Top Cyber Security Jobs in Edinburgh

Create and improve governance, risk, and compliance security labs, challenges, and learning content. Research regulations and standards, develop practical simulations, peer-review cyber ranges, simplify complex cybersecurity concepts, and advise engineering and product teams on security and privacy by design. The role requires GRC audit experience, knowledge of major compliance frameworks, strong cybersecurity fundamentals, and the ability to create engaging training for technical and non-technical users.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Lead a team of 10 Data Security Specialist Account Executives across EMEA and APJ. Responsibilities include recruiting and coaching sales talent, managing regional business plans and forecasts, collaborating with sales, marketing, product, services, and partners, and driving revenue attainment. The role requires software or security sales experience, data security leadership, regional management, C-level selling, and familiarity with AI/ML technologies.

Leads technical direction and hands-on execution for major products and systems. Designs scalable backend, frontend, API, database, and infrastructure solutions; writes code; drives architecture decisions; solves production issues; improves engineering quality, reliability, security, testing, and observability; and mentors engineers across teams.

Lead and manage a cross-functional engineering team to deliver reliable, scalable wealth-management products. Drive architecture, code quality, observability, incident response, and engineering culture while coaching engineers and improving processes to increase delivery speed and reliability.

Own technical direction and execution for major products and systems. Design scalable and reliable architectures, write production code, lead architecture decisions, solve complex engineering problems, and drive initiatives from concept through production. Improve engineering quality across testing, security, observability, and development practices while mentoring engineers and coordinating work across teams and products.

Lead and manage a cross-functional engineering team to deliver and scale customer-facing products. Own architecture, delivery, reliability, observability, and production outcomes. Coach engineers, run reviews, improve processes and tooling, and drive technical decisions across frontend, backend, APIs, databases, integrations, and infrastructure.

Lead and manage a cross-functional engineering team to design, build, and operate production systems. Own technical architecture, delivery, reliability, and processes. Coach engineers, run reviews, resolve incidents, and drive product outcomes while balancing speed, scalability, and quality.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Designs, builds, tests, and improves cloud security labs, challenges, and learning content for a cyber resilience platform. The role focuses on AWS, Azure, GCP, Kubernetes, SIEM, CSPM/CNAPP, containers, Terraform, serverless technologies, identity, access, networking, monitoring, and DevSecOps. Responsibilities include creating realistic attack-and-defense simulations, translating technical research into accessible content, collaborating with engineering and product teams, and supporting cloud security content strategy.

Leads OT security monitoring and triage operations, investigates suspicious activity across industrial networks, validates detections, and escalates findings to incident responders and threat hunters. Maintains the Dragos Platform for customers, including asset classification, vulnerability management, detection tuning, and hardening recommendations. Produces incident reports, mentors analysts, collaborates across cybersecurity teams, and develops expertise in ICS protocols, adversary tactics, and industrial threat intelligence. The role includes shift-based coverage and occasional weekend or on-call work.

Lead security engineering delivery for complex, security-sensitive infrastructure projects. Define threats, vulnerabilities, operational requirements, risk treatments, and integrated physical, electronic, personnel, procedural, and digital security solutions. Coordinate with multidisciplinary design teams, assure technical outputs, manage scope, budgets, resources, quality, and client relationships, and mentor less-experienced engineers. Support bids, proposals, service development, and professional growth while contributing across the built-asset lifecycle.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Build BLP’s core software across infrastructure, backend, machine learning, and product extension platforms. Responsibilities include operating secure and observable cloud infrastructure, developing performant distributed systems, applying AI to business problems, and enabling customer process automation. The role emphasizes formal reasoning, correctness by construction, maintainable systems, type systems, and functional programming. Work is available onsite in Zurich or remotely within Europe.

Build, integrate, and maintain cybersecurity platforms and controls across cloud, identity, endpoint, vulnerability management, and security operations. Develop automation, APIs, integrations, and self-service tooling using scripting and Infrastructure as Code. Improve cloud security, CI/CD controls, privileged access, and secrets management. Contribute to architecture reviews, threat modelling, control validation, incident response, secure AI adoption, and technical documentation while advising technology teams on practical risk reduction.

Leads the Security Operations team, overseeing security monitoring, alert investigation, threat hunting, incident response, detection engineering, and threat-informed defense. The role sets the security operations roadmap, manages people and operational capacity, oversees SIEM, EDR, and SOAR capabilities, coordinates major incidents, advises technology and governance teams, and reports threats, incidents, and capability gaps to senior leaders.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001 and SOC 2 Type 2). Manage SoA, risk treatment, audits, policy lifecycle, gap remediation, internal audits, and cross-functional control ownership while advising security leadership on certification readiness and compliance strategy.

Own the full enterprise sales cycle across the UK, from prospecting and new-logo acquisition through negotiation and close. Manage complex, multi-stakeholder deals, deliver tailored demos and proof-of-value engagements, maintain Salesforce pipeline forecasts, and build trusted executive relationships. Collaborate with Marketing, Sales Engineering, Product, and Leadership while consistently exceeding quotas. The role also includes mentoring junior team members and applying structured sales methodologies.

Drives adoption, optimization, and customer success for Splunk’s security platform. Provides technical guidance on Enterprise Security and UBA use cases, configuration, and resilience; resolves complex challenges; collaborates with sales, support, and product teams; develops scalable processes and enablement materials; identifies expansion opportunities; and mentors team members. Requires substantial information security experience, Splunk certifications, SIEM expertise, security certifications, and proficiency across Unix, Windows, Bash, and Python.

Design, implement, test, and ship Firefox security and hardening features for enterprise users. Improve browser security architecture across operating systems, including privilege isolation, trust boundaries, cryptographic protocols, WebPKI, and security-sensitive web APIs. Investigate security issues, deliver maintainable fixes, and resolve stability, correctness, performance, memory, and multithreading challenges in a complex native codebase.

Secure Tide’s web, mobile, and cloud-native products through vulnerability hunting, threat modeling, secure design reviews, remediation, proof-of-concept scripting, and CI/CD security automation. The role serves as an Application Security subject matter expert, partners with engineering and product teams, communicates risks to executives, and mentors junior engineers.

Leads Jhpiego’s global security strategy, policies, risk mitigation, crisis and incident response, travel security, business continuity, investigations, training, and physical asset protection. Manages security vendors, intelligence networks, emergency response plans, executive travel safety, and global security personnel. Provides mentorship, cross-cultural leadership, and technical guidance across international programs, particularly in conflict-affected regions.

Leads the development of security tools, integrations, automations, and services from requirements through operational handover. Translates SOC and threat intelligence needs into technical capabilities, evaluates emerging security technologies, manages proof-of-concepts and pilots, and provides technical leadership. The role also establishes and develops the security capability function while collaborating with engineers, vendors, SOC teams, and CTI specialists.

Designs and delivers cyber security and resilience training for UK education and research organisations. Responsibilities include developing training roadmaps, creating learning materials, facilitating workshops and presentations, and delivering practical exercises covering ransomware, incident response, crisis management, red teaming, and tabletop simulations. The role collaborates with subject matter experts and sector partners to improve cyber resilience and represents Jisc at relevant events.

Conduct outbound cold calls and email outreach, identify and qualify prospective clients, understand customer needs, communicate product value, and meet sales targets. The role partners with sales teams, manages assigned territories, engages senior stakeholders, and serves as a subject matter expert on Abnormal AI products. Fluency in Dutch, strong communication skills, sales technique experience, organization, resilience, and familiarity with sales and AI tools are required.