Arnold Clark
Graduate Cyber Security Analyst
Graduate Cyber Security Analyst at Arnold Clark, based in Glasgow, Scotland. This is a permanent role with hybrid working.
- Pay
- Not given by the employer
- Hours and contract
- Permanent · Hybrid
- Location
- Glasgow, Scotland
- Closing date
- Sector
- IT & Software
Reference 92632
About the role
We’re looking for a determined and enthusiastic Graduate Cyber Security Analyst to join our team based at our Head Office, in Glasgow.
What we offer:
- 33 days’ annual leave
- Flexible leave
- Generous employee discounts
- Private healthcare
- Workplace pension
- Training opportunities
- …and much more
Hours
Full time: Monday – Friday, 8.30am – 5pm.
Location
This is a hybrid role, with time spread between your home and our Head Office in Hillington, Glasgow.
About the role
As a Graduate Analyst, you will support the Cyber Security team in protecting our business. The role will be aligned to Security Operations.
The successful candidate will work very closely with internal and external stakeholders. Cross-discipline and job-specific cyber security training will be offered to all Graduate Analysts; you will be supported to improve your cyber awareness skills through certifications from our key vendors.
Day-to-day duties
Perform analyst duties in the assigned team, this could include:
- Follow and influence our processes.
- Gather data from systems.
- Analyse data.
- Monitor system performance and security events.
- Make stakeholders aware of the findings.
- Remediate findings using our tools or by influencing others to act.
- Act on alerts.
- Configure tooling as and when required.
- Verify system and configuration changes performed by others.
- Keep up to date with security concepts, tools and best practices.
- Prepare, present and review reports.
- Assist all members of the Cyber Security team with relevant information required.
Experience required
These is a graduate-level role. It is open to graduates with 2:1 score in an Honours degree in a cyber security-related discipline, or higher, with no additional requirement for experience in the field. Work experience, even if unrelated to the field, and cyber focus group participation is welcome so do include this in the application if applicable.
These roles are also open to those with HNC, HND, BSc, still studying part-time, or holders of relevant professional certifications who can evidence paid or voluntary work in a wider IT, cyber or related area
- Essential skills
- Ability to work under the direction of senior colleagues.
- Ability to consistently complete work within time frames provided.
- A desire to learn and seek knowledge of all aspects of information and cyber security.
- Ability to establish positive relationships with internal and external stakeholders.
Nice to have, but not essential
- Hands-on experience through paid or unpaid work, or labs.
SFIA skills profile
This role is aligned primarily to SFIA Level 2, reflecting an early-career cyber security practitioner who works with guidance, carries out assigned activities, contributes to analysis and remediation, and develops practical capability through training and experience.
| SFIA skill | Code | Target level | Application to this role |
| Information security | SCTY | 2 | Assists with implementing and monitoring security controls, reviewing security information and escalating identified risks or control concerns. |
| Security operations | SCAD | 2 | Monitors security events and alerts, performs assigned operational security activities and escalates matters requiring further investigation. |
| Incident management | USUP | 2 | Supports the initial assessment and handling of security alerts and incidents, records relevant information and follows established escalation processes. |
| Methods and tools | METL | 2 | Uses approved cyber security tools and methods, supports routine configuration activities and follows documented operational processes. |
| Data analytics | DAAN | 2 | Gathers, organises and analyses security data to identify relevant findings, trends or areas requiring further investigation. |
| Vulnerability assessment | VUAS | 2 | Assists with identifying, recording, validating and tracking vulnerabilities or security weaknesses using established tools and procedures. |
| Information assurance | INAS | 2 | Supports reviews of systems, configurations and evidence to check whether required security controls have been applied effectively. |
| Threat intelligence | THIN | 2 | Collects and reviews information about cyber threats and contributes relevant findings to operational or risk-based security activities. |
Our Culture
Arnold Clark is committed to creating a diverse and inclusive workplace. We strive to create an environment where collaboration, unique perspectives and multiple approaches are celebrated. We care about our employees and our communities, we nurture talent and encourage ambition, and we are passionate about people who take pride in their work. Our employees are at the heart of everything we do – diverse in our make-up, united in our goals.
To find out more about Life at Arnold Clark, visit our website.
Employment within the Arnold Clark Group is offered subject to satisfactory reference and disclosure checks.
Reference: 92632 · Posted 2 hours ago · Closes 3 Dec 2026 · Listed via Arnold Clark
Apply for this job
This role is listed via Arnold Clark. Applications are handled on the employer's site.
Apply on employer siteOpens the employer's website in a new tab.
Signed in? Every job you apply for counts toward your weekly goal and badges. How it works
Safe applying: a genuine employer will never ask you to pay for a DBS check, training or equipment, or move you onto WhatsApp before you are hired. If this listing does, report it and do not pay anything.