Cyber Threat and Vulnerability Analyst


Company:	Government Recruitment Service
Salary:	£37,666 to £44,347 a year
Hours:	Full-time
Location:	Edinburgh
Job type:	Permanent
Posting date:	13 Oct 2026
Closing date:	26 Oct 2026

Apply for this job

Summary

The Department for Business, Innovation, Science and Trade (BIST) helps businesses invest, innovate, export and grow across the UK. The Digital, Data and Technology (DDaT) directorate helps to deliver this by designing, building and running the services, platforms and technology that businesses and colleagues rely on every day.

Our teams work on a wide range of services and technologies, including:

digital services that help businesses access government support, guidance and opportunities

data and AI products that support decision making and enable innovation

internal tools and services that help colleagues work more effectively

secure technology and platforms that support critical government services

cyber security services that protect systems, data and users

By joining DDaT, you'll work on services used by businesses, colleagues and citizens across the UK. You'll be part of multidisciplinary teams focused on improving services, solving complex problems and delivering better outcomes for users.

We are committed to creating an inclusive and supportive workplace. In recognition of this, we were named Best Public Sector Employer at the Women in Tech Employer Awards 2025!

You will be helping to protect BIST and the wider UK government from cyber threats in a fast paced and exciting role.  Reporting and acting as the main support to the Senior Cyber Threat and Vulnerability Analyst and Principle Cyber Threat and Vulnerability Manager. The Threat and Vulnerability Analyst will work with other members of the SOC and technical teams to execute operational threat and vulnerability management activities and help shape the development of BIST’s TVM program and capabilities. A healthy curiosity will be essential, to actively go out and discover items of potential interest to the team.

Main responsibilities

Your day-to-day role will involve the need to:  

Threat Intelligence and assessment

Conduct structured threat hunting and analysis to identify potential threats to BIST, using relevant threat intelligence sources and available security data to detect emerging threats, vulnerabilities and patterns of concern.
Analyse and communicate relevant threat intelligence, providing actionable information to SOC colleagues and wider technical teams to support investigation, protective action and vulnerability prioritisation.

Penetration Testing

Coordinate penetration testing, vulnerability assessments and security assurance activities across BIST systems, products and technologies, acting as a key cyber point of contact for service teams and testing providers throughout testing engagements.
Review and assess penetration testing findings, supporting service teams in understanding vulnerabilities and associated risk, and track findings through the agreed remediation and risk-management process.
Support the verification and closure of findings by reviewing remediation evidence and coordinating appropriate retesting or validation activity.

Vulnerability management

Identify, analyse and assess vulnerabilities and security misconfigurations across BIST's platforms, applications and multi-cloud environments, applying BIST's risk-based approach to support effective prioritisation.
Provide practical technical advice to service teams on vulnerability remediation and secure configuration improvements, escalating complex or significant issues where appropriate.
Work collaboratively with service teams and other cyber colleagues to monitor vulnerabilities through the remediation lifecycle and provide clear visibility of outstanding security risk.
Use vulnerability management and application security testing tools and data to investigate findings, identify trends and support the reduction of risk across BIST's technology estate.

Cyber Operations

Contribute to the effectiveness of the operational TVM service through continuous improvement of processes, tooling and ways of working.
Use operational metrics and insights to monitor remediation activities, contribute to continuous improvement initiatives and provide updates to stakeholders on progress, while maintaining knowledge of emerging vulnerabilities, BIST's Information Security Framework and industry best practice.

Apply for this job

Proud member of the Disability Confident employer scheme

About Disability Confident

Disability Confident is a government scheme. It encourages employers to recruit and retain disabled people and those with long term health conditions.