Top Cyber Security Jobs in Edinburgh

Lead and grow a distributed engineering organization building customer-facing security capabilities: proprietary scanners, AI/ML detection engines, agentic remediation, vulnerability management, and security foundations. Set vision and roadmap, drive architecture and delivery, partner with product management, establish engineering standards, and represent the group in cross-functional and customer forums.

Lead and scale a global, AI-native Solutions Engineering organisation (~15 people). Set strategy, build playbooks for mid-market and enterprise motions, enable partners, coach leaders, influence product and GTM, and ensure repeatable, production-ready technical outcomes for complex enterprise customers.

Leads research and client advisory on emerging AI data security and AI ecosystem data management trends. Develops research reports, presentations, briefings, and tailored recommendations for technology executives and product leaders. Analyzes technologies, vendors, markets, and competitive landscapes; builds expert networks; delivers client inquiries and speaking engagements; and collaborates with analysts and service teams to ensure high-quality research. The role requires deep cybersecurity and AI data expertise, strong writing and presentation skills, executive presence, and up to 25% travel.

Lead Telecoms Security Act compliance and Ofcom engagements, validate technical evidence, assess risks and controls, align frameworks (NCSC CAF, ISO27001), support governance, and oversee third-party security and contractual obligations across engineering, security, and operations.

Sell Elastics search, observability, and security SaaS to the NHS by owning full sales cycles, driving adoption, qualifying high-value opportunities (MEDDPICC), building executive relationships, and coordinating cross-functional teams to close complex deals and expand footprint.

Drive new business in the DACH region through cold outreach, demoing Keeper products, managing the full sales cycle from prospecting to close, maintaining accurate Salesforce pipeline, and consistently meeting quota while communicating in German and English.

Support and advance the application security program: review designs and architecture, advise engineering/DevOps on secure SDLC practices, run static/dynamic scans and manual assessments, triage external pentest and bug-bounty findings, and drive security process improvements.

Lead global SCA and SAST strategy and tooling, integrate static and open-source scanning into CI/CD pipelines, reduce false positives, perform threat modeling and architecture reviews, mentor teams, and drive developer-first application security across diverse tech stacks.

Enforce the Ship Security Plan and support the Ship Security Officer: conduct security assessments and inspections, manage access control and screening (X-ray, metal detectors), lead security team and drills, investigate incidents, maintain security equipment and filing, coordinate with port authorities, and respond as first responder/active assailant team leader.

Lead Arrow's Microsoft Security strategy and partner activation across the UK&I channel. Build Microsoft and partner relationships, run enablement, campaigns and events, manage marketing budget, track KPIs, and drive customer and workload acquisition through reseller partners.

Support threat intelligence, incident analysis/response, penetration test coordination, vulnerability scanning and remediation tracking, security tool administration, dashboard maintenance, and adherence to security policies while learning and developing cybersecurity skills.

Design, automate, and maintain security controls, detection, and remediation systems; evaluate security technologies; perform risk assessments and threat models; partner with engineering for secure development; lead incident response and support compliance (SOC 2, ISO 27001); manage bug bounty and vulnerability disclosure programs.

Deployable Emergency Response Team member providing humanitarian access, safety and security expertise during emergencies (65% deployment). Lead risk analysis, access and security strategies, stakeholder negotiations, incident reporting and communications setup. Deliver trainings, support incident management, advise program design and ensure handover and partner capacity-building.

Lead a global security engineering organisation (30–50 people) to embed secure-by-design across platform primitives (compute, storage, networking, identity). Drive systemic risk reduction, deliver high-leverage security platforms and frameworks, partner with CISO/CTO/product teams, manage engineering leaders and senior ICs, and foster an inclusive, engineering-first security culture.

Design and implement Microsoft-based security architectures (Azure, Entra, Defender, Sentinel). Consult with clients to gather requirements, produce solution proposals, ensure governance/compliance, lead technical delivery, and produce detailed documentation.

Lead and own the information security program and security engineering at NEAR Foundation. Drive SOC 2 Type 2 and ISO 27001 readiness, run logging/monitoring/incident response, manage vulnerability and third-party risk, harden identity/access/endpoint stacks, automate security and compliance across SaaS, and advise on tooling and cloud security (AWS/GCP).

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Conduct deep technical research to identify novel risks and attack vectors in cloud- and AI-native architectures, produce proofs-of-risk and technical POCs, and partner with Product and Engineering to translate findings into product capabilities.

Provide hands-on security assurance and technical guidance for an SAP transformation from ECC to cloud-native S/4HANA. Review architectures, identify security risks across identity, APIs, cloud services, data flows and third-party integrations, recommend controls aligned to enterprise standards, and support DevSecOps and secure engineering practices throughout design, build, deploy and operate phases.

Secure Aptos core infrastructure and products via design reviews, code audits, penetration tests; build security tools and mitigations; define secure operational practices; advise engineers; and triage bug bounty reports.

Design and apply security architecture for cloud and software solutions. Embed security practices into Agile delivery, assess existing systems, recommend mitigations, mentor engineers, lead small teams, and support security testing, CI/CD security and compliance with standards.

Lead technical design and delivery of advanced AI solutions (ML, generative and agentic AI), drive adoption of modern AI engineering and cloud-native architectures, ensure responsible AI practices, mentor and manage a small team, and liaise with clients to translate business needs into production-grade, secure AI systems.

Define and implement a cloud security framework across Azure, AWS and SaaS; deploy automated security controls and tooling; create detection and incident response playbooks; collaborate with SOC, GRC and IT to operationalise controls; support compliance (ISO27001, SOC2, NCSC) and guide developers and junior engineers on secure practices.

Design and implement secure cloud-based solutions and DevSecOps practices. Automate security tooling in CI pipelines, perform threat modelling and vulnerability management, support penetration testing, review security outputs, convert findings into actionable work, verify secure architectures, and coach junior team members.

Lead secure design and review of cloud platforms and services, advise Agile teams on security best practices, test software/infrastructure security, mentor and manage staff, and ensure compliance with standards and regulations across public, healthcare, defence, and commercial projects.