Combined Shape Created with Sketch. !
< Back to Careers

Protective Monitoring Lead - ID2023-6023

Salary - £41,642 - £49,860 (plus a £5000 Digital, Data and Technology (DDaT) pay supplement after a 3 month qualifying period)
Location - Dundee or Glasgow
Hours - 37 hours per week
Closing Date - 4th June 2023 at Midnight
Reference - ID2023-6023
Employment Type - Permanent

Social Security Scotland currently have an exciting opportunity for a Protective Monitoring Lead to join our Chief Digital Office division who are responsible for delivering the infrastructure, capability and digital solutions that support the organisation.

The successful candidate will be responsible for the team that protectively monitors our systems for signs of compromise and malicious behaviour. You will use your experience to develop our end to end response, from identifying threats and creating detection rules to defining how we respond. This is an exciting opportunity to further develop your career working in a modern cloud environment.

DDaT Pay Supplement
This post attracts a £5,000 Digital, Data and Technology (DDaT) pay supplement after a 3 months DDaT competency qualifying period. The payment will be backdated to your start date in the role.

Pay supplements are temporary payments designed to address recruitment and retention issues caused by market pressures and are subject to regular review. This post is part of the Scottish Government DDaT profession. As a member of the profession you will join the professional development system, currently BCS RoleModelplus.

Main Duties
You will already be a proficient protective monitoring analyst working in a Security Operations Centre and be keen to use your experience to lead a small team. You will be responsible for:

• Developing and maintaining monitoring rules and alerts in our Elasticsearch based Security Information and Event Management tool.
• Leading the team in developing playbooks, run-books and an end to end monitoring process using a threat based approach.
• Lead reactive investigations of security incidents arising from protective monitoring alerts.
• Lead proactive threat hunting exercises.
• Collaborating with security engineering and product specialists to on-board new systems for monitoring.
• Manage and mentor a small team of analysts responsible for protective monitoring of our systems.
• Collating and analysing key monitoring statistics for presentation to senior management within Security and Digital Risk.

Further Information
Social Security Scotland are a Disability Confident Employer. We will consider and implement any reasonable adjustments you may require throughout the recruitment process and during the course of your employment, should you be successful in securing a post. If you feel you may require assistance with any part of our recruitment process, please contact us at

More information about the role and how to apply is available at: Protective Monitoring Lead in Dundee or Glasgow| Careers at Enterprise House (

Sign up to our newsletter

If you are an organisation or individual who works with people who may need information or support on any of our benefits, sign up to our stakeholder newsletter.

We'll never send you content you haven’t asked for and you can opt out at any time.

Please enter a valid email address

Read our privacy policy