Top Cyber Security Jobs in Glasgow

Create and improve governance, risk, and compliance security labs, challenges, and learning content. Research regulations and standards, develop practical simulations, peer-review cyber ranges, simplify complex cybersecurity concepts, and advise engineering and product teams on security and privacy by design. The role requires GRC audit experience, knowledge of major compliance frameworks, strong cybersecurity fundamentals, and the ability to create engaging training for technical and non-technical users.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Designs, builds, tests, and improves cloud security labs, challenges, and learning content for a cyber resilience platform. The role focuses on AWS, Azure, GCP, Kubernetes, SIEM, CSPM/CNAPP, containers, Terraform, serverless technologies, identity, access, networking, monitoring, and DevSecOps. Responsibilities include creating realistic attack-and-defense simulations, translating technical research into accessible content, collaborating with engineering and product teams, and supporting cloud security content strategy.

Designs, develops, tests, and troubleshoots scalable security systems using Java and Python. Creates secure production code, contributes to architecture and design artifacts, analyzes data to improve security applications, and supports resilient cloud security platforms. Requires software engineering, system design, application development, testing, SDLC, agile, and security expertise, with AWS and Python preferred.

Leads OT security monitoring and triage operations, investigates suspicious activity across industrial networks, validates detections, and escalates findings to incident responders and threat hunters. Maintains the Dragos Platform for customers, including asset classification, vulnerability management, detection tuning, and hardening recommendations. Produces incident reports, mentors analysts, collaborates across cybersecurity teams, and develops expertise in ICS protocols, adversary tactics, and industrial threat intelligence. The role includes shift-based coverage and occasional weekend or on-call work.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Protects critical IT and OT systems supporting renewable energy operations. Responsibilities include cyber risk management, incident response, disaster recovery, access governance, third-party assurance, cyber awareness, security controls assessment, compliance, and maintaining the Cyber Management System. The role supports projects and operational teams, with a focus on cyber resilience and SCADA environments.

Leads the strategic direction, growth, and delivery of an information security consultancy practice. Responsibilities include managing and mentoring teams, overseeing ISO 27001 and Cyber Essentials engagements, advising clients on governance, risk, compliance, AI security, and emerging technologies, developing methodologies, supporting proposals and business growth, and communicating risks to senior stakeholders.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001 and SOC 2 Type 2). Manage SoA, risk treatment, audits, policy lifecycle, gap remediation, internal audits, and cross-functional control ownership while advising security leadership on certification readiness and compliance strategy.

Drives adoption, optimization, and customer success for Splunk’s security platform. Provides technical guidance on Enterprise Security and UBA use cases, configuration, and resilience; resolves complex challenges; collaborates with sales, support, and product teams; develops scalable processes and enablement materials; identifies expansion opportunities; and mentors team members. Requires substantial information security experience, Splunk certifications, SIEM expertise, security certifications, and proficiency across Unix, Windows, Bash, and Python.

Design, implement, test, and ship Firefox security and hardening features for enterprise users. Improve browser security architecture across operating systems, including privilege isolation, trust boundaries, cryptographic protocols, WebPKI, and security-sensitive web APIs. Investigate security issues, deliver maintainable fixes, and resolve stability, correctness, performance, memory, and multithreading challenges in a complex native codebase.

Secure Tide’s web, mobile, and cloud-native products through vulnerability hunting, threat modeling, secure design reviews, remediation, proof-of-concept scripting, and CI/CD security automation. The role serves as an Application Security subject matter expert, partners with engineering and product teams, communicates risks to executives, and mentors junior engineers.

Leads the development of security tools, integrations, automations, and services from requirements through operational handover. Translates SOC and threat intelligence needs into technical capabilities, evaluates emerging security technologies, manages proof-of-concepts and pilots, and provides technical leadership. The role also establishes and develops the security capability function while collaborating with engineers, vendors, SOC teams, and CTI specialists.

Designs and delivers cyber security and resilience training for UK education and research organisations. Responsibilities include developing training roadmaps, creating learning materials, facilitating workshops and presentations, and delivering practical exercises covering ransomware, incident response, crisis management, red teaming, and tabletop simulations. The role collaborates with subject matter experts and sector partners to improve cyber resilience and represents Jisc at relevant events.

Own the end-to-end Continuous Control Monitoring capability, including KPI and KRI development, cybersecurity risk insights, product roadmap management, solution design, stakeholder engagement, and supplier service oversight. Advise senior management on cybersecurity posture, threats, strategies, and risk management while ensuring alignment with regulatory requirements, industry standards, risk appetite, and vulnerability management standards.

Maintain and improve Microsoft Defender for Endpoint, Microsoft Sentinel, security monitoring, endpoint protection, log ingestion, and detection capabilities. Support application onboarding, cloud security controls, audits, incident response, investigations, AI-driven security use cases, and stakeholder collaboration. The role also mentors junior team members and helps maintain operational KPIs, KRIs, and standards.

Provide technical security advice and through-life assurance for Thales IS/IT environments. Deliver security reviews, cloud and incident response guidance, compliance to government standards, risk assessments, CoCo assurance, and security requirements for delivery squads. Maintain security documentation and support continual assurance, training, and remediation across on-premises and cloud systems.

Implement and support the cybersecurity risk assessment framework, processes, and vendor tooling. Prepare cybersecurity risk reports for governance forums, review risk appetite statements, develop risk training, and help embed risk assessment into business and technology change. Coach and mentor Cyber Risk Analysts and Associates while collaborating with Governance, Risk & Compliance stakeholders.

Respond to and investigate security incidents, manage threat and vulnerability programs, operate SIEM and EDR tooling, develop incident response runbooks, automate security workflows, lead phishing and security awareness campaigns, and support purple team exercises. The role also owns vulnerability reporting, remediation metrics, stakeholder communication, and continuous improvement of security operations.

Designs, implements, maintains, and improves cybersecurity controls across enterprise systems, networks, cloud environments, and applications. Deploys and troubleshoots security technologies, responds to incidents, identifies security requirements, supports audits and change management, documents procedures, analyzes risks, and delivers remediation recommendations. Collaborates with architects, project managers, engineers, and stakeholders to protect organizational data and infrastructure while automating repeatable security tasks.

Provides enterprise SOC/MDR security operations support focused on QRadar administration and engineering, log source integrations, troubleshooting, use case development, content tuning, workflow maintenance, and automation. Supports integrations such as CrowdStrike auto-isolation and develops Python scripts for existing automation requirements. Requires extensive hands-on QRadar expertise and significant IT experience.

Supports SOC operations through second- and third-line security incident analysis, response, detection engineering, and escalation. Coordinates third-party security vendors, maintains security tooling, reviews monitoring rules, manages phishing campaigns, analyzes attack trends, and supports cyber incident response. The role also performs security reviews across systems and infrastructure, promotes secure behaviors, and advises stakeholders on operational security, policies, controls, and regulatory requirements in an Azure and Microsoft 365 environment.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.