Description Are you interested in safeguarding Scotland’s digital future? Scottish Government’s Cyber Security Unit are responsible for the overall Information security of the Scottish Government. The branch is divided into a number of different teams, covering Cyber Security Defence, Vulnerabilities, Education, and Risk. This role will be in the Cyber Defence Team, who are focused on the proactive elements of Cyber Security. As a Senior Cyber Security Analyst, you’ll play a key role in protecting the confidentiality, integrity and availability of our information assets and systems through application of your Cyber Security knowledge. You’ll work closely with colleagues to detect threats, enhance security, contribute to other projects, and influence continuous service improvements within the branch. Responsibilities Protecting the confidentiality, integrity, and availability of information and information systems used by government and Partners Across Government. Explain the purpose of and provide advice and guidance on the application and operation of elementary physical, procedural and technical security controls. Perform security risk, vulnerability assessments, and business impact analysis for medium complexity information systems. Investigate suspected attacks and manages security incidents including use of forensics where appropriate. Maintain security administration processes and check that all requests for support are dealt with according to agreed procedures. Provide guidance in defining access rights and privileges. Investigate security breaches in accordance with established procedures and recommend required actions and supports / follows up to ensure these are implemented. Maintain current knowledge of malware attacks, and other cyber security threats. Specify requirements for environment, data, resources and tools. Interprets, executes and documents complex test scripts using agreed methods and standards. Maintain knowledge of specific specialisms, provide detailed advice regarding their application and executes specialised tasks. Responsibilities Success Profile Success profiles are specific to each job and they include the mix of skills, experience and behaviours candidates will be assessed on. Technical / Professional Skills: We will assess you against the following technical skills during the selection process: 1. Cyber security operations - Practitioner 2. Incident management, incident investigation and response - Practitioner 3. Information risk assessment and risk management - Practitioner 4. Specific security technology and understanding - Practitioner This role is aligned to the Cyber Security Analyst job role within the Cyber Security and Information Assurance job family. You can find out more about the skills required here. Experience: Good knowledge and understanding of the internal and external cyber security risks to digital systems and services. Experience of engaging with, and managing, a wide range of internal and external stakeholders, including senior officials, customers and suppliers. Behaviours: Changing and Improving (Level 3) Working Together (Level 3) You can find out more about Success Profiles Behaviours, here. How to apply Apply online, providing a CV and Supporting Statement (of no more than 750 words) which provides evidence of how you meet the skills, experience and behaviours listed in the Success Profile above. You will not be tested on the technical skills at sift stage. If invited for further assessment, this will consist of an interview and DDaT assessment where we will test all criteria outlined in the Success Profile above. The sift is scheduled for w/c 31st March. Assessments are scheduled for w/c 14th April however this may be subject to change. Qualifications About Us The Scottish Government is the devolved government for Scotland. We have responsibility for a wide range of key policy areas including: education, health, the economy, justice, housing and transport. We offer rewarding careers and employ people across Scotland in a wide range of professions and roles. Our staff are part of the UK Civil Service, working for Ministers and senior stakeholders to deliver vital public services which improve the lives of the people of Scotland. We offer a supportive and inclusive working environment along with a wide range of employee benefits. Find out more about what we offer. As part of the UK Civil Service, we uphold the Civil Service Nationality Rules. DDaT Pay Supplement This post is part of the Scottish Government Digital, Data and Technology (DDAT) profession, as a member of the profession you will join the professional development system. This post currently attracts a £5,000.00 annual DDAT pay supplement, applicable after a 3-month competency qualifying period. The payment will be backdated to your start date in the role. Pay supplements are reviewed regularly and there is one currently underway. Changes will be communicated when the review is concluded. Working Pattern Our standard hours are 35 hours per week, we offer a truly flexible working including full-time, part-time, flexitime, and compressed hours meaning you could work your full hours while working less than 5 days per week. We embrace a hybrid working style meeting in person when it is useful to do so where all colleagues will spend time in Saughton House, Edinburgh. If you have specific questions about the role you are applying for, please contact digitalcareersgov.scot Equality Statement We are committed to equality and inclusion and we aim to recruit a diverse workforce that reflects the population of our nation. Find out more about our commitment to diversity and how we offer and support recruitment adjustments for anyone who needs them. Further information Find out more about our organisation, what we offer staff members and how to apply on our Careers Website. Read our Candidate Guide for further information on our recruitment and application processes. Apply before: 30th March (23:59)