Security Analyst
| Posting date: | 17 September 2025 |
|---|---|
| Hours: | Full time |
| Closing date: | 17 October 2025 |
| Location: | Edinburgh, EH12 1HQ |
| Company: | NatWest Group |
| Job type: | Permanent |
| Job reference: | R-00263683 |
Summary
Join us as a Security Analyst
- This is an opportunity for a driven analyst to take on an exciting new career challenge
- You’ll be able to build and maintain a wide network of stakeholders of varying degrees of seniority
- It’s a chance to have a tangible effect on our function, put your existing skills to the test and advance your career
- This role follows a phased hybrid working model: you'll be based in the office full-time for the first 3 months, then 4 days per week for the following 3 months, and from month 7 onwards, you'll work in the office 3 days per week
What you'll do
As a Security Analyst, you’ll lead the identification, triage, and resolution of sophisticated security threats and incidents. You’ll act as a subject matter expert, providing technical leadership during critical events and ensuring that lessons learned are embedded into future operations.
You’ll also:
- Lead incident response efforts, coordinating across teams and ensuring timely, effective resolution
- Conduct in-depth threat analysis and root cause investigations, producing actionable intelligence and recommendations
- Develop and refine detection and response playbooks, ensuring alignment with evolving threat landscapes
- Provide mentorship and technical guidance to junior analysts and team members
- Collaborate with stakeholders across the business to improve security awareness and resilience
- Drive continuous improvement in monitoring, alerting, and response capabilities
- Represent the security function in cross-functional projects and governance forums
The skills you'll need
We’re looking for a highly capable and experienced security analyst with a strong background in incident response, threat detection, and security operations.
Additionally, you’ll need:
- Proven experience in security incident and event management (SIEM), with the ability to lead complex investigations
- Deep understanding of network protocols (TCP/IP, DNS, HTTP/S), intrusion detection, and malware analysis techniques
- Experience with threat intelligence platforms and applying threat intel to improve detection and response
- Strong analytical and problem-solving skills, with the ability to think strategically and act tactically
- Excellent communication skills, with the ability to influence and engage stakeholders at all levels
- A proactive mindset and a passion for staying ahead of emerging threats and technologies