Graduate Cyber Security Analyst 2026

We’re looking for a determined and enthusiastic Graduate Cyber Security Analyst to join our team based at our Head Office, in Glasgow.

What we offer

• 33 days’ annual leave
• Flexible leave
• Generous employee discounts
• Private healthcare
• Workplace pension
• Training opportunities
• …and much more

Hours

Full time: Monday – Friday, 8.30am – 5pm.

Location

This is a hybrid role, with time spread between your home and our Head Office in Hillington, Glasgow.

About the role

As a Graduate Analyst, you will support the Cyber Security team in protecting our business. The role will be aligned to Security Operations.

The successful candidate will work very closely with internal and external stakeholders. Cross-discipline and job-specific cyber security training will be offered to all Graduate Analysts; you will be supported to improve your cyber awareness skills through certifications from our key vendors.

Day-to-day duties

Perform analyst duties in the assigned team, this could include:

• Follow and influence our processes.
• Gather data from systems.
• Analyse data.
• Monitor system performance and security events.
• Make stakeholders aware of the findings.
• Remediate findings using our tools or by influencing others to act.
• Act on alerts.
• Configure tooling as and when required.
• Verify system and configuration changes performed by others.
• Keep up to date with security concepts, tools and best practices.
• Prepare, present and review reports.
• Assist all members of the Cyber Security team with relevant information required.

Experience required

This is a graduate-level role. It is open to graduates with a 2:1 score in an Honours degree in a cyber security-related discipline, or higher, with no additional requirement for experience in the field. Work experience, even if unrelated to the field, and cyber focus group participation is welcome, so do include this in the application if applicable.

These roles are also open to those with HNC, HND, BSc, still studying part-time, or holders of relevant professional certifications who can evidence paid or voluntary work in a wider IT, cyber or related area.

Essential skills

• Ability to work under the direction of senior colleagues.
• Ability to consistently complete work within time frames provided.
• A desire to learn and seek knowledge of all aspects of information and cyber security.
• Ability to establish positive relationships with internal and external stakeholders.

Nice to have, but not essential

• Hands-on experience through paid or unpaid work, or labs.

SFIA skills profile

This role is aligned primarily to SFIA Level 2, reflecting an early-career cyber security practitioner who works with guidance, carries out assigned activities, contributes to analysis and remediation, and develops practical capability through training and experience.

SFIA skills

• Information security (SCTY) — Target level: 2. Assists with implementing and monitoring security controls, reviewing security information and escalating identified risks or control concerns.
• Security operations (SCAD) — Target level: 2. Monitors security events and alerts, performs assigned operational security activities and escalates matters requiring further investigation.
• Incident management (USUP) — Target level: 2. Supports the initial assessment and handling of security alerts and incidents, records relevant information and follows established escalation processes.
• Methods and tools (METL) — Target level: 2. Uses approved cyber security tools and methods, supports routine configuration activities and follows documented operational processes.
• Data analytics (DAAN) — Target level: 2. Gathers, organises and analyses security data to identify relevant findings, trends or areas requiring further investigation.
• Vulnerability assessment (VUAS) — Target level: 2. Assists with identifying, recording, validating and tracking vulnerabilities or security weaknesses using established tools and procedures.
• Information assurance (INAS) — Target level: 2. Supports reviews of systems, configurations and evidence to check whether required security controls have been applied effectively.
• Threat intelligence (THIN) — Target level: 2. Collects and reviews information about cyber threats and contributes relevant findings to operational or risk-based security activities.