Senior Cyber Security Analyst

Stott and May Inc.; Glasgow; Hybrid; GBP 60,000 - 68,000; Full time

Job summary

Stott and May Inc. in Scotland is seeking a Senior Cyber Security Analyst to act as SME for the security operations team. You will balance hands-on defense with leadership, overseeing alerts, investigations, and incident response across global teams.

The role requires strong SIEM/EDR/DLP and firewall experience, familiarity with Agile practices, and mentoring juniors. Hybrid working in Scotland, with a typical early start.

Qualifications

• Experience as SME or technical mentor in security operations.
• Hands-on knowledge of SIEM, EDR, DLP, and firewalls.
• Experience in global, multi-time-zone environments.
• Familiar with Agile and tools such as Jira, DevOps, ServiceNow/Cherwell.
• Strong communication and problem-solving under pressure.
• Nice-to-have: CompTIA Sec+, CySA+, or CISSP.

Responsibilities

• Oversee security alerts, analyze logs, and preempt threats.
• Lead investigations of major security incidents and coordinate response.
• Conduct vulnerability testing and collaborate to patch weaknesses.
• Guide the team to maintain incident reports and ISO27001 ISMS procedures.
• Monitor security performance, SLAs, and KPIs for management reporting.

Skills

SME mentoring

SIEM/EDR/DLP

Firewalls

Global/multi-time zone

Agile methods

Jira/DevOps/ServiceNow

Communication

Problem solving

Certifications: Sec+/CySA+/CISSP

Tools

Jira

DevOps

ServiceNow

Job description

Senior Cyber Security Analyst – SIEM, EDR, DLP, and firewalls – Scotland – Hybrid - £60,000 - £68,000

Our client is a highly respected, global firm looking to bring on a Senior Cyber Security Analyst to serve as the technical Subject Matter Expert (SME) for their security operations team. Reporting directly to the Cyber Security Team Leader, this person will balance advanced, hands‑on defense with leadership responsibilities—managing daily workloads, driving security initiatives, and mentoring junior analysts.

Key skills:

• Strong experience in cyber security and IT, ideally with prior experience acting as an SME or technical team mentor.
• Practical, hands‑on knowledge of SIEM, EDR, DLP, and firewalls.
• Experience working in global, fast‑paced environments across multiple time zones.
• Familiarity with Agile ways of working and tools like Jira, DevOps, and ServiceNow/Cherwell.
• Clear communication skills and a knack for solving tricky problems under pressure.
• Any of the following would be great - CompTIA Sec+, CySA+, or CISSP

Key Responsibilities:

• Oversee security alerts, dive deep into logs, and catch potential threats before they cause trouble.
• Lead investigations into major security incidents, perform root‑cause analysis, and coordinate with internal IT teams to contain issues.
• Run vulnerability testing and scanning, then work closely with stakeholders to patch up any weak spots.
• Guide the team in maintaining comprehensive incident reports and security procedures aligned with ISO27001 and internal ISMS.
• Check on overall security performance, tracking SLAs and KPIs to report back to management.

This is a hybrid position operating on an early schedule of 7:00 AM to 4:00 PM and prior experience in the legal sector is a "nice-to-have" rather than an essential requirement; the client is primarily focused on strong technical capabilities and mentorship skills.