Senior Cyber Security Engineer at Scottish Government Recruitment

Glasgow, GB

on-site · full-time · Visa sponsorship

Apply for this role at Scottish Government Recruitment

Responsibilities:
- Lead design, implementation, and assurance of cyber security controls across cloud platforms, applications, and infrastructure.
- Translate security policy and risk assessments into practical, risk‑based cloud security solutions.
- Embed security throughout the delivery lifecycle by working closely with Architecture, Cloud Engineering, DevOps, and Product teams.
- Provide hands-on technical authority: threat modelling, control implementation, security testing, and assurance activities.
- Develop and maintain automated security checks, policy-as-code, monitoring, and incident response runbooks.
- Support compliance and governance activities required by public sector standards.

Requirements:
- Experience implementing cloud-native security controls and embedding security by design across cloud services and applications.
- Strong knowledge of IAM, encryption and key management, logging and monitoring, and secure configuration management.
- Practical experience with automation and IaC tooling to enforce security controls and perform continuous assurance.
- Ability to translate policy into technical controls and provide clear, risk-based guidance to delivery teams.
- Good communication and stakeholder engagement skills; able to act as a technical authority across teams.
- Desirable: experience with public sector security frameworks and background in assurance activities (e.g., BPSS, formal checks).