Top Cyber Security Jobs in Edinburgh

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Research emerging attack surfaces, vulnerabilities, malware, and software supply-chain threats. Build AI-powered research and detection workflows, maintain cloud-based security systems, improve vulnerability and malware advisories, responsibly disclose findings, publish technical content, present at conferences, and support team operations. The role combines security research, software development, cloud engineering, adversarial analysis, and AI agent development.

Lead end-to-end product design for AI security and agentic experiences within an enterprise cybersecurity platform. Responsibilities include user research, complex workflow and information architecture design, prototyping, validation, design-system governance, Object-Oriented UX, and translating cybersecurity data into intuitive interfaces. The role partners closely with Product, Engineering, and Research, uses customer insights and behavioral analytics to measure outcomes, and advances scalable, accessible AI-powered product experiences.

Provide technical support for CircleCI customers by building and improving AI support agents, testing agent responses, troubleshooting cloud and distributed systems, and resolving complex customer issues. Maintain documentation, report bugs and incidents, communicate during outages, share feedback with Product and Engineering, meet response targets, and participate in on-call support.

Implements, operates, and improves data security controls across DLP and Data Access Governance. The role configures Microsoft Purview policies, supports Varonis access governance, investigates security events, analyzes permissions, remediates data exposure risks, onboards repositories, maintains automation and documentation, and collaborates with enterprise technology teams. It requires practical experience with data security, DLP, information protection, or access governance technologies, plus knowledge of data classification, security controls, technical investigations, and enterprise environments.

Patrol premises, monitor surveillance systems, respond to alarms and emergencies, conduct security inspections, enforce access control, maintain security procedures, and support security awareness training. The role protects employees, visitors, property, and client facilities while working a 4-on, 4-off shift pattern, including weekends and holidays.

Lead technical and strategic security engineering services for major construction and fit-out projects. Responsibilities include risk assessments, mitigation strategies, operational requirements, security master planning, physical security design, electronic security systems design, and counter-terrorism guidance covering hostile vehicle mitigation, blast protection, and ballistics. The role also requires security consultancy expertise, business development experience, relevant qualifications, and professional security credentials or equivalent commitment to continuing development.

Maintain a safe and secure retail park through patrols, monitoring, emergency response, accurate reporting, contractor oversight, and customer-focused security support. The role includes supporting first aid and fire warden duties, managing conflict, and ensuring compliance with site assignment instructions and health and safety standards.

Supports identity and access management certification campaigns, access reviews, remediation tracking, exception handling, evidence management, audit readiness, and governance reporting. Partners with application owners, reviewers, IAM teams, audit, and compliance stakeholders to validate access data, monitor campaign progress, improve decision quality, and identify process automation and control improvements.

Own security governance, risk, and compliance integration for acquired companies. Assess target security postures, map controls to Payward and external frameworks, score maturity, define and track remediation milestones, manage enterprise risks, support audits, maintain policies, and coordinate with deal teams, leadership, auditors, and control owners across distributed international teams.

Execute end-to-end information security risk assessments, document findings, maintain risk registers, track KRIs, and produce leadership reporting. Build scalable risk workflows, templates, and procedures while partnering with security, compliance, audit, engineering, and legal teams. Analyze technical risk data, support audit readiness, and identify process automation opportunities within Kraken’s Security Governance, Risk, and Compliance program.

Research and prospect into enterprise accounts, identify security decision-makers, conduct AI-assisted multichannel outreach, qualify inbound and outbound leads, overcome objections, and schedule discovery meetings for Account Executives. Maintain accurate Salesforce records, incorporate cybersecurity and AI security insights into messaging, and collaborate with Sales and Marketing to refine ideal customer profiles and improve performance.

Patrols university campuses on foot and by vehicle, assists with control-room operations, responds to fire and intruder alarms, and provides immediate support during incidents or crimes. The role includes welfare support, signposting to agencies, and reassuring staff and students. Candidates need strong communication and listening skills, computer literacy, composure under pressure, attention to detail, and a full driving licence.

Provides a visible, customer-focused security presence across a shopping centre. Duties include patrols, CCTV monitoring, alarm and incident response, access control, lock and unlock procedures, emergency evacuations, incident reporting, hazard identification, contractor safety oversight, and liaison with emergency services. The role also supports customer service initiatives, events, fire response, and business continuity while maintaining compliance with health and safety policies.

