UK cybersecurity job market May 19

The UK cybersecurity hiring picture on May 19 was visible less in a single headline than in the spread of active government vacancies and the policy language surrounding them. Civil Service Jobs listings showed open roles at the Scottish Government, the UK Health Security Agency, Ofqual and the Government Digital Service, while the UK government’s cyber resourcing hub said it was designed to “streamline and centralise resourcing” for cyber security across government. The NCSC, part of GCHQ, has tied that hiring backdrop to a broader resilience problem. In its 2025 annual review, the agency said “the gap between the threat posed to critical national infrastructure and the ability of owners and operators of CNI to defend against it was widening,” and said narrowing that gap became a top priority. (civilservicejobs.service.gov.uk) ### Which UK cyber jobs were live on May 19? A Scottish Government posting for a Cyber Security Officer was open until 11:55 p.m. on May 24, with a salary of £49,401 to £59,152 and a £4,000 pay supplement after a competency qualifying period. The listing said the supplement was intended to address “recruitment and retention issues caused by market pressures.” The job was tied to Education Scotland and to Glow, the national digital learning platform for schools, which the listing said has more than one million provisioned users. (ncsc.gov.uk) The role said the successful candidate would help protect the confidentiality, integrity and availability of corporate digital systems and support cyber controls for major projects. ### Where else was government recruiting? (civilservicejobs.service.gov.uk) The UK Health Security Agency listed four Cyber Security Associate roles with applications open until June 2 and a salary range of £33,422 to £45,353. The posting said the positions were hybrid and based at core headquarters in Birmingham, Leeds, Liverpool and London. Ofqual listed a Cyber Security Technologist - Defend and Respond role in Coventry through May 31, while the Government Digital Service advertised two Cyber Security Governance and Risk Management Principal jobs through the same date. (civilservicejobs.service.gov.uk) GDS said its information security team protects services including GOV.UK and One Login and that the principal role would lead cyber and information security risk management and assurance for major digital services. (civilservicejobs.service.gov.uk) ### Why did critical infrastructure keep coming up in the discussion? The NCSC defines critical national infrastructure as assets essential to the functioning of society, including energy, water, transportation, health and telecommunications. In its annual review, the agency said cyber-initiated attacks on these systems could have physical consequences and said operators should be ready to increase situational awareness, including enhanced threat hunting, or harden defenses by isolating operational technology or reducing attack surface in a crisis. (civilservicejobs.service.gov.uk) A separate NCSC policy note on the Cyber Security and Resilience Policy Statement said the government’s proposals were intended to strengthen regulation of critical sectors and respond to “more frequent, sophisticated and intense hostile activity in UK cyberspace.” The post said the Cyber Security and Resilience Bill had been introduced to Parliament on Nov. 12, 2025. ### What do the official hiring pages say about the skills pipeline? (ncsc.gov.uk) The UK government’s cyber resourcing hub says it offers current vacancies, entry routes into government cyber security and guidance for hiring managers, including cyber pay allowances. The page also points job seekers to the CyberFirst programme, part of the government’s effort to build early-career talent. The NCSC’s professional skills and training page says training is available for both newcomers and experienced security professionals through assured training, Industry 100 and certified professional pathways. (ncsc.gov.uk) Those pages do not quantify a staffing shortfall, but they show the government maintaining parallel tracks for recruitment and training. ### What happens next? Applications for the Scottish Government role close on May 24, and the Ofqual and GDS postings close on May 31. (security.gov.uk) The UKHSA associate roles remain open until June 2, and the government’s cyber vacancies and resourcing pages continue to aggregate openings and entry routes for applicants across departments. (civilservicejobs.service.gov.uk) (ncsc.gov.uk)