Cyber Security Operations Specialist in Glasgow

Salary: £75,000 - 75,000 per year

Requirements

• At least 2 years of experience as a Cyber Security Operations Analyst.
• Experience working with Splunk and SIEM operations.
• Proven experience across the end-to-end incident response lifecycle.
• Experience in detection engineering and alert development.
• Strong scripting or programming skills, ideally in Python and Bash; experience with C/C++ or Java is also valuable.
• Solid cybersecurity fundamentals, including network security, cloud security, cryptography, and forensics.
• Understanding of common network protocols and attacker abuse patterns.
• Aware of current APT groups and their tactics, techniques, and procedures.
• Knowledge of analysis techniques for Windows and/or Linux environments.
• Familiarity with threat intelligence frameworks and methodologies.
• Eligible for un-caveated UK SC Clearance.
• Ability to work in Glasgow on a hybrid basis and participate in on-call availability approximately one week per month.

Responsibilities

• Develop, maintain, and optimise detection content, primarily within Splunk SIEM, to identify threats across cloud, endpoint, and network environments.
• Collaborate across security functions to identify gaps in logging, alerting, and detection coverage aligned to business risk.
• Improve SecOps processes by recommending enhanced logging, identifying trends, and driving operational optimisation.
• Conduct security monitoring, alert triage, and continuous improvement of detection rules on a rotating schedule.
• Lead and support incident response investigations, ensuring high-quality documentation and escalation.
• Mentor and support junior analysts through guidance, coaching, and technical oversight.
• Serve as a technical subject matter expert on client engagements and present findings and recommendations to senior stakeholders.
• Participate in alert testing, readiness exercises, and incident response tabletop sessions.
• Stay current on emerging threat intelligence, attacker techniques, and relevant research.
• Provide on-call support for high-priority incident response when required.

Technologies

• Bash
• Cloud
• Cryptography
• Java
• Linux
• Network
• Python
• Security
• Splunk
• Windows

We are a high-performing Blue Team operating at the forefront of modern security operations, seeking an accomplished Senior Cyber Operations Analyst to join us in Glasgow on a hybrid basis. This is a technical, hands-on role for a senior analyst with strong engineering instincts, coding capability, and deep experience in incident response and detection engineering. We offer a salary of up to £75,000 plus on-call compensation, and the role includes approximately one week per month of on-call availability, with frequency varying by client. We are looking for a curious, proactive professional who is ready to advance their career and make a strong impact within a technically driven security team.