Top Cyber Security Jobs in Edinburgh

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Design, implement, and manage GCP infrastructure using Terraform. Architect GCP services, integrate Vertex AI and BigQuery, implement Policies-as-Code (Rego), integrate Wiz for continuous security, automate tooling and scripts, and perform security assessments and compliance.

Design, implement, and manage GCP infrastructure using Terraform; architect compute, storage, and networking; integrate Vertex AI and BigQuery; implement Wiz Security Control and policies-as-code (Rego); automate operations with Python/Bash; enforce security, IAM, encryption, and compliance.

Design and deliver security solutions by translating customer objectives into technical strategies. Build visualizations, custom scripts and API integrations, analyze network topologies and application traffic, develop signatures and tooling, support incident response, threat hunting, and customer enablement to reduce mean-time-to-investigate and improve detection and response outcomes.

Lead embedding security into software delivery by partnering with engineering teams to improve CI/CD security, triage and remediate findings, design secure-by-default patterns, automate security validation and evidence generation, facilitate threat modeling, and provide reusable templates and guidance to reduce risk at scale.

Lead and execute multi-vector red team campaigns including adversarial emulation, post-exploitation, social engineering, and physical testing. Develop tools, exploit vulnerabilities, produce comprehensive technical reports with remediation guidance, present findings to technical and non-technical stakeholders, mentor team members, support business development, and contribute research to the security community. Requires significant travel.

Design, build, and maintain enterprise security architecture across on-prem and cloud. Develop security policies, lead threat modeling, vulnerability assessments, and incident response. Integrate security into SDLC, evaluate new technologies, ensure continuity plans, and mentor junior staff.

Embed security into software delivery by partnering with engineering teams to improve CI/CD pipeline security, triage and remediate findings, perform threat modeling, design secure-by-default patterns, build reusable templates and automation, support compliance and audit evidence, and communicate security standards and best practices.

Advance Firefox security architecture and cryptography stack by designing and implementing web platform security features. Improve browser reliability, performance, and memory efficiency. Debug and resolve security-sensitive, multi-threaded issues, contribute to standards-based implementations, and collaborate across teams on security initiatives, technical design, and planning.

Partner with sales and partners to design, demo, and operationalize Qualys-based security solutions. Lead architecture workshops, POCs, partner enablement, and complex integration guidance across vulnerability, patching, cloud/application security, compliance, and threat detection. Influence product roadmap and produce enablement content.

Lead development and reliability of the Firefox Add‑ons platform, delivering full‑stack features (React/TypeScript, Django, MySQL), improving automated moderation, observability, platform reliability, and security. Collaborate across teams, respond to incidents, and contribute openly to scale a safe, trustworthy ecosystem.

Lead hands-on security engineering for cloud and application ecosystems. Integrate automated security scanning into CI/CD, implement IaC controls for AWS, manage Cloudflare protections, respond to incidents, run vulnerability assessments and external testing, and embed secure-by-design practices across engineering teams.

Provide hands-on security assurance and architectural review for an SAP transformation (ECC to S/4HANA). Identify and assess risks across identity, APIs, cloud services, data migrations and third-party integrations. Recommend proportionate controls, embed security into design/build/deploy/operate phases, and support secure engineering and DevSecOps/CI/CD practices throughout the programme.

Design and enforce Rego policy-as-code for GCP, integrate security into GCP CI/CD pipelines, implement IaC with Terraform, perform GCP security assessments and incident response, and drive GCP-specific security best practices across teams.

Lead AWS-focused threat modeling, conduct risk assessments, define cloud security requirements, and integrate security controls across the SDLC. Guide architecture and DevOps teams, run workshops, manage incident response and vulnerability remediation, and recommend security tools and best practices for AWS environments.

Design, implement, and maintain Rego policy-as-code and Terraform IaC to secure GCP infrastructure. Integrate security into CI/CD pipelines, perform GCP security assessments, threat modeling, incident response, and collaborate across teams to enforce compliance and container/microservice security.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Own and mature the enterprise security program: manage identity/SSO, EDR, MDM, and SaaS security; secure cloud and developer stacks (GitHub, AWS, GCP); run vulnerability management, backup testing, and incident response; ensure endpoint lifecycle governance and maintain compliance with ISO 27001 and SOC 2.

Lead security engineering for an institutional product: threat modeling, secure architecture, appsec, AWS hardening, key management (HSMs/TEEs), supply-chain and reproducible builds, incident response, and compliance technical controls. Hands-on coding and infrastructure work alongside engineering.

Lead and manage all hotel security operations, direct security staff, implement emergency and crisis plans, liaise with law enforcement and authorities, oversee training (fire, first aid), manage risk analysis, investigations, and VIP/high-risk reporting.

Maintain visible security presence through foot patrols and CCTV monitoring, control access and key management, respond to emergencies, and support fire, life, and safety procedures while liaising with emergency services.

Monitor entrances, patrol hotel public and back-of-house areas, manage access control, respond to alarms and emergencies, assist with lost-and-found, and provide security-related guest assistance and reassurance.

Own and execute end-to-end collaboration-platform integrations for acquisitions: scope and migrate Google Workspace, Slack, Zoom, mailboxes, channels, and domains. Maintain platform governance, email/domain security, DLP, archiving, eDiscovery/legal holds, and incident response. Build repeatable playbooks, automation, and tooling; coordinate cross-functionally with Legal, Compliance, IT, Security, and Corporate Development.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.

Lead and manage SOC 1/SOC 2 examinations and SOX 404 IT control activities; assess ITGCs/ITACs, perform gap and impact assessments, drive remediation, collect auditor-ready evidence, and partner cross-functionally to design scalable controls for cloud and hybrid environments.