Top Cyber Security Jobs in Edinburgh

Create and improve governance, risk, and compliance security labs, challenges, and learning content. Research regulations and standards, develop practical simulations, peer-review cyber ranges, simplify complex cybersecurity concepts, and advise engineering and product teams on security and privacy by design. The role requires GRC audit experience, knowledge of major compliance frameworks, strong cybersecurity fundamentals, and the ability to create engaging training for technical and non-technical users.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Lead a team of 10 Data Security Specialist Account Executives across EMEA and APJ. Responsibilities include recruiting and coaching sales talent, managing regional business plans and forecasts, collaborating with sales, marketing, product, services, and partners, and driving revenue attainment. The role requires software or security sales experience, data security leadership, regional management, C-level selling, and familiarity with AI/ML technologies.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Designs, builds, tests, and improves cloud security labs, challenges, and learning content for a cyber resilience platform. The role focuses on AWS, Azure, GCP, Kubernetes, SIEM, CSPM/CNAPP, containers, Terraform, serverless technologies, identity, access, networking, monitoring, and DevSecOps. Responsibilities include creating realistic attack-and-defense simulations, translating technical research into accessible content, collaborating with engineering and product teams, and supporting cloud security content strategy.

Leads OT security monitoring and triage operations, investigates suspicious activity across industrial networks, validates detections, and escalates findings to incident responders and threat hunters. Maintains the Dragos Platform for customers, including asset classification, vulnerability management, detection tuning, and hardening recommendations. Produces incident reports, mentors analysts, collaborates across cybersecurity teams, and develops expertise in ICS protocols, adversary tactics, and industrial threat intelligence. The role includes shift-based coverage and occasional weekend or on-call work.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Build BLP’s core software across infrastructure, backend, machine learning, and product extension platforms. Responsibilities include operating secure and observable cloud infrastructure, developing performant distributed systems, applying AI to business problems, and enabling customer process automation. The role emphasizes formal reasoning, correctness by construction, maintainable systems, type systems, and functional programming. Work is available onsite in Zurich or remotely within Europe.

Build, integrate, and maintain cybersecurity platforms and controls across cloud, identity, endpoint, vulnerability management, and security operations. Develop automation, APIs, integrations, and self-service tooling using scripting and Infrastructure as Code. Improve cloud security, CI/CD controls, privileged access, and secrets management. Contribute to architecture reviews, threat modelling, control validation, incident response, secure AI adoption, and technical documentation while advising technology teams on practical risk reduction.

Leads the Security Operations team, overseeing security monitoring, alert investigation, threat hunting, incident response, detection engineering, and threat-informed defense. The role sets the security operations roadmap, manages people and operational capacity, oversees SIEM, EDR, and SOAR capabilities, coordinates major incidents, advises technology and governance teams, and reports threats, incidents, and capability gaps to senior leaders.

Drives adoption, optimization, and customer success for Splunk’s security platform. Provides technical guidance on Enterprise Security and UBA use cases, configuration, and resilience; resolves complex challenges; collaborates with sales, support, and product teams; develops scalable processes and enablement materials; identifies expansion opportunities; and mentors team members. Requires substantial information security experience, Splunk certifications, SIEM expertise, security certifications, and proficiency across Unix, Windows, Bash, and Python.

Secure Tide’s web, mobile, and cloud-native products through vulnerability hunting, threat modeling, secure design reviews, remediation, proof-of-concept scripting, and CI/CD security automation. The role serves as an Application Security subject matter expert, partners with engineering and product teams, communicates risks to executives, and mentors junior engineers.

Leads Jhpiego’s global security strategy, policies, risk mitigation, crisis and incident response, travel security, business continuity, investigations, training, and physical asset protection. Manages security vendors, intelligence networks, emergency response plans, executive travel safety, and global security personnel. Provides mentorship, cross-cultural leadership, and technical guidance across international programs, particularly in conflict-affected regions.

Leads the development of security tools, integrations, automations, and services from requirements through operational handover. Translates SOC and threat intelligence needs into technical capabilities, evaluates emerging security technologies, manages proof-of-concepts and pilots, and provides technical leadership. The role also establishes and develops the security capability function while collaborating with engineers, vendors, SOC teams, and CTI specialists.

