Top Cyber Security Jobs in Edinburgh

Conduct red team operations, adversary simulations, and offensive security assessments across cloud infrastructure, identity systems, CI/CD pipelines, containers, and cloud-native services. Identify attack paths, validate vulnerabilities, assess detection and response coverage, track emerging attacker techniques, and drive remediation. Produce actionable reports and communicate technical findings to engineering, security, and business stakeholders.

Partner with sales and product teams to lead technical evaluations, demos, and proof-of-concepts for enterprise clients. Provide authoritative guidance on APIs, IT operations, and security, handle technical discovery and data questions, and support pre- and post-sales to drive adoption and customer success.

Assesses customers’ Falcon environments, recommends security improvements and remediation, identifies standards misalignment, manages customer issues within SLAs, creates service reports, and coordinates with internal support teams to resolve technical problems. The role requires strong customer communication, operating-system knowledge, threat detection and incident-response expertise, and the ability to guide customers toward improved security posture.

Lead the infrastructure transformation roadmap across networking, platforms, security, identity, supply chain, and logistics systems. Define programme objectives, governance, success measures, budgets, risks, dependencies, and milestones across multiple teams. Partner with technical leaders and business stakeholders to ensure feasibility and quality while promoting automation, observability, zero-trust security, continuous improvement, and healthy team performance.

Create and improve governance, risk, and compliance security labs, challenges, and learning content. Research regulations and standards, develop practical simulations, peer-review cyber ranges, simplify complex cybersecurity concepts, and advise engineering and product teams on security and privacy by design. The role requires GRC audit experience, knowledge of major compliance frameworks, strong cybersecurity fundamentals, and the ability to create engaging training for technical and non-technical users.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Lead a team of 10 Data Security Specialist Account Executives across EMEA and APJ. Responsibilities include recruiting and coaching sales talent, managing regional business plans and forecasts, collaborating with sales, marketing, product, services, and partners, and driving revenue attainment. The role requires software or security sales experience, data security leadership, regional management, C-level selling, and familiarity with AI/ML technologies.

Leads technical direction and hands-on execution for major products and systems. Designs scalable backend, frontend, API, database, and infrastructure solutions; writes code; drives architecture decisions; solves production issues; improves engineering quality, reliability, security, testing, and observability; and mentors engineers across teams.

Own technical direction and execution for major products and systems. Design scalable and reliable architectures, write production code, lead architecture decisions, solve complex engineering problems, and drive initiatives from concept through production. Improve engineering quality across testing, security, observability, and development practices while mentoring engineers and coordinating work across teams and products.

Lead and manage a cross-functional engineering team to deliver and scale customer-facing products. Own architecture, delivery, reliability, observability, and production outcomes. Coach engineers, run reviews, improve processes and tooling, and drive technical decisions across frontend, backend, APIs, databases, integrations, and infrastructure.

Lead and manage a cross-functional engineering team to deliver reliable, scalable wealth-management products. Drive architecture, code quality, observability, incident response, and engineering culture while coaching engineers and improving processes to increase delivery speed and reliability.

Lead and manage a cross-functional engineering team to design, build, and operate production systems. Own technical architecture, delivery, reliability, and processes. Coach engineers, run reviews, resolve incidents, and drive product outcomes while balancing speed, scalability, and quality.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Lead technical and strategic security engineering services for major construction and fit-out projects. Responsibilities include risk assessments, mitigation strategies, operational requirements, security master planning, physical security design, electronic security systems design, and counter-terrorism guidance covering hostile vehicle mitigation, blast protection, and ballistics. The role also requires security consultancy expertise, business development experience, relevant qualifications, and professional security credentials or equivalent commitment to continuing development.

Designs, builds, tests, and improves cloud security labs, challenges, and learning content for a cyber resilience platform. The role focuses on AWS, Azure, GCP, Kubernetes, SIEM, CSPM/CNAPP, containers, Terraform, serverless technologies, identity, access, networking, monitoring, and DevSecOps. Responsibilities include creating realistic attack-and-defense simulations, translating technical research into accessible content, collaborating with engineering and product teams, and supporting cloud security content strategy.

