At a Glance
- Tasks: Protect enterprise environments from cyber threats and lead security initiatives.
- Company: Join a leading cyber security team in a dynamic tech environment.
- Benefits: Flexible remote work, competitive salary, and opportunities for professional growth.
- Other info: Collaborative culture with excellent career advancement opportunities.
- Why this job: Make a real impact in cyber security while working with cutting-edge technologies.
- Qualifications: 5+ years in cyber security with cloud security experience required.
The predicted salary is between 55000 - 70000 £ per year.
We are seeking an experienced Cyber Security Analyst to join our cyber security team. The ideal candidate will have a minimum of 5 years cyber security experience and 3+ years in cloud security and/or application security. The candidate will be able to demonstrate a proven track record of protecting enterprise environments against evolving cyber threats. This role requires a technically proficient lead analyst who can lead security initiatives and ensure our cloud and application infrastructure maintains the highest security standards, whilst maintaining business partnerships across the group.
Key Responsibilities
- Monitor and analyze security events across cloud and on‑premises environments using SIEM and security analytics tools
- Conduct thorough investigations of security incidents and provide detailed incident reports
- Develop and maintain incident response playbooks and procedures
- Experience with threat intelligence platforms and threat hunting
- Experience with security orchestration, automation and response (SOAR) platforms
- Understanding of data protection and encryption technologies
- Experience in regulated industries (financial services, healthcare, energy)
- Background in offensive security or penetration testing
- Design, implement, and maintain security controls across cloud platforms (AWS, Azure, GCP)
- Conduct cloud security assessments and architecture reviews
- Ensure compliance with cloud security best practices and frameworks (CIS Benchmarks, CSA CCM, NIST)
- Manage cloud‑native security tools including CSPM, CWPP, and cloud WAF solutions
- Implement and maintain identity and access management (IAM) policies and controls
- Lead cyber security programs and coordinate remediation efforts
- Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps)
- Stay current with emerging threats, vulnerabilities, and security technologies
- Contribute to security awareness training and documentation
- Facilitate Supplier Management and security input into bids
- Support compliance initiatives (SOC2, ISO27001, PCI‑DSS, GDPR, etc.)
- Develop and enforce security policies, standards, and procedures
- Conduct security audits and risk assessments
- Maintain security documentation and metrics reporting
Required Qualifications
- Minimum of 5 years cyber security experience
- 3+ years of hands‑on experience with cloud security (AWS, Azure, or GCP)
- Proven experience leading security incidents and coordinating response efforts
- Experience with security frameworks such as NIST CSF, MITRE ATT&CK, or Zero Trust architecture
Technical Skills
- Strong expertise in cloud security services and tools (AWS & Azure)
- Experience working with SIEM platforms (Splunk, Sentinel)
- Understanding of network security, firewalls, IDS/IPS, and VPN technologies
- Familiarity with security testing tools (vulnerability scanners, SAST/DAST, penetration testing tools)
- Experience with endpoint detection and response (EDR) solutions
Soft Skills
- Strong analytical and problem‑solving abilities
- Excellent written and verbal communication skills
- Ability to explain complex security concepts to technical and non‑technical audiences
- Leadership capabilities and experience mentoring team members
- Strong attention to detail and ability to work under pressure
- Collaborative mindset with cross‑functional teams
- Business partnering experience
Certifications (one or more preferred)
- CISSP (Certified Information Systems Security Professional)
- CCSP (Certified Cloud Security Professional)
- AWS Certified Security – Specialty
- Microsoft Certified: Azure Security Engineer Associate
Education: Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
Working Conditions
Some flexibility for remote work – 2 days minimum in office (Edinburgh preferred)
Equal Opportunities
We are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. We can support you with your application or through the hiring process if you have a physical or mental disability.
Cyber Security Specialist employer: Wood Mackenzie Limited
Join our dynamic team as a Cyber Security Specialist in Edinburgh, where we prioritise innovation and collaboration. We offer a supportive work culture that fosters professional growth through continuous learning and mentorship, alongside competitive benefits and flexible working arrangements. With a commitment to diversity and inclusion, we ensure that every employee feels valued and empowered to contribute to our mission of safeguarding enterprise environments against cyber threats.
StudySmarter Expert Advice🤫
We think this is how you could land Cyber Security Specialist
✨Tip Number 1
Network like a pro! Reach out to your connections in the cyber security field, attend industry events, and join online forums. The more people you know, the better your chances of landing that dream job.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your projects, incident response playbooks, or any cloud security assessments you've conducted. This will give potential employers a taste of what you can bring to the table.
✨Tip Number 3
Prepare for interviews by brushing up on common cyber security scenarios and frameworks like NIST CSF or MITRE ATT&CK. Practising your responses will help you feel more confident and ready to impress.
✨Tip Number 4
Don't forget to apply through our website! We love seeing candidates who are genuinely interested in joining our team. Plus, it makes it easier for us to keep track of your application and get back to you quickly.
We think you need these skills to ace Cyber Security Specialist
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the Cyber Security Specialist role. Highlight your experience in cloud security and application security, and don’t forget to mention any relevant certifications. We want to see how your skills match what we’re looking for!
Craft a Compelling Cover Letter:Your cover letter is your chance to shine! Use it to explain why you’re passionate about cyber security and how your background makes you a perfect fit for our team. Keep it concise but impactful – we love a good story!
Showcase Your Achievements:When detailing your experience, focus on specific achievements rather than just listing duties. Did you lead a successful incident response? Share the details! We’re keen to see how you’ve made a difference in your previous roles.
Apply Through Our Website:We encourage you to apply through our website for the best chance of getting noticed. It’s super easy, and you’ll be able to track your application status. Plus, we love seeing applications come directly from our site!
How to prepare for a job interview at Wood Mackenzie Limited
✨Know Your Stuff
Make sure you brush up on your cloud security knowledge, especially with AWS, Azure, and GCP. Be ready to discuss specific tools and frameworks like NIST CSF or MITRE ATT&CK, as well as your hands-on experience with SIEM platforms. The more you can demonstrate your technical expertise, the better!
✨Showcase Your Leadership Skills
Since this role involves leading security initiatives, be prepared to share examples of how you've successfully managed security incidents in the past. Talk about your experience coordinating response efforts and mentoring team members. This will show that you can take charge and guide others through complex situations.
✨Communicate Clearly
You’ll need to explain complex security concepts to both technical and non-technical audiences. Practice articulating your thoughts clearly and concisely. Use real-world examples to illustrate your points, and don’t shy away from asking if they need clarification on anything you’ve said.
✨Stay Current with Trends
Cyber security is always evolving, so make sure you’re up-to-date with the latest threats and technologies. Bring up recent incidents or trends during your interview to show that you’re proactive and engaged in the field. This will demonstrate your commitment to staying ahead of the curve.
