Top Cyber Security Jobs in Edinburgh

Leads OT security monitoring and triage operations, investigates suspicious activity across industrial networks, validates detections, and escalates findings to incident responders and threat hunters. Maintains the Dragos Platform for customers, including asset classification, vulnerability management, detection tuning, and hardening recommendations. Produces incident reports, mentors analysts, collaborates across cybersecurity teams, and develops expertise in ICS protocols, adversary tactics, and industrial threat intelligence. The role includes shift-based coverage and occasional weekend or on-call work.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Build BLP’s core software across infrastructure, backend, machine learning, and product extension platforms. Responsibilities include operating secure and observable cloud infrastructure, developing performant distributed systems, applying AI to business problems, and enabling customer process automation. The role emphasizes formal reasoning, correctness by construction, maintainable systems, type systems, and functional programming. Work is available onsite in Zurich or remotely within Europe.

Maintain and improve Microsoft Defender for Endpoint, Microsoft Sentinel, security monitoring, endpoint protection, log ingestion, and detection capabilities. Support application onboarding, cloud security controls, audits, incident response, investigations, AI-driven security use cases, and stakeholder collaboration. The role also mentors junior team members and helps maintain operational KPIs, KRIs, and standards.

Patrols university campuses on foot and by vehicle, assists with control-room operations, responds to fire and intruder alarms, and provides immediate support during incidents or crimes. The role includes welfare support, signposting to agencies, and reassuring staff and students. Candidates need strong communication and listening skills, computer literacy, composure under pressure, attention to detail, and a full driving licence.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Owns architecture, technical strategy, and roadmaps across Arbor’s core product suite and multiple engineering teams. The role guides architectural transformation, AI-first SDLC adoption, system design, technical debt reduction, and complex initiative delivery. It partners with product and engineering leadership, mentors Technical Leads and Senior Engineers, leads architectural reviews, and ensures quality, reliability, security, and compliance standards. This is a strategic technical leadership role focused on coaching and delivery rather than hands-on coding.

Design and govern the end-to-end architecture of Era4’s Kubernetes-based AI infrastructure. The role develops platform blueprints, technical standards, high- and low-level designs, multi-tenant GPU cloud architectures, capacity plans, and technology roadmaps. It coordinates Kubernetes, GPU, networking, storage, automation, security, observability, billing, and cloud services while guiding platform engineering and operations teams toward secure, scalable, reliable, and commercially viable solutions.

Lead Samsara’s vulnerability management and application security programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, and support incident response. The role requires strong AWS, programming, vulnerability management, application security testing, AI/LLM, and security automation expertise.

Design, implement, and improve security controls across Kubernetes, cloud-native, and datacentre infrastructure. Secure networks and firewalls, integrate DevSecOps controls into CI/CD, lead vulnerability management, build detection/response capabilities, automate security workflows, and support incident response and threat hunting for GPU-accelerated and AI/ML platforms.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Own the UK&I SMB and startup segment, generating pipeline and closing new business through full sales cycles. Build territory plans, prospect outbound and via partners, engage founders and technical leaders, run evaluations with Solutions Engineering, negotiate agreements, forecast accurately in Salesforce, and identify expansion opportunities. The role requires high-volume pipeline management, quota attainment, cloud or cybersecurity sales knowledge, and disciplined qualification.

Own enterprise sales across the UK and Ireland, generating new business, managing the full sales cycle, engaging C-level and technical stakeholders, leading proofs of value, negotiating contracts, and closing multi-year partnerships. The role involves territory planning, channel and AWS ecosystem collaboration, accurate forecasting, Salesforce discipline, and selling cloud security solutions to mid-large enterprises.

Conduct outbound cold calls and email outreach, identify prospect needs, qualify marketing leads, generate new business opportunities, and meet sales targets. The role requires collaborating across sales teams, communicating with senior stakeholders, managing multiple accounts, and becoming a subject matter expert on Abnormal AI products.

Monitor and respond to global security incidents, lead incident response lifecycles, conduct threat hunting, manage threat intelligence workflows, and maintain SIEM, EDR, SOAR, alerts, playbooks, and escalation processes. The role participates in on-call rotations, coordinates stakeholders, and drives continuous improvement across preparation, detection, containment, and post-incident activities.

Configure and mature CrowdStrike Falcon Cloud Security and CNAPP capabilities across Kubernetes and Amazon EKS environments. Responsibilities include CSPM, CDR, CWP, CIEM, container security, runtime protection, admission control, security testing, and detection validation. The consultant will collaborate with cloud engineering teams, communicate technical decisions to stakeholders, and support a state government health agency in a primarily remote role with monthly travel.

Lead technical response to security events across Twilio's global cloud infrastructure: triage, contain, remediate, document incidents, build runbooks and automations, drive post-incident improvements, participate in on-call rotation and RCAs, and collaborate with R&D to scale threat mitigation and incident response capabilities.

Lead mobile security architecture, penetration testing, threat modeling, security assessments, and secure solution delivery across Android and iOS platforms. Define technical strategies, identify risks, recommend mitigations, advise clients, and drive security quality and compliance. Collaborate across full-stack mobile teams, improve security practices and tooling, and support Agile delivery. The role also involves mobile security research, reverse engineering, cryptographic controls, and DevSecOps practices.

Lead mobile security architecture, penetration testing, threat modeling, security assessments, and control implementation across Android and iOS platforms. Define secure technical strategies, develop mitigation plans, advise clients, and drive security quality and compliance. The role also contributes to mobile development, DevSecOps, reverse engineering, security research, Agile practices, technical roadmaps, and continuous improvement across front-end and back-end systems.

Manage and grow cybersecurity channel partnerships, primarily in Germany, by recruiting partners, driving pipeline and revenue, coordinating joint sales and marketing initiatives, and managing partner performance. Build relationships with resellers, distributors, systems integrators, and technology vendors; support partner planning, compliance, opportunity registration, and conflict resolution. The role requires native German and fluent English, security SaaS channel sales experience, Salesforce and PRM knowledge, and travel up to 50%.

Designs and operates secure, scalable AWS infrastructure and reusable Terraform modules. Owns CI/CD, GitOps, observability, reliability, automation, and cost optimization. Builds production platforms for AI agents and LLM-backed services, including identity, access controls, secrets, evaluation, regression testing, and operational safeguards. Mentors engineers, communicates technical trade-offs, and supports broader platform and developer-experience strategy.

Lead end-to-end incident response for high-severity security events across cloud environments, perform DFIR investigations, build detection and automation (including AI-assisted) workflows, partner cross-functionally, produce executive communications and RCAs, maintain runbooks/playbooks, and mentor other engineers within a 24/7 global on-call model.

Manage the EMEA Security Operations Center within a global 24/7 operation. Responsibilities include defining processes, workflows, and playbooks; maintaining shift coverage and quality assurance; coaching analysts; developing training; partnering with Product, Support, and security teams; improving incident response capabilities; tracking objectives and key results; operationalizing new services; and representing the company in public speaking engagements.