Own Trigger.dev’s security compliance and data protection programs, including SOC 2 and HIPAA audits, evidence collection, security questionnaires, vendor assessments, DPAs, GDPR requests, policies, retention, subprocessors, incident response, and trust-portal updates. The role will automate compliance workflows, support framework expansion such as ISO 27001 and ISO 42001, train employees, and partner with engineering, founders, customers, suppliers, and legal counsel.

Lead Camden’s Information Security Compliance Team, overseeing IT security controls and the organisation’s ISO 27001:2022 compliance journey. Responsibilities include developing and evaluating information security controls, reporting on their effectiveness, coordinating internal and external audits, improving security awareness, monitoring threat trends, and collaborating with security leadership and organisational stakeholders on security initiatives and projects.

Eight-week remote internship providing hands-on training in cloud security across AWS, Azure, and Google Cloud. Interns configure secure cloud environments, IAM policies, encryption, network controls, monitoring, logging, compliance controls, and security automation. They identify and remediate misconfigurations, conduct assessments, document findings, and complete a final cloud defense project using tools such as Terraform, Ansible, Python, and cloud-native security services.

Eight-week remote internship providing hands-on network security training through traffic monitoring, intrusion detection, firewall and VPN configuration, operating system hardening, patch management, vulnerability assessment, penetration testing, wireless security testing, network segmentation, and cryptography. Interns use tools such as Wireshark, Nmap, pfSense, and Cisco Packet Tracer, complete practical challenges, and present a final assessment.

Eight-week remote internship focused on application security. Interns conduct SAST, DAST, vulnerability assessments, penetration testing, and secure code reviews for web, mobile, API, database, and cloud applications. They identify OWASP Top 10 and CWE vulnerabilities, practice secure development and DevSecOps, write remediation reports, and complete a capstone project. The program includes mentorship, hands-on labs, cybersecurity tools, professional development, and potential job-placement recommendations.

Supports an enterprise identity security program by developing security metrics, extracting and analyzing identity data in Databricks, and supporting Okta and Ping implementations. Applies AI/ML to fraud detection, identity authentication, and data quality improvement. Creates reports and dashboards, delivers executive briefings, manages stakeholders, and collaborates across functional teams in a fully remote environment.

Provides Tier 3 escalation and advanced MDR/MXDR analysis across endpoint, cloud, identity, email, and network environments. Investigates active breaches, conducts threat hunting, researches emerging threats and malware, develops hunting queries and threat alerts using OSINT, and engages customers from SOC analysts through executives. Requires fluent German and English, rotating UK working-day coverage, and strong expertise in security operations, incident response, endpoint security, malware analysis, and related disciplines.

Lead and perform Tier 2/3 security detection, incident response, threat hunting, malware and attack-chain investigations across customer environments. Escalate complex incidents, engage customers and senior stakeholders, and research emerging threats. Support EU SOC operations through analyst coaching, workload coordination, service-level monitoring, process improvement, onboarding, and technical leadership. The role requires fluent German and English, rotating weekend coverage, and UK-based employment authorization.

Provides senior-level 24/7 SOC monitoring and response for managed security services. Analyzes complex endpoint security events, investigates threats, tunes detection and blocking systems, improves security processes, and supports incident response. Acts as a customer-facing technical escalation point, mentors analysts, documents procedures, and participates in rotating weekend and on-call coverage. Fluent German and English are required, with Palo Alto Cortex XDR and relevant security certifications preferred.

Provide Tier 3 escalation and advanced MDR/MXDR analysis for critical endpoint alerts and complex cloud, identity, email, network, and endpoint environments. Investigate active breaches, conduct threat hunting, research emerging threats and malware, develop hunting queries and threat alerts, and engage customers from SOC analysts through executives. The role requires fluent German and English, rotating weekend coverage, and remote work from the UK.

Provides senior-level 24/7 security monitoring and response within a managed security services SOC. Responsibilities include analyzing complex endpoint security events, threat hunting, incident investigation, tuning and baselining detection tools, improving security processes, supporting DFIR teams, resolving technical issues, mentoring analysts, and serving as a customer-facing escalation point. Requires fluent English and German, UK work authorization, rotating weekend coverage, and strong incident response and endpoint security knowledge.