Security Support Officer

Join to apply for the Security Support Officer role at Social Security Scotland
.

This range is provided by Social Security Scotland. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Are you ready to play a key role in protecting a large public‑sector organisation? We are seeking a Security Support Officer to join our dedicated cyber operations team within the Digital Risk & Security branch of the Chief Digital Office at Social Security Scotland.

This role sits at the heart of our Security Operations capability and provides an important first line of defence for the organisation. The role involves the monitoring of security tools, analysis of data from multiple sources, and determining which defined processes should be followed to protect the agency.

The ideal successful candidate will have experience in problem solving, and analysis of data from multiple sources and interpreting this in a fast moving and dynamic environment.

You will also review outputs from vulnerability scanning activities, carry out initial triage of findings, and produce clear and timely reporting to support effective security risk management across Social Security Scotland. This role offers the opportunity to apply your knowledge in a real operational setting, contribute directly to the organisation’s security posture, and to develop your skills alongside experienced security professionals.

This role involves carrying out daily tasks, such as monitoring and responding to mailbox queries, which can cover a wide variety of security related queries and having the autonomy to provide advice and guidance on less complex technical queries or provide analysis and support to more senior members of the team on more complex scenarios.

The role will also be required to review output from vulnerability scanning, providing level one triage of output and producing required reporting and management information in a timely manner to under the security risk across Social Security Scotland.

• Vulnerability Management, provide first level support to analyse data of vulnerabilities identified from security scans and assess these according to established procedures.
• Monitoring of security tooling – daily monitoring of security systems, dealing with initial analysis of output, following required run books with no required supervision and identify where required the need for escalation and provide ongoing support to more senior members of team on more complex situations.
• Identity and access management – review and handle access requests, escalating difficult requests, and follow processes for creating or updating new user accounts, and supporting ongoing checks of access rights to ensure they are appropriate. Continuously monitor access and follow established procedures to handle any non‑compliant, inactive or privileged accounts.
• Providing support for managing DRS IAM queues. Providing support to requester to ensure that only required access is provisioned and providing analysis on existing roles and privileges as required.
• Providing front line support of any security incidents impacting the team. Undertaking analysis of information from multiple sources to provide required information and providing recommendations and next steps for less complex security situations. Being the first line of support dealing with security incidents and escalating and supporting senior colleagues on more complex security incidents.
• Documentation Support: provide admin support by updating changes to processes and procedures as advised and assist with the development of run books or playbooks under guidance which will form part of procedures.
• Continuous monitoring of all security mailboxes. Dealing with any incidents, queries and reporting to various teams within DRS. This will cover a large range of queries, which will require initial triaging and where possible analysis and resolution of less complex scenarios and support senior team members in analysis on more complex queries.

We use an assessment framework called ‘Success Profiles’…