Provides strategic procurement and contract advice for public and private-sector clients. Responsibilities include managing end-to-end procurement services, tender preparation, supplier engagement, contract award, post-contract management, commercial modeling, and procurement strategy development. The role also supports bids, business development, team leadership, and client stakeholder management across major infrastructure, utilities, defense, renewables, and transformation projects.

Provides on-site security for client premises by patrolling facilities, monitoring surveillance systems, responding to alarms and emergencies, conducting inspections, enforcing access controls, identifying risks, and supporting security protocols and awareness training. The role requires strong observation, communication, problem-solving, teamwork, and flexibility to work 12-hour shifts, weekends, and holidays.

Provides visible security, patrols, CCTV and control room monitoring at a shopping centre. Responds to incidents, emergencies and customer concerns; manages access, alarms, visitors, lost property, contractors and deliveries. Completes incident reports, audits, compliance paperwork and life-safety checks while enforcing fire, health and safety, and site procedures. Requires a valid SIA Security Licence, customer-facing security experience, strong communication, accurate record keeping and flexible shift availability.

Provides Tier 3 escalation and advanced security analysis for MDR and MXDR customers. Responsibilities include investigating endpoint alerts, reconstructing attack chains across cloud, identity, email, network, and endpoint environments, responding to active breaches, threat hunting, researching emerging threats and malware, developing hunting queries and threat alerts, and engaging with customers from SOC analysts to executives. Requires strong security operations expertise, multilingual communication, scripting, operating systems, networking, and incident response capabilities.

Provides 24/7 threat detection and response for managed security clients. Analyzes complex endpoint security events, investigates incidents, tunes detection and blocking technologies, improves monitoring processes, supports DFIR teams, and handles escalations. The role includes customer interaction, analyst mentoring, documentation, rotating weekend and on-call coverage, and requires fluent German and English while being based and legally authorized to work in the UK.

Provides senior-level security operations support within a 24/7 Threat Detection and Response team. Analyzes complex endpoint security cases, investigates threats, tunes detection and blocking technologies, improves security processes, supports incident response, and mentors analysts. The role serves as a technical escalation point for customers, DFIR teams, and client security teams, with rotating weekend and on-call coverage. Fluency in German and English is required, and the position is UK-based.

Leads EU SOC operations while performing hands-on Tier 2/3 security analysis, incident response, threat hunting, malware and endpoint investigations, and customer escalations. Coaches analysts, coordinates workload, monitors service metrics, supports onboarding, and improves SOC processes. Requires strong cybersecurity experience, customer communication skills, fluent English and German, and expertise in at least two areas such as endpoint security, malware analysis, threat intelligence, incident response, penetration testing, reverse engineering, or digital forensics.

Leads enterprise cybersecurity consulting engagements across SIEM, SOC, EDR, and managed security service implementations. Responsibilities include architecture, delivery, client workshops, executive briefings, business cases, roadmaps, governance, pre-sales solutioning, and operational handover. The role also mentors consultants, develops service methodologies, manages delivery risks, and advises senior security stakeholders. Candidates need 10+ years of security consulting, managed services, or SOC engineering experience, strong client-facing communication, and expertise in platforms such as Microsoft Sentinel or Splunk.

Provides Tier 3 escalation and advanced MDR/MXDR security analysis for global customers. Responsibilities include investigating critical endpoint alerts, reconstructing attack chains across cloud, identity, email, network, and endpoint environments, responding to active breaches, threat hunting, researching malware and adversary tactics, developing hunting queries and threat alerts, and engaging with customers from SOC analysts through executives. The role requires fluent German and English and follows a rotating UK working-day schedule with weekend coverage.

Maintain and improve Microsoft Defender for Endpoint, Microsoft Sentinel, security monitoring, endpoint protection, log ingestion, and detection capabilities. Support application onboarding, cloud security controls, audits, incident response, investigations, AI-driven security use cases, and stakeholder collaboration. The role also mentors junior team members and helps maintain operational KPIs, KRIs, and standards.