Top Cyber Security Jobs in Glasgow

Designs, develops, tests, and troubleshoots scalable security systems using Java and Python. Creates secure production code, contributes to architecture and design artifacts, analyzes data to improve security applications, and supports resilient cloud security platforms. Requires software engineering, system design, application development, testing, SDLC, agile, and security expertise, with AWS and Python preferred.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Lead Samsara’s vulnerability management and application security programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, and support incident response. The role requires strong AWS, programming, vulnerability management, application security testing, AI/LLM, and security automation expertise.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Lead end-to-end incident response for high-severity security events across cloud environments, perform DFIR investigations, build detection and automation (including AI-assisted) workflows, partner cross-functionally, produce executive communications and RCAs, maintain runbooks/playbooks, and mentor other engineers within a 24/7 global on-call model.

Manage the EMEA Security Operations Center within a global 24/7 operation. Responsibilities include defining processes, workflows, and playbooks; maintaining shift coverage and quality assurance; coaching analysts; developing training; partnering with Product, Support, and security teams; improving incident response capabilities; tracking objectives and key results; operationalizing new services; and representing the company in public speaking engagements.

Develops offensive-security labs, challenges, ranges, and learning content for a cyber resilience platform. Researches vulnerabilities, tools, red-team tactics, and AI-driven attacks; tests lab functionality; translates technical findings for technical and non-technical audiences; and collaborates with Product teams on platform innovation.

Own the technical win for enterprise security deals by designing ransomware-recovery, immutable backup, air-gapped vaulting, identity-resilience, and DSPM architectures. Lead discovery, demos, technical workshops, proofs of concept, pilots, executive presentations, and solution design while partnering with specialist sales executives and security partners. Serve as a security architecture subject-matter expert for CISOs and technical stakeholders, provide technical qualification, and feed field insights into product roadmaps.

The Staff Infrastructure Security Engineer will lead security initiatives, set architectural patterns, conduct security reviews, and mentor engineers while ensuring security in cloud infrastructures for GitLab.

Lead and grow a distributed engineering organization building customer-facing security capabilities: proprietary scanners, AI/ML detection engines, agentic remediation, vulnerability management, and security foundations. Set vision and roadmap, drive architecture and delivery, partner with product management, establish engineering standards, and represent the group in cross-functional and customer forums.

Leads Tide’s Product and Identity Security functions, setting strategy and executing a funded roadmap across application, cloud, AI, architecture, IAM, penetration testing, and vulnerability operations. Manages a distributed global team, remains technically hands-on, partners with executives and engineering leaders, and oversees security enablement, champions programs, incident escalations, metrics, recruiting, and team development.

Develops security requirements, architectures, and designs for complex operational technology systems, especially in nuclear and critical infrastructure environments. Conducts cyber risk assessments and security reviews, implements risk management processes, supports accreditation, and advises on secure digital transformation. The role requires strong IT and OT cybersecurity experience, knowledge of IEC 62443 and related regulatory frameworks, hands-on experience with security technologies and networking, stakeholder relationship management, and regular travel to client sites.

Designs, builds, and validates bespoke security solutions and automation using enterprise AI tools. Performs STRIDE threat modeling, vulnerability analysis, technical risk assessments, remediation verification, and security control mapping. Ensures compliance with ISO 27001, NIST standards, and the EU Cyber Resilience Act. Develops security architecture documentation, maintains sandbox labs, verifies encryption, access controls, MFA, and logging, and supports pre-sales security tenders and customer evaluations.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Owns security awareness, human-risk management, phishing simulations, supplier security assurance, email DLP improvements, certification support, governance reporting, and stakeholder engagement. The role manages third-party risk assessments, vendor performance, security policies, audit evidence, metrics, and remediation activities while advising senior leaders and business teams on cyber risk, information protection, and security culture.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Own day-to-day security operations across endpoints, identity and access, cloud, and SaaS tools. Administer MDM, patching, encryption, device compliance, and joiner/mover/leaver processes. Monitor alerts, investigate incidents, support access reviews, and improve security controls. Contribute compliance evidence for SOC 2, ISO 27001, and ISO 42001, plus vendor and customer security questionnaires. The role also provides practical desktop and device support while developing broader audit, compliance, and vendor-risk expertise.

Supports cybersecurity governance, risk, and compliance across multiple client accounts. Partners with executives and stakeholders to align security requirements with policies, contracts, and regulations; monitors compliance, coordinates remediation and incident response, assesses risks, prepares security reporting, reviews security requirements in RFPs and contracts, and supports security control implementation and continuous improvement.

Lead security operations focused on incident response, vulnerability management, SIEM and EDR monitoring, phishing campaigns, and purple team exercises. Investigate incidents, identify root causes, develop runbooks, automate workflows, manage vulnerability remediation metrics, and improve stakeholder collaboration. Partner with engineering and business teams to promote security awareness and a security-first culture while staying current on emerging threats and security operations practices.

Lead field-facing AI security strategy for enterprise customers by designing secure LLM/RAG architectures, delivering demos and POVs, advising on data protection and unsanctioned AI usage, and scaling enablement and product feedback across sales, product, and engineering teams.

Senior security researcher responsible for large-scale data collection and analysis, operating and building honeypots, performing vulnerability research and reverse engineering, developing automated tooling and GenAI/LLM workflows, collaborating with intelligence teams, reproducing vulnerabilities, and publishing technical research.

Supports cybersecurity engineering for a federal cloud modernization program. Responsibilities include implementing and monitoring security controls, cloud systems integration, automation, AI-assisted tooling, configuration hardening, vulnerability management, evidence collection, control testing, STIG and baseline artifact maintenance, and technical documentation. The role is fully remote and requires collaboration with senior engineers, system owners, developers, and assessors.