Top Cyber Security Jobs in Edinburgh

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Designs, builds, tests, and improves cloud security labs, challenges, and learning content for a cyber resilience platform. The role focuses on AWS, Azure, GCP, Kubernetes, SIEM, CSPM/CNAPP, containers, Terraform, serverless technologies, identity, access, networking, monitoring, and DevSecOps. Responsibilities include creating realistic attack-and-defense simulations, translating technical research into accessible content, collaborating with engineering and product teams, and supporting cloud security content strategy.

Provides second-line technical support and assurance across incidents, problems, changes, technical administration, documentation, and service readiness. Supports major incident recovery, root-cause analysis, change reviews, vulnerability remediation, product triage, and continuous improvement. The role collaborates with customers, delivery teams, architects, security, and suppliers while maintaining ITIL-aligned governance and documentation. Work may be remote, hybrid, or on-site and requires the ability to obtain and maintain NPPV3 and SC clearance.

Leads OT security monitoring and triage operations, investigates suspicious activity across industrial networks, validates detections, and escalates findings to incident responders and threat hunters. Maintains the Dragos Platform for customers, including asset classification, vulnerability management, detection tuning, and hardening recommendations. Produces incident reports, mentors analysts, collaborates across cybersecurity teams, and develops expertise in ICS protocols, adversary tactics, and industrial threat intelligence. The role includes shift-based coverage and occasional weekend or on-call work.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Build BLP’s core software across infrastructure, backend, machine learning, and product extension platforms. Responsibilities include operating secure and observable cloud infrastructure, developing performant distributed systems, applying AI to business problems, and enabling customer process automation. The role emphasizes formal reasoning, correctness by construction, maintainable systems, type systems, and functional programming. Work is available onsite in Zurich or remotely within Europe.

Build, integrate, and maintain cybersecurity platforms and controls across cloud, identity, endpoint, vulnerability management, and security operations. Develop automation, APIs, integrations, and self-service tooling using scripting and Infrastructure as Code. Improve cloud security, CI/CD controls, privileged access, and secrets management. Contribute to architecture reviews, threat modelling, control validation, incident response, secure AI adoption, and technical documentation while advising technology teams on practical risk reduction.

Leads the Security Operations team, overseeing security monitoring, alert investigation, threat hunting, incident response, detection engineering, and threat-informed defense. The role sets the security operations roadmap, manages people and operational capacity, oversees SIEM, EDR, and SOAR capabilities, coordinates major incidents, advises technology and governance teams, and reports threats, incidents, and capability gaps to senior leaders.

Drives adoption, optimization, and customer success for Splunk’s security platform. Provides technical guidance on Enterprise Security and UBA use cases, configuration, and resilience; resolves complex challenges; collaborates with sales, support, and product teams; develops scalable processes and enablement materials; identifies expansion opportunities; and mentors team members. Requires substantial information security experience, Splunk certifications, SIEM expertise, security certifications, and proficiency across Unix, Windows, Bash, and Python.

Maintain and improve Microsoft Defender for Endpoint, Microsoft Sentinel, security monitoring, endpoint protection, log ingestion, and detection capabilities. Support application onboarding, cloud security controls, audits, incident response, investigations, AI-driven security use cases, and stakeholder collaboration. The role also mentors junior team members and helps maintain operational KPIs, KRIs, and standards.

Own and support strategic B2B events across EMEA, including conferences, flagship events, executive programs, and trade shows. Responsibilities include end-to-end logistics, vendor coordination, budgets, project plans, registration, stakeholder collaboration, on-site execution, post-event reporting, ROI tracking, and regional event strategy. The role requires managing multiple concurrent events, coordinating cross-functional teams, and traveling extensively across EMEA with occasional APAC and AMER travel.

Leads EMEA renewals sales for Data Security and Application Security portfolios, owning retention, recurring revenue, forecasting, churn mitigation, and commercial execution. Manages Renewal Sales Managers and Specialists, develops regional strategy, negotiates strategic contracts, and partners with Sales, Finance, Customer Success, Product, Legal, and Executive Leadership. The role also drives renewal governance, operational excellence, organizational development, talent coaching, and executive reporting across geographically dispersed teams.

Provides flexible technical expertise across customer engagements, partnering with Customer Success Managers to investigate issues, optimize platform configurations, deliver best-practice guidance, document recommendations, identify expansion opportunities, and escalate complex situations. The role manages multiple short-term technical engagements across enterprise SaaS or cybersecurity customers and surfaces recurring patterns to Product, Engineering, and Customer Success.

Leads the strategic direction, growth, and delivery of an information security consultancy practice. Responsibilities include managing and mentoring teams, overseeing ISO 27001 and Cyber Essentials engagements, advising clients on governance, risk, compliance, AI security, and emerging technologies, developing methodologies, supporting proposals and business growth, and communicating risks to senior stakeholders.

Patrols university campuses on foot and by vehicle, assists with control-room operations, responds to fire and intruder alarms, and provides immediate support during incidents or crimes. The role includes welfare support, signposting to agencies, and reassuring staff and students. Candidates need strong communication and listening skills, computer literacy, composure under pressure, attention to detail, and a full driving licence.

Implement and support the cybersecurity risk assessment framework, processes, and vendor tooling. Prepare cybersecurity risk reports for governance forums, review risk appetite statements, develop risk training, and help embed risk assessment into business and technology change. Coach and mentor Cyber Risk Analysts and Associates while collaborating with Governance, Risk & Compliance stakeholders.

Respond to and investigate security incidents, manage threat and vulnerability programs, operate SIEM and EDR tooling, develop incident response runbooks, automate security workflows, lead phishing and security awareness campaigns, and support purple team exercises. The role also owns vulnerability reporting, remediation metrics, stakeholder communication, and continuous improvement of security operations.

Own enterprise sales across the UK and Ireland, generating new business, managing the full sales cycle, engaging C-level and technical stakeholders, leading proofs of value, negotiating contracts, and closing multi-year partnerships. The role involves territory planning, channel and AWS ecosystem collaboration, accurate forecasting, Salesforce discipline, and selling cloud security solutions to mid-large enterprises.

Manage strategic customer relationships after sale, lead technical onboarding and cloud deployments, support feature adoption, address issues, gather feedback, guide roadmap discussions, and partner with sales on renewals and expansions. Advocate for customer needs across Product Management and Technical Support while ensuring customers achieve measurable value from the Upwind cloud security platform.

Designs, implements, maintains, and improves cybersecurity controls across enterprise systems, networks, cloud environments, and applications. Deploys and troubleshoots security technologies, responds to incidents, identifies security requirements, supports audits and change management, documents procedures, analyzes risks, and delivers remediation recommendations. Collaborates with architects, project managers, engineers, and stakeholders to protect organizational data and infrastructure while automating repeatable security tasks.

Provides enterprise SOC/MDR security operations support focused on QRadar administration and engineering, log source integrations, troubleshooting, use case development, content tuning, workflow maintenance, and automation. Supports integrations such as CrowdStrike auto-isolation and develops Python scripts for existing automation requirements. Requires extensive hands-on QRadar expertise and significant IT experience.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Owns architecture, technical strategy, and roadmaps across Arbor’s core product suite and multiple engineering teams. The role guides architectural transformation, AI-first SDLC adoption, system design, technical debt reduction, and complex initiative delivery. It partners with product and engineering leadership, mentors Technical Leads and Senior Engineers, leads architectural reviews, and ensures quality, reliability, security, and compliance standards. This is a strategic technical leadership role focused on coaching and delivery rather than hands-on coding.