Senior Cyber Security Analyst

Job description:

Are you interested in safeguarding Scotland's digital future whilst supporting Agriculture and Rural Economies?

The Agriculture and Rural Economy (ARE) Directorate works to support Scotland's sustainable economic growth, especially in the rural economy, making the most of Scotland's environment, natural assets and advantages - its people, landscapes, biodiversity, agriculture, food & drink and animal welfare. 

ARE Digital & Data (AD&D) is responsible for developing and maintaining the Information Technology systems required by ARE to deliver their Business Services. AD&D covers the full spectrum of IT disciplines required to deliver and maintain the IT Services and complex IT Applications required by ARE. Most AD&D staff are IT professionals and members of the BCS RoleModelplus scheme. RoleModelplus allows users to identify their gaps, create and update their professional development plans and work towards their goals and objectives. You do not need to be a member of BCS to take advantage of RoleModelplus. The Architecture Office and Cyber Security & Risk team are part of the Digital Strategy and Governance Branch. 

The Branch is responsible for all areas of Information Security to support a complex business area. Security is there to assist the department function safely in a fast moving cyber world. Security is responsible for the selection, design, justification, implementation and operation of controls and management strategies to maintain the security, confidentiality, integrity, availability, accountability and relevant compliance of information systems with legislation, regulation and relevant standards.

Cyber Security & Risk are responsible for the overall Information security for ARE. The capability covers Cyber Security, Defence, Vulnerabilities, and Cyber Risk. This is an exciting opportunity for a Senior Cyber Security Analyst to be responsible for protecting the confidentiality, integrity and availability of information assets and systems used within ARE, through application of their Cyber Security knowledge and close working with the wider teams within AD&D. In addition, this role will feed in to small to medium size projects, and the continual service improvement process within the team and wider business.

Responsibilities:

• Develop security operating procedures for use across multiple information systems or maintain compliance with them. 
• Apply routine security procedures appropriate to the role, such as patching, managing access rights, malware protection, or vulnerability testing with autonomy. 
• Develop and test rules for detecting violations of security operating procedures with autonomy.
• Follow documented principles and guidelines for incident management, incident investigation, and response activities.
• Advise others on incident management, incident investigation, and response processes. Able to understand and articulate the impact of vulnerabilities on existing and future designs and systems, and able to provide insight into how these can be exploited.
• Will include mentoring of less experienced Cyber Security Analysts within the team.

Success Profiles

Success Profiles are specific to each job, and they include the mix of experience, skills and behaviours candidates will be assessed on. 

Technical Skills

This role is aligned to the Cyber Security Analyst role within the Cyber Security and Information Assurance job family. 

You can find out more about the skills required, here:

These skills are assessed by technical assessment, designed to represent the role. Candidates reaching this stage will receive a Technical Assessment Candidate Pack which outlines the specific skills to be assessed, plus the method of assessment.

Experience

Lead Criteria 1: Good knowledge and understanding of the internal and external cyber security risks to digital systems and services. 

Lead Criteria 2: Experience of cyber security tools & techniques, and an understanding of the role they play as part of a wider digital infrastructure. Experience of engaging with, and managing, a wide range of internal and external stakeholders, including senior officials, customers and suppliers. 

Experience is assessed at sift, along with a more in-depth assessment at interview. 

Behaviours

• Changing and Improving - Level 3
• Working Together - Level 3

You can find out more about Success Profiles here: Success profiles: candidate guide -

How to apply

Apply online, providing a CV and Supporting Statement (of no more than 750 words) which provides evidence of how you meet the skills, experience and behaviours listed in the Success Profile above.

Artificial Intelligence (AI) tools can be used to support your application, but all statements and examples provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, and presented as your own) applications will be withdrawn and internal candidates may be subject to disciplinary action.  

Please see our candidate guidance for more information on acceptable and unacceptable uses of AI in recruitment.

If invited for further assessment, this will consist of an interview and analysis exercise. 

Assessments are scheduled for w/c 9th February 2026 however this may be subject to change.

About us

The Scottish Government is the devolved government for Scotland. We have responsibility for a wide range of key policy areas including: education, health, the economy, justice, housing and transport. We offer rewarding careers and employ people across Scotland in a wide range of professions and roles.

Our staff are part of the UK Civil Service, working for Ministers and senior stakeholders to deliver vital public services which improve the lives of the people of Scotland.

We offer a supportive and inclusive working environment along with a wide range of employee benefits. Find out more about what we offer.

As part of the UK Civil Service, we uphold the Civil Service Nationality Rules.

Working pattern

Our standard hours are 35 hours per week and we offer a range of flexible working options depending on the needs of the role. From October 2025, the Scottish Government will require staff in hybrid-compatible roles to work in-person 40% of the time, either in an office or other agreed work location. If you have specific questions about the role you are applying for, please contact us.

DDaT Pay Supplement

This post is part of the Scottish Government Digital, Data and Technology (DDAT) profession, as a member of the profession you will join the professional development system. This post currently attracts a £5, annual DDAT pay supplement, applicable after a 3-month competency qualifying period. The payment will be backdated to your start date in the role. Pay supplements are reviewed regularly and there is one currently underway. Changes will be communicated when the review is concluded. 

Security checks

Successful candidates must complete the Baseline Personnel Security Standard (BPSS), before they can be appointed. BPSS is comprised of four main pre-employment checks – Identity, Right to work, Employment History and a Criminal Record check (unspent convictions).

You can find out more about BPSS on the UK Government website, or read about the different levels of security checks in our Candidate Guide. 

Equality statement

We are committed to equality and inclusion and we aim to recruit a diverse workforce that reflects the population of our nation. 

Find out more about our commitment to diversity and how we offer and support recruitment adjustments for anyone who needs them.

Further information

Find out more about our organisation, what we offer staff members and how to apply on our Careers Website.

Read our Candidate Guide for further information on our recruitment and application processes.

Apply before 23:59 on 18th January. This post is open to internal candidates and Common Citizenship Organisations only. External candidates and staff from UK Other Government Departments are not eligible to apply for this vacancy.