Top Cyber Security Jobs in Edinburgh

Conduct red team operations, adversary simulations, and offensive security assessments across cloud infrastructure, identity systems, CI/CD pipelines, containers, and cloud-native services. Identify attack paths, validate vulnerabilities, assess detection and response coverage, track emerging attacker techniques, and drive remediation. Produce actionable reports and communicate technical findings to engineering, security, and business stakeholders.

Assesses customers’ Falcon environments, recommends security improvements and remediation, identifies standards misalignment, manages customer issues within SLAs, creates service reports, and coordinates with internal support teams to resolve technical problems. The role requires strong customer communication, operating-system knowledge, threat detection and incident-response expertise, and the ability to guide customers toward improved security posture.

Lead the infrastructure transformation roadmap across networking, platforms, security, identity, supply chain, and logistics systems. Define programme objectives, governance, success measures, budgets, risks, dependencies, and milestones across multiple teams. Partner with technical leaders and business stakeholders to ensure feasibility and quality while promoting automation, observability, zero-trust security, continuous improvement, and healthy team performance.

Create and improve governance, risk, and compliance security labs, challenges, and learning content. Research regulations and standards, develop practical simulations, peer-review cyber ranges, simplify complex cybersecurity concepts, and advise engineering and product teams on security and privacy by design. The role requires GRC audit experience, knowledge of major compliance frameworks, strong cybersecurity fundamentals, and the ability to create engaging training for technical and non-technical users.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Lead a team of 10 Data Security Specialist Account Executives across EMEA and APJ. Responsibilities include recruiting and coaching sales talent, managing regional business plans and forecasts, collaborating with sales, marketing, product, services, and partners, and driving revenue attainment. The role requires software or security sales experience, data security leadership, regional management, C-level selling, and familiarity with AI/ML technologies.

Leads technical direction and hands-on execution for major products and systems. Designs scalable backend, frontend, API, database, and infrastructure solutions; writes code; drives architecture decisions; solves production issues; improves engineering quality, reliability, security, testing, and observability; and mentors engineers across teams.

Lead and manage a cross-functional engineering team to deliver reliable, scalable wealth-management products. Drive architecture, code quality, observability, incident response, and engineering culture while coaching engineers and improving processes to increase delivery speed and reliability.

Own technical direction and execution for major products and systems. Design scalable and reliable architectures, write production code, lead architecture decisions, solve complex engineering problems, and drive initiatives from concept through production. Improve engineering quality across testing, security, observability, and development practices while mentoring engineers and coordinating work across teams and products.

Lead and manage a cross-functional engineering team to deliver and scale customer-facing products. Own architecture, delivery, reliability, observability, and production outcomes. Coach engineers, run reviews, improve processes and tooling, and drive technical decisions across frontend, backend, APIs, databases, integrations, and infrastructure.

Lead and manage a cross-functional engineering team to design, build, and operate production systems. Own technical architecture, delivery, reliability, and processes. Coach engineers, run reviews, resolve incidents, and drive product outcomes while balancing speed, scalability, and quality.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Designs, builds, tests, and improves cloud security labs, challenges, and learning content for a cyber resilience platform. The role focuses on AWS, Azure, GCP, Kubernetes, SIEM, CSPM/CNAPP, containers, Terraform, serverless technologies, identity, access, networking, monitoring, and DevSecOps. Responsibilities include creating realistic attack-and-defense simulations, translating technical research into accessible content, collaborating with engineering and product teams, and supporting cloud security content strategy.

Provides strategic procurement and contract advice for public and private-sector clients. Responsibilities include managing end-to-end procurement services, tender preparation, supplier engagement, contract award, post-contract management, commercial modeling, and procurement strategy development. The role also supports bids, business development, team leadership, and client stakeholder management across major infrastructure, utilities, defense, renewables, and transformation projects.

Provides on-site security for client premises by patrolling facilities, monitoring surveillance systems, responding to alarms and emergencies, conducting inspections, enforcing access controls, identifying risks, and supporting security protocols and awareness training. The role requires strong observation, communication, problem-solving, teamwork, and flexibility to work 12-hour shifts, weekends, and holidays.

Provides visible security, patrols, CCTV and control room monitoring at a shopping centre. Responds to incidents, emergencies and customer concerns; manages access, alarms, visitors, lost property, contractors and deliveries. Completes incident reports, audits, compliance paperwork and life-safety checks while enforcing fire, health and safety, and site procedures. Requires a valid SIA Security Licence, customer-facing security experience, strong communication, accurate record keeping and flexible shift availability.

Maintain and improve Microsoft Defender for Endpoint, Microsoft Sentinel, security monitoring, endpoint protection, log ingestion, and detection capabilities. Support application onboarding, cloud security controls, audits, incident response, investigations, AI-driven security use cases, and stakeholder collaboration. The role also mentors junior team members and helps maintain operational KPIs, KRIs, and standards.

Leads OT security monitoring and triage operations, investigates suspicious activity across industrial networks, validates detections, and escalates findings to incident responders and threat hunters. Maintains the Dragos Platform for customers, including asset classification, vulnerability management, detection tuning, and hardening recommendations. Produces incident reports, mentors analysts, collaborates across cybersecurity teams, and develops expertise in ICS protocols, adversary tactics, and industrial threat intelligence. The role includes shift-based coverage and occasional weekend or on-call work.

Leads secure code reviews across web, mobile, API, embedded, and cryptographic systems; identifies vulnerabilities and provides actionable remediation guidance. Conducts application penetration testing, threat modeling, secure design reviews, and SDLC advisory engagements. Serves as a senior technical client representative, mentors consultants, contributes to AppSec methodologies and research, supports pre-sales, and participates in industry events and published security research.

Provides senior application security architecture leadership with emphasis on API, AI, and agentic systems. Guides secure architecture decisions, threat modeling, secure design reviews, governance, authentication, authorization, cryptography, and cloud-native security. Partners hands-on with engineering teams, assesses existing implementations using security tooling and gateways, establishes policies and standards, mentors developers, and reports security metrics to leadership.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Own product marketing strategy for Eye Security’s MDR/XDR cybersecurity portfolio. Develop positioning, value propositions, go-to-market strategies, sales enablement, competitive intelligence, and content strategy. Partner across Product, Engineering, Sales, and Marketing while mentoring team members and influencing product roadmap decisions. The role requires deep cybersecurity market knowledge, strong B2B SaaS marketing experience, strategic execution, fluent English, and C2 German.

Design, implement, configure, and improve cybersecurity tools and platforms. Evaluate emerging technologies, support AI-enabled security and automation, strengthen monitoring and observability, investigate technical security issues, deliver secure cloud and SaaS integrations, and collaborate with architecture, compliance, and technology teams to improve security posture and organizational resilience.

Lead security engineering delivery for complex, security-sensitive infrastructure projects. Define threats, vulnerabilities, operational requirements, risk treatments, and integrated physical, electronic, personnel, procedural, and digital security solutions. Coordinate with multidisciplinary design teams, assure technical outputs, manage scope, budgets, resources, quality, and client relationships, and mentor less-experienced engineers. Support bids, proposals, service development, and professional growth while contributing across the built-asset lifecycle.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.