Top Cyber Security Jobs in Edinburgh

Leads OT security monitoring and triage operations, investigates suspicious activity across industrial networks, validates detections, and escalates findings to incident responders and threat hunters. Maintains the Dragos Platform for customers, including asset classification, vulnerability management, detection tuning, and hardening recommendations. Produces incident reports, mentors analysts, collaborates across cybersecurity teams, and develops expertise in ICS protocols, adversary tactics, and industrial threat intelligence. The role includes shift-based coverage and occasional weekend or on-call work.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Build BLP’s core software across infrastructure, backend, machine learning, and product extension platforms. Responsibilities include operating secure and observable cloud infrastructure, developing performant distributed systems, applying AI to business problems, and enabling customer process automation. The role emphasizes formal reasoning, correctness by construction, maintainable systems, type systems, and functional programming. Work is available onsite in Zurich or remotely within Europe.

Lead complex cloud, AI, digital transformation, and technology programmes for enterprise, public sector, and regulated-industry customers. Responsibilities include delivery planning, governance, risk management, financial controls, executive stakeholder engagement, presales support, and cross-functional team leadership. The role ensures delivery quality, customer satisfaction, and measurable business outcomes while operating across secure and regulated environments.

Patrols university campuses on foot and by vehicle, assists with control-room operations, responds to fire and intruder alarms, and provides immediate support during incidents or crimes. The role includes welfare support, signposting to agencies, and reassuring staff and students. Candidates need strong communication and listening skills, computer literacy, composure under pressure, attention to detail, and a full driving licence.

Designs, engineers, and maintains network traffic management and security infrastructure products. Responsibilities include infrastructure as code, CI/CD automation, testing, observability, operational support, product lifecycle management, vendor collaboration, and stakeholder communication. The role requires experience with GitLab CI/CD, Ansible, F5 BIG-IP, NGINX platforms, Broadcom AVI Load Balancer, on-premises data centers, Agile practices, and software testing.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Owns architecture, technical strategy, and roadmaps across Arbor’s core product suite and multiple engineering teams. The role guides architectural transformation, AI-first SDLC adoption, system design, technical debt reduction, and complex initiative delivery. It partners with product and engineering leadership, mentors Technical Leads and Senior Engineers, leads architectural reviews, and ensures quality, reliability, security, and compliance standards. This is a strategic technical leadership role focused on coaching and delivery rather than hands-on coding.

Design and govern the end-to-end architecture of Era4’s Kubernetes-based AI infrastructure. The role develops platform blueprints, technical standards, high- and low-level designs, multi-tenant GPU cloud architectures, capacity plans, and technology roadmaps. It coordinates Kubernetes, GPU, networking, storage, automation, security, observability, billing, and cloud services while guiding platform engineering and operations teams toward secure, scalable, reliable, and commercially viable solutions.

Lead Samsara’s vulnerability management and application security programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, and support incident response. The role requires strong AWS, programming, vulnerability management, application security testing, AI/LLM, and security automation expertise.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Configure and mature CrowdStrike Falcon Cloud Security and CNAPP capabilities across Kubernetes and Amazon EKS environments. Responsibilities include CSPM, CDR, CWP, CIEM, container security, runtime protection, admission control, security testing, and detection validation. The consultant will collaborate with cloud engineering teams, communicate technical decisions to stakeholders, and support a state government health agency in a primarily remote role with monthly travel.

Lead technical response to security events across Twilio's global cloud infrastructure: triage, contain, remediate, document incidents, build runbooks and automations, drive post-incident improvements, participate in on-call rotation and RCAs, and collaborate with R&D to scale threat mitigation and incident response capabilities.

Manage and monitor the bank’s global cryptographic assets across business applications and use cases. Provide BAU and on-call support, conduct security assessments and penetration testing, implement and monitor cryptographic solutions, manage incidents and vulnerabilities, and ensure compliance with technology controls and standards. The role also develops training and documentation, provides cryptography expertise, leads continuous improvement, and advises technical and senior stakeholders within a 24/7 global team.

Manage and grow cybersecurity channel partnerships, primarily in Germany, by recruiting partners, driving pipeline and revenue, coordinating joint sales and marketing initiatives, and managing partner performance. Build relationships with resellers, distributors, systems integrators, and technology vendors; support partner planning, compliance, opportunity registration, and conflict resolution. The role requires native German and fluent English, security SaaS channel sales experience, Salesforce and PRM knowledge, and travel up to 50%.

Develop and implement security controls across backend systems, investigate incidents and anomalies, triage bug bounty submissions, conduct threat hunting, improve remediation processes, maintain security policies, and support access governance. The role requires hands-on coding, strong PHP knowledge, security awareness, clear communication with nontechnical teams, and ownership across a broad technology stack.

Lead end-to-end incident response for high-severity security events across cloud environments, perform DFIR investigations, build detection and automation (including AI-assisted) workflows, partner cross-functionally, produce executive communications and RCAs, maintain runbooks/playbooks, and mentor other engineers within a 24/7 global on-call model.

Manage the EMEA Security Operations Center within a global 24/7 operation. Responsibilities include defining processes, workflows, and playbooks; maintaining shift coverage and quality assurance; coaching analysts; developing training; partnering with Product, Support, and security teams; improving incident response capabilities; tracking objectives and key results; operationalizing new services; and representing the company in public speaking engagements.

Owns an AI neobank product vertical end to end, including strategy, metrics, roadmap, technical design, delivery, and launch. The role involves shaping reliable financial systems across APIs, data flows, ledgering, reconciliation, security, scalability, and regulatory requirements. Responsibilities include applying AI with safeguards and evaluation, managing financial rails and third-party dependencies, and aligning engineering, design, compliance, operations, treasury, and finance. Candidates need strong technical product management experience in regulated financial or other high-consequence domains.

Build and secure backend systems that execute untrusted user code at scale. Responsibilities include designing sandboxed runtimes, threat detection, incident response, vulnerability management, penetration testing, security reviews, vulnerability disclosure, SOC 2 maintenance, and promoting security practices across engineering. The role requires backend engineering, offensive-security curiosity, runtime isolation experience, on-call participation, and collaboration with an open-source developer tools community.

Owns the security revenue quota for an assigned territory, selling Cohesity’s cyber resilience portfolio to CISOs, security executives, and enterprise buyers. Responsibilities include generating pipeline, conducting consultative sales, building executive business cases, managing multi-stakeholder accounts, expanding product adoption, coordinating technical specialists and account executives, engaging partners, maintaining CRM hygiene, and forecasting accurately. The role requires regular customer travel and periodic travel to headquarters and company events.

Own the technical win for enterprise security deals by designing ransomware-recovery, immutable backup, air-gapped vaulting, identity-resilience, and DSPM architectures. Lead discovery, demos, technical workshops, proofs of concept, pilots, executive presentations, and solution design while partnering with specialist sales executives and security partners. Serve as a security architecture subject-matter expert for CISOs and technical stakeholders, provide technical qualification, and feed field insights into product roadmaps.

Manages global corporate security activities, including access control, CCTV and alarm systems, security vendor relationships, employee training, security reporting, business resiliency planning, facility surveillance, and crisis response. The role applies security standards, resolves technical and operational issues, and supports projects of moderate scope and complexity.