56,012 - 65,958
The base salary for this role is 46,677-54,957 This job qualifies for Digital, Data and Technology Annual Pay supplement of 20% which is included in the total remuneration above.
A Civil Service Pension with an employer contribution of 28.97%
GBP
Job grade
Senior Executive Officer
Contract type
Permanent
Business area
RoS - Corporate - Digital
Type of role
Digital
Working pattern
Full-time
Number of jobs available
1
Contents
------------
Location
About the job
Benefits
Things you need to know
Apply and further information
Location
------------
G2 5LG, EH8 7AU
About the job
-----------------
Job summary
Registers of Scotland (RoS)
Join an award-winning organisation recognised for its technology and innovation. RoS is a world-leading pioneer in land and property registration. We work to create data-led, digital solutions for the people of Scotland. Our full-stack teams design, architect, and build all our registration products in-house.
Job description
The Role
We are seeking a technically skilled and people-focused SOC Technical Team Lead to join our Cyber Security team at Registers of Scotland (RoS). This role provides both technical leadership and line management for the Security Operations Centre (SOC) team, ensuring the delivery of high-quality threat detection, incident response, and vulnerability management services.
We're looking for candidates with at least three years' experience in a Security Operations Centre or similar environment, to ensure they bring the hands-on expertise and operational insight needed to lead effective incident response and support a high-performing security team. As SOC Technical Team Lead, you'll lead a team of analysts and work closely with cyber engineers to develop and automate threat detection and response playbooks., as well as security architects and the wider IT function. A key part of the role is ensuring SOC processes are fully integrated with existing ITSM workflows and that service levels are monitored and reported through agreed SLA/OLA metrics and outcome-driven key performance indicators.
On a typical day you will
Provide day-to-day line management, coaching, and development of SOC analysts and engineers.
Lead the configuration, tuning, and maintenance of core SOC capabilities including log aggregation, alerting, correlation, threat detection, and response tooling.
Collaborate with cyber engineers to develop and automate detection logic and incident response playbooks.
Work with Technical Product Manager and Security Architect to ensure SOC capabilities align with enterprise security architecture and strategy.
Ensure SOC processes are integrated with ITSM systems for effective incident, change, and problem management.
Develop and maintain scenario-based runbooks and technical procedures for incident response.
Monitor and report on SOC performance, including:
+ SLA/OLA adherence and incident handling timelines
+ Volume and severity of security incidents
+ Average time to detect (MTTD) and respond (MTTR) to threats
+ Accuracy and relevance of alerts (e.g. reducing false alarms)
+ Coverage of threat detection across systems and services
+ Outcome-focused metrics such as reduced dwell time, successful containment rates, and measurable improvements in security posture Engage with project teams to provide security assurance for new and existing services.
Drive continuous improvement in SOC operations, tooling, and team capability.
Person specification
Essential Criteria - Skills and Attributes for Success
Experience/Technical:
We will assess you against the following Experience and Technical skills during the application and assessment process:
Proven experience in a Security Operations Centre or operational security environment.
Demonstrable experience managing or leading a technical team or function in an enterprise setting.
Strong background in operating and maintaining SOC capabilities such as log management, alerting, threat detection, and incident response tooling.
Experience in incident response, including leading technical investigations and developing response frameworks.
Proficiency in integrating and operationalising cyber threat intelligence.
Experience working with ITSM systems to manage and prioritise workloads.
Experience reporting on SOC metrics including SLA/OLA performance, MTTD/MTTR, alert accuracy, and outcome-based security improvements.
Excellent interpersonal and communication skills, with the ability to work effectively across technical and non-technical teams.
Experience developing or implementing vulnerability management tools and processes.
Familiarity with cloud security monitoring and hybrid infrastructure environments.
Knowledge of relevant security frameworks such as NIST CRF, ISO 27001, NCSC CAF, and MITRE ATT&CK.
Experience contributing to or leading SOC maturity assessments or improvement programmes.
Behaviours
You will be scored against all listed Behaviours at assessment:
Making Effective Decisions
Communicating and Influencing/ Developing Self and Other (Cluster)
Managing a Quality Service
Benefits
------------
Alongside your salary of 56,012, Registers of Scotland contributes 16,226 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
This job is for you if you want
Work with purpose:
working for the people of Scotland to set the bar for land and property registration worldwide.
