Description This is a critical role for the organisation. Highly technical, requiring advanced knowledge of cyber security principles and technical architecture. The post holder needs the ability to interpret, communicate and explain technical principles to non-technical staff throughout the organisation. This will include discussions and presenting to the VisitScotland Leadership Group, Board and Audit & Risk Committee. The post holder will report to the Cyber Security Specialist for line management and work closely with the teams within the IT Department and customer groups in the delivery of cyber security and IT services. The role of Cyber Security Engineer at VisitScotland supports the delivery of technical and policy-based controls to ensure the best possible protections are in place to safeguard VisitScotland staff, data and assets in line with Scottish Government Cyber Resilience Framework and National Cyber Security Centre (NCSC) recommendations. For more information, please see the full job description Contract Type: Permanent Salary Grade: Grade G, (£ 43,765 - £48,979) Last Date for Submissions: 26 February 2026 This role can be based out of any VisitScotland office location across Scotland. VisitScotland operates a hybrid working culture, partially office and partially home based. With family-friendly and flexible working policies, we offer an impressive range of benefits and professional development. We are an equal opportunities employer, and value diversity in all its forms. You can read more about working for us, our benefits and our culture by clicking here Responsibilities What is the job? Technical lead responsible for the day-to-day management of Firewalls, VPNs, threat prevention, detection, and response tools and Vulnerability Management tools to ensure all IT systems have appropriate and up to date protection against cyber security threats in line with VisitScotland’s security policies and procedures. Working with the Cyber Security Specialist, providing technical expertise to protect the organisation by maintaining and developing a multi-layered approach to security including threat prevention, detection, and response tools, firewalls, vulnerability management, cloud security solutions, cyber security testing and certifications e.g. Cyber Essentials Plus. Responsible for developing and delivering Cyber awareness for the organisation, understanding the human factors of Security. Maintain a repository of cyber guidance, work with the Cyber Resilience Group to develop and deliver awareness campaigns and training, running regular simulation tests. Contributing to all aspects of Cyber security including security policies, incident management, operational security, and risk management Providing technical expertise in delivering the organisation’s cyber resilience response, including technical and strategic direction, implementing solutions, developing, and maintaining policies, processes and procedures Key technical member of the Cyber Incident Response Team, with responsibility for providing expertise during incidents, including major incidents, as well as acting as the primary cyber security responder as needed Support the organisation with the security response during business continuity and disaster recover incidents. Responsible for the on-going development and testing of playbooks and the Cyber Incident Response Plan (CIRP) Responsible for the day to day gathering of threat intelligence, investigating, reporting, escalating and mitigating potential cyber threats, including the on-going development of regular security checks and controls and participating in VisitScotland’s Cyber Resilience Group, attending conferences and workshops etc. Providing technical knowledge and expertise to the IT team on all security related aspects of day-to-day cyber resilience including vulnerability management, IT Security tooling and Cyber Awareness. Working with team members to manage and develop the security of IT systems including Windows Server / Active Directory, Microsoft Advanced Threat Protection tools, BitLocker, RADIUS, Secure FTP, routers, switches including Wireless technologies This role may require the job holder to engage in out of hours IT support as required. Qualifications What you must have Degree qualification in an IT Security related discipline and/or relevant experience working with Cyber Security Current technical understanding of cyber security threats, trends and solutions. Strong working knowledge and experience managing, configuring and supporting a good mix of the following technologies: Security technologies – Firewalls, VPNs, Vulnerability management, unified security tools providing threat protection across endpoints, identities, email, and cloud applications, Identity and Access Management, cryptography, certificate services, Phishing Simulation, Security Awareness and Threat Intelligence, logging and monitoring Microsoft technologies – Microsoft OS (server and workstation), Active Directory, DNS, Entra ID Network technologies – routers, switches, wireless technologies, TCP/IP Strong analytical skills with problem-solving abilities. Excellent communication and customer facing skills. Full driving license