management, ensuring risks are identified, prioritised, and addressed before they impact the business. By overseeing Cyber Threat Intelligence, you’ll deliver actionable insights that inform defensive strategies and operational decisions, while managing the BAU penetration testing calendar and providing expert guidance for project delivery.

In this role, you’ll facilitate forums to review risk posture and remediation, oversee CTEM tooling, and monitor emerging threats and attack trends to keep SLC resilient against evolving risks. Collaborating closely with stakeholders, you’ll align security initiatives with business objectives, communicate intelligence insights to senior leaders, and champion enhancements through automation and best practices. With a commitment to continuous learning and mentoring junior team members, you’ll play an important role in building capability and resilience across the organisation.

Excellent understanding of vulnerability management processes, best practices, and hands-on experience with exposure management, remediation coordination, and penetration testing methodologies/scoping.
Familiarity with IDS/IPS, encryption, cryptography, key management, and firewalls, alongside awareness of infrastructure systems including Windows, UNIX/Linux, and Solaris.
Ability to interpret cyber threat intelligence, gather insights from trusted sources, and monitor emerging threats to advise on secure solutions.
Commitment to continuous learning, mentoring junior team members, and building team capability and resilience.
Solid grounding in current security standards and frameworks such as ISO 27001 and PCI-DSS.
Troubleshooting experience with UNIX/Linux OS will be a great advantage but is not essential.


We support colleagues to unlock their potential through our Career Pathways development programme and offer an excellent benefit and rewards package that includes:

~28 days annual leave plus 8 public holidays
~ Option to buy/sell annual leave
~ Flexi-time and enhanced flexible working options available
~ Option to join the Civil Service pension scheme
~ Life insurance cover for 4 x annual salary
~ Enhanced company sick pay and family leave including maternity, paternity and adoption
~ Contributory lifestyle benefit options including discounts at hundreds of retailers, cycle to work scheme, access to the Civil Service Sports and Leisure Club for discounted gym memberships, and an optional dental insurance scheme
~ The Legal Bits

This will include employment history, criminal record check, credit reference check and fraud check.

SLC are committed to ensuring our recruitment processes are inclusive for all candidates and will make reasonable adjustments for those who consider themselves to have a disability or long-term condition in line with the Equality Act 2010.