Flexible and hybrid working:
depending on the role and team requirements, work when and where it's best for you and your stakeholders.
Benefits:
enjoy pay progression, pension contributions of up to 28.97%, up to a year's parental leave, and 38 days annual holiday, increasing to 42 days with length of service.
Investment in professional development:
we invest in all our people so that they have the right skills to be productive and confident in their job.
Diversity and Inclusion:
We are an 'Investor in People' and a 'Disability Confident' employer. We are inclusive, stronger together, and committed to putting our people first.
Positive work culture:
RoS is an agile, digital organisation using leading-edge technology. Colleagues understand their role in achieving our strategy and have the autonomy to deliver.
To learn more about RoS and what we offer visit our careers pages or watch this short video.
Hear from our colleagues about their experience of working within our Digital, Data and Technology teams on our website.
Things you need to know
---------------------------
Selection process details
Stage one - Application Process
To apply, click on 'Apply now' and complete the online application form.
You will need to submit:
A CV outlining your career history and how you meet the technical/experience criteria (max 4 pages).
Responses explaining how you meet the required experience aspects of the role (maximum 300 words per answer in the spaces provided).
After the deadline for applications, all applicants will be sent a short on-line test via the platform Hackerrank, which will assess your technical proficiency.
Stage two - assessment
If successful at application stage, you will be invited to an in-person interview which will include the following:
Behaviour based interview
Technical whiteboarding exercise
Information on Success Profiles
For further information on success profiles, visit our Success Profiles.
Recruitment timeline
Closing date: 10 September at 11.59.pm
Online test sent: 11 September
Online test deadline: 14 September
Application sift: w/c 15 September
Invites to assessment: 29 September
Interviews: w/c 6 October
Feedback will only be provided if you attend an interview or assessment.
Security
Successful candidates must undergo a criminal record check.
People working with government assets must complete baseline personnel security standard (opens in new window) checks.
Nationality requirements
This job is broadly open to the following groups:
UK nationals
nationals of the Republic of Ireland
nationals of Commonwealth countries who have the right to work in the UK
nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)
nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Further information on nationality requirements
Working for the Civil Service
Please note this Post is NOT regulated by the Civil Service Commission.
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.
Diversity and Inclusion
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy .
Apply and further information
---------------------------------
Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.
Contact point for applicants
#
Job contact :
Name : talent@ros.gov.uk
Email : talent@ros.gov.uk
#
Recruitment team
Email : talent@ros.gov.uk
Further information
Feedback
Feedback will only be provided if you progress to interview stage.
Reserve List
In the event that further posts are required, a reserve list of successful candidates will be kept for up to 12 months.
Nationality and immigration status
In general, only nationals from the following countries (and associations of countries) are eligible for employment in the Civil Service: the United Kingdom, the Republic of Ireland, and the Commonwealth. EU nationals (with settled or pre-settled status), certain EEA nationals, Swiss and Turkish nationals are also eligible for employment. Detailed provisions on determining eligibility on the grounds of nationality and, where relevant, immigration status can be reviewed here.
Security
Successful candidates must undergo a Basic Disclosure Scotland check.
Individuals working with government assets must complete baseline personnel security standard checks.
Equality, diversity and inclusion
As a proud member of the Disability Confident Scheme, we welcome applications from disabled candidates. RoS is a diverse and inclusive workplace, and we want to help you demonstrate your full potential whatever type of selection process is used. To learn more about diversity at RoS please see our EDI strategy.
As part of the application process, we would like to invite you to please complete our diversity monitoring form. This information is not shared with recruitment panels.
If you require any adjustments to our recruitment process, please let us know via resourcing@ros.gov.uk. Please see this page for more information on adjustments.
DDaT supplement
This post is part of the Digital, Data and Technology profession (DDAT) and attracts a pay supplement. This is a tool which RoS uses to benchmark our salaries against current market rates. A review of the benchmark is undertaken every two years, this means that the supplement may go up or down depending on market activity. Advance notice will be given of any changes.
Further information
For further information relating to RoS, including:
Additional details on pay & benefits
The Civil Service Code
Complaints process
Use of AI in the application/recruitment process,
Please view our additional information page online.
If you have any questions, please contact talent@ros.gov.uk