Designs and delivers cyber security and resilience training for UK education and research organisations. Responsibilities include developing training roadmaps, creating learning materials, facilitating workshops and presentations, and delivering practical exercises covering ransomware, incident response, crisis management, red teaming, and tabletop simulations. The role collaborates with subject matter experts and sector partners to improve cyber resilience and represents Jisc at relevant events.

Conduct outbound cold calls and email outreach, identify and qualify prospective clients, understand customer needs, communicate product value, and meet sales targets. The role partners with sales teams, manages assigned territories, engages senior stakeholders, and serves as a subject matter expert on Abnormal AI products. Fluency in Dutch, strong communication skills, sales technique experience, organization, resilience, and familiarity with sales and AI tools are required.

Analyze complex datasets, develop dashboards and reports, translate stakeholder requirements into data-driven solutions, and support analytical models and AI-enabled capabilities. The role involves collaborating with engineers and multidisciplinary Agile teams, ensuring data quality and documentation, presenting insights, and supporting UX/UI design within a secure Defence programme.

Own the end-to-end Continuous Control Monitoring capability, including KPI and KRI development, cybersecurity risk insights, product roadmap management, solution design, stakeholder engagement, and supplier service oversight. Advise senior management on cybersecurity posture, threats, strategies, and risk management while ensuring alignment with regulatory requirements, industry standards, risk appetite, and vulnerability management standards.

Maintain and improve Microsoft Defender for Endpoint, Microsoft Sentinel, security monitoring, endpoint protection, log ingestion, and detection capabilities. Support application onboarding, cloud security controls, audits, incident response, investigations, AI-driven security use cases, and stakeholder collaboration. The role also mentors junior team members and helps maintain operational KPIs, KRIs, and standards.

Own and support strategic B2B events across EMEA, including conferences, flagship events, executive programs, and trade shows. Responsibilities include end-to-end logistics, vendor coordination, budgets, project plans, registration, stakeholder collaboration, on-site execution, post-event reporting, ROI tracking, and regional event strategy. The role requires managing multiple concurrent events, coordinating cross-functional teams, and traveling extensively across EMEA with occasional APAC and AMER travel.

Leads EMEA renewals sales for Data Security and Application Security portfolios, owning retention, recurring revenue, forecasting, churn mitigation, and commercial execution. Manages Renewal Sales Managers and Specialists, develops regional strategy, negotiates strategic contracts, and partners with Sales, Finance, Customer Success, Product, Legal, and Executive Leadership. The role also drives renewal governance, operational excellence, organizational development, talent coaching, and executive reporting across geographically dispersed teams.

Provides flexible technical expertise across customer engagements, partnering with Customer Success Managers to investigate issues, optimize platform configurations, deliver best-practice guidance, document recommendations, identify expansion opportunities, and escalate complex situations. The role manages multiple short-term technical engagements across enterprise SaaS or cybersecurity customers and surfaces recurring patterns to Product, Engineering, and Customer Success.

Leads the strategic direction, growth, and delivery of an information security consultancy practice. Responsibilities include managing and mentoring teams, overseeing ISO 27001 and Cyber Essentials engagements, advising clients on governance, risk, compliance, AI security, and emerging technologies, developing methodologies, supporting proposals and business growth, and communicating risks to senior stakeholders.

Patrols university campuses on foot and by vehicle, assists with control-room operations, responds to fire and intruder alarms, and provides immediate support during incidents or crimes. The role includes welfare support, signposting to agencies, and reassuring staff and students. Candidates need strong communication and listening skills, computer literacy, composure under pressure, attention to detail, and a full driving licence.

Implement and support the cybersecurity risk assessment framework, processes, and vendor tooling. Prepare cybersecurity risk reports for governance forums, review risk appetite statements, develop risk training, and help embed risk assessment into business and technology change. Coach and mentor Cyber Risk Analysts and Associates while collaborating with Governance, Risk & Compliance stakeholders.