About the Roles
We are looking for experienced Cyber Security Engineers to lead on the secure design and operation of high-profile and leading-edge government common platforms. You’ll join a multi-disciplinary agile team, and work on the latest set of Cloud and Security technologies.
How You’ll Contribute
This is a great opportunity for Cyber Security Engineers with a deep technical understanding of the latest technologies, and proven experience leading the deployment of modern security tooling to provide Extended Threat Detection and Response, Patch and Vulnerability Management, Security Automation, Protective Monitoring, Identity & Access Management, and more, across the entire development life‑cycle.
While the technology you may work with is broad and varied, experience securing user‑facing, web‑based applications with AWS, GitHub, GitLab, Codespaces, Kubernetes, Okta, CrowdStrike, Sentinel, ExaBeam and similar technologies would be highly beneficial. Does this sound like the kind of work that interests you?
As an experienced Cyber Security Engineer, you’ll have the opportunity to shape secure digital services that matter — influencing the protection of systems used across the Scottish public sector and the millions of people who rely on them every day. Your guidance will help engineering teams embed secure development and operational best practice, strengthening our security posture and driving continuous improvement in how services are built, tested, and operated. Your expertise will be trusted, your perspective valued, and your leadership encouraged when identifying risks and proposing pragmatic solutions.
Working With Others
Collaboration is central to the role, working with colleagues across security, engineering, architecture, product, and service management. As a respected member of the community, your knowledge and experience will support others through mentoring, open knowledge‑sharing, and meaningful contributions to governance decisions that shape our cyber resilience. This is a place where your technical depth, strategic thinking, and commitment to secure, reliable services will have a visible and lasting impact.
Where These Roles Sit
We are looking for two Security Engineers to join the Digital Directorate and play a key role in delivering secure, resilient digital public services across government. This is an exciting opportunity to support some of Scotland’s most significant, multi‑million‑pound digital programmes, including ScotPayments and ScotAccount, as well as other major national initiatives built on our emerging common platforms and services. These initiatives are key enablers of Scotland’s Digital Strategy, and form part of the Delivery Plan (2025 – 2028) for Sustainable Digital Public Services. The roles form part of a growing and maturing security capability within the Digital Directorate. While you may provide focused support to specific programmes, you will also contribute to the Directorate security expertise that enables consistent, scalable security practices across government’s digital services.
Responsibilities
* Identify, design, and develop cyber security solutions across a wide variety of applications and infrastructure.
* Engage with the Digital Technical Architecture team and support the design of technology solutions and architecture for a variety of projects and programmes.
* Develop security operating procedures for use across multiple information systems or support compliance with them, including vulnerability management, incident response, protective security monitoring.
* Apply routine security procedures appropriate to the role, such as patching, managing access rights, malware protection, or vulnerability testing with autonomy.
* Champion secure design principles, frameworks, and standards for a digital service or programme. Drive secure coding practices and champion them, mentoring the engineering team to be able to undertake these tasks.
* Lead and translate security requirements into application design elements including documenting specific security criteria. Design advanced audit points into digital services.
* Act as a subject matter expert (SME) for CI/CD pipeline, infrastructure automation and cloud security, lead software debugging and guide engineers to resolve issues. Create and deliver automated assurance against Technical Security guidance and configurations.
#J-18808-Ljbffr