Top Cyber Security Jobs in Edinburgh

Designs, builds, tests, and improves cloud security labs, challenges, and learning content for a cyber resilience platform. The role focuses on AWS, Azure, GCP, Kubernetes, SIEM, CSPM/CNAPP, containers, Terraform, serverless technologies, identity, access, networking, monitoring, and DevSecOps. Responsibilities include creating realistic attack-and-defense simulations, translating technical research into accessible content, collaborating with engineering and product teams, and supporting cloud security content strategy.

Leads OT security monitoring and triage operations, investigates suspicious activity across industrial networks, validates detections, and escalates findings to incident responders and threat hunters. Maintains the Dragos Platform for customers, including asset classification, vulnerability management, detection tuning, and hardening recommendations. Produces incident reports, mentors analysts, collaborates across cybersecurity teams, and develops expertise in ICS protocols, adversary tactics, and industrial threat intelligence. The role includes shift-based coverage and occasional weekend or on-call work.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Build BLP’s core software across infrastructure, backend, machine learning, and product extension platforms. Responsibilities include operating secure and observable cloud infrastructure, developing performant distributed systems, applying AI to business problems, and enabling customer process automation. The role emphasizes formal reasoning, correctness by construction, maintainable systems, type systems, and functional programming. Work is available onsite in Zurich or remotely within Europe.

Build, integrate, and maintain cybersecurity platforms and controls across cloud, identity, endpoint, vulnerability management, and security operations. Develop automation, APIs, integrations, and self-service tooling using scripting and Infrastructure as Code. Improve cloud security, CI/CD controls, privileged access, and secrets management. Contribute to architecture reviews, threat modelling, control validation, incident response, secure AI adoption, and technical documentation while advising technology teams on practical risk reduction.

Leads the Security Operations team, overseeing security monitoring, alert investigation, threat hunting, incident response, detection engineering, and threat-informed defense. The role sets the security operations roadmap, manages people and operational capacity, oversees SIEM, EDR, and SOAR capabilities, coordinates major incidents, advises technology and governance teams, and reports threats, incidents, and capability gaps to senior leaders.

Drives adoption, optimization, and customer success for Splunk’s security platform. Provides technical guidance on Enterprise Security and UBA use cases, configuration, and resilience; resolves complex challenges; collaborates with sales, support, and product teams; develops scalable processes and enablement materials; identifies expansion opportunities; and mentors team members. Requires substantial information security experience, Splunk certifications, SIEM expertise, security certifications, and proficiency across Unix, Windows, Bash, and Python.

Leads end-to-end defense-sector pursuit and bid management, including client and subcontractor engagement, pursuit planning, proposal development, win strategies, commercial coordination, interviews, submission reviews, and post-selection debriefs. The role partners with finance, legal, technical teams, and Arcadis Growth to improve pursuit processes, strengthen relationships, and increase win rates.

Maintain and improve Microsoft Defender for Endpoint, Microsoft Sentinel, security monitoring, endpoint protection, log ingestion, and detection capabilities. Support application onboarding, cloud security controls, audits, incident response, investigations, AI-driven security use cases, and stakeholder collaboration. The role also mentors junior team members and helps maintain operational KPIs, KRIs, and standards.

Leads global IT, cybersecurity, information governance, business systems, resilience, and technology strategy across the UK and US. Owns infrastructure, cloud services, identity and access, security operations, incident response, business continuity, compliance controls, vendor performance, technology budgets, and executive risk advising. The role also oversees enterprise applications, integrations, AI governance, data protection, reporting, and managed-service providers.

Patrols university campuses on foot and by vehicle, assists with control-room operations, responds to fire and intruder alarms, and provides immediate support during incidents or crimes. The role includes welfare support, signposting to agencies, and reassuring staff and students. Candidates need strong communication and listening skills, computer literacy, composure under pressure, attention to detail, and a full driving licence.

Implement and support the cybersecurity risk assessment framework, processes, and vendor tooling. Prepare cybersecurity risk reports for governance forums, review risk appetite statements, develop risk training, and help embed risk assessment into business and technology change. Coach and mentor Cyber Risk Analysts and Associates while collaborating with Governance, Risk & Compliance stakeholders.

Respond to and investigate security incidents, manage threat and vulnerability programs, operate SIEM and EDR tooling, develop incident response runbooks, automate security workflows, lead phishing and security awareness campaigns, and support purple team exercises. The role also owns vulnerability reporting, remediation metrics, stakeholder communication, and continuous improvement of security operations.

Own enterprise sales across the UK and Ireland, generating new business, managing the full sales cycle, engaging C-level and technical stakeholders, leading proofs of value, negotiating contracts, and closing multi-year partnerships. The role involves territory planning, channel and AWS ecosystem collaboration, accurate forecasting, Salesforce discipline, and selling cloud security solutions to mid-large enterprises.

Manage strategic customer relationships after sale, lead technical onboarding and cloud deployments, support feature adoption, address issues, gather feedback, guide roadmap discussions, and partner with sales on renewals and expansions. Advocate for customer needs across Product Management and Technical Support while ensuring customers achieve measurable value from the Upwind cloud security platform.

Designs, implements, maintains, and improves cybersecurity controls across enterprise systems, networks, cloud environments, and applications. Deploys and troubleshoots security technologies, responds to incidents, identifies security requirements, supports audits and change management, documents procedures, analyzes risks, and delivers remediation recommendations. Collaborates with architects, project managers, engineers, and stakeholders to protect organizational data and infrastructure while automating repeatable security tasks.

Provides enterprise SOC/MDR security operations support focused on QRadar administration and engineering, log source integrations, troubleshooting, use case development, content tuning, workflow maintenance, and automation. Supports integrations such as CrowdStrike auto-isolation and develops Python scripts for existing automation requirements. Requires extensive hands-on QRadar expertise and significant IT experience.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Owns architecture, technical strategy, and roadmaps across Arbor’s core product suite and multiple engineering teams. The role guides architectural transformation, AI-first SDLC adoption, system design, technical debt reduction, and complex initiative delivery. It partners with product and engineering leadership, mentors Technical Leads and Senior Engineers, leads architectural reviews, and ensures quality, reliability, security, and compliance standards. This is a strategic technical leadership role focused on coaching and delivery rather than hands-on coding.

Design and govern the end-to-end architecture of Era4’s Kubernetes-based AI infrastructure. The role develops platform blueprints, technical standards, high- and low-level designs, multi-tenant GPU cloud architectures, capacity plans, and technology roadmaps. It coordinates Kubernetes, GPU, networking, storage, automation, security, observability, billing, and cloud services while guiding platform engineering and operations teams toward secure, scalable, reliable, and commercially viable solutions.

Lead Samsara’s vulnerability management and application security programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, and support incident response. The role requires strong AWS, programming, vulnerability management, application security testing, AI/LLM, and security automation expertise.

Design, implement, and improve security controls across Kubernetes, cloud-native, and datacentre infrastructure. Secure networks and firewalls, integrate DevSecOps controls into CI/CD, lead vulnerability management, build detection/response capabilities, automate security workflows, and support incident response and threat hunting for GPU-accelerated and AI/ML platforms.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.