Senior Security Analyst - Threat & Vulnerability Management

Cyber Security Role

Join SLC's Cyber Security team and lead the proactive evaluation and management of threats, vulnerabilities, and exposures to strengthen our security posture. You'll drive both traditional Vulnerability Management and Continuous Threat Exposure Management, ensuring risks are identified, prioritized, and addressed before they impact the business. By overseeing Cyber Threat Intelligence, you'll deliver actionable insights that inform defensive strategies and operational decisions, while managing the BAU penetration testing calendar and providing expert guidance for project delivery.

In this role, you'll facilitate forums to review risk posture and remediation, oversee CTEM tooling, and monitor emerging threats and attack trends to keep SLC resilient against evolving risks. Collaborating closely with stakeholders, you'll align security initiatives with business objectives, communicate intelligence insights to senior leaders, and champion enhancements through automation and best practices. With a commitment to continuous learning and mentoring junior team members, you'll play an important role in building capability and resilience across the organization.

What you bring:

• Excellent understanding of vulnerability management processes, best practices, and hands-on experience with exposure management, remediation coordination, and penetration testing methodologies/scoping.
• Very good verbal/written communication skills, with proven ability to explain technical concepts to both technical and non-technical audiences, present governance forums, and engage senior leadership.
• Familiarity with IDS/IPS, encryption, cryptography, key management, and firewalls, alongside awareness of infrastructure systems including Windows, UNIX/Linux, and Solaris.
• Ability to interpret cyber threat intelligence, gather insights from trusted sources, and monitor emerging threats to advise on secure solutions.
• Commitment to continuous learning, mentoring junior team members, and building team capability and resilience.
• Solid grounding in current security standards and frameworks such as ISO 27001 and PCI-DSS.
• Troubleshooting experience with UNIX/Linux OS will be a great advantage but is not essential.

You can expect more from a career with SLC. We support colleagues to unlock their potential through our Career Pathways development programme and offer an excellent benefit and rewards package that includes:

• 28 days annual leave plus 8 public holidays
• Option to buy/sell annual leave
• Flexi-time and enhanced flexible working options available
• Option to join the Civil Service pension scheme
• Life insurance cover for 4 x annual salary
• Enhanced company sick pay and family leave including maternity, paternity and adoption
• Contributory lifestyle benefit options including discounts at hundreds of retailers, cycle to work scheme, access to the Civil Service Sports and Leisure Club for discounted gym memberships, and an optional dental insurance scheme

We'll need you to confirm you have the right to work in the UK. If we offer you a job and you accept, there are some background checks we need to complete before you can start with us. This will include employment history, criminal record check, credit reference check and fraud check.

SLC are committed to ensuring our recruitment processes are inclusive for all candidates and will make reasonable adjustments for those who consider themselves to have a disability or long-term condition in line with the Equality Act 2010. Our application process provides candidates with the opportunity to request reasonable adjustments but if you would like to discuss this in more detail, please email ask_recruitment@slc.co.uk.