Top Security Analyst Jobs in Glasgow

Conduct real-time monitoring, analysis, containment, remediation, malware analysis, and incident response across Windows, macOS, and Linux environments. Develop detection and response processes, communicate findings to customers, mentor junior analysts, provide technical escalation and quality assurance, manage programs or teams, and contribute to security thought leadership and process improvement.

Analyze large-scale security telemetry, threat intelligence, endpoint, and detection data to identify trends, anomalies, and emerging threats. Build dashboards, reports, data pipelines, and KPI frameworks using SQL, Python, LogScale, or similar tools. Collaborate with data engineering, product, and engineering teams to ensure data quality and translate complex findings into actionable insights for technical and non-technical stakeholders.

Conduct real-time security monitoring, alert analysis, incident response, malware analysis, and remote remediation across Windows, Mac, and Linux environments. Develop detection and response processes, communicate findings to customers, provide technical escalation and mentorship, oversee analyst quality, manage programs or teams, and contribute to security thought leadership and process improvements.

Monitor and analyze security alerts, investigate and respond to incidents across Windows, macOS, and Linux, perform malware and forensic analysis, remotely remediate threats, and improve detection and response processes. The analyst communicates findings to customers, mentors junior analysts, provides quality oversight, manages teams or programs, serves as a technical escalation point, and contributes to security thought leadership and process development.

Monitor and analyze security alerts, investigate and respond to incidents across Windows, macOS, and Linux, perform malware and forensic analysis, remotely remediate threats, improve detection and response processes, and communicate findings to customers. The role also involves developing security expertise, contributing to public thought leadership, and using AI technologies to improve decision-making and workflows.

Leads OT security monitoring and triage operations, investigates suspicious activity across industrial networks, validates detections, and escalates findings to incident responders and threat hunters. Maintains the Dragos Platform for customers, including asset classification, vulnerability management, detection tuning, and hardening recommendations. Produces incident reports, mentors analysts, collaborates across cybersecurity teams, and develops expertise in ICS protocols, adversary tactics, and industrial threat intelligence. The role includes shift-based coverage and occasional weekend or on-call work.

Collects, analyzes, and interprets cyber threat intelligence to identify emerging risks and support proactive defense. The role monitors intelligence sources, correlates threat data, profiles adversary tactics, produces reports and dashboards, supports threat intelligence platforms, advises teams on detected threats, and contributes to incident response exercises. It collaborates with cybersecurity, network operations, and service desk teams to protect the JANET network and its customers.

Monitor and analyze security alerts, handle incidents across Windows, Mac, and Linux, perform malware analysis, and remotely remediate malicious activity. The role also develops detection and response processes, communicates findings and recommendations to customers, contributes to security procedures, and supports thought leadership through public content and speaking engagements.

Provide incident handling, malware analysis, forensic investigation, remediation, detection engineering, and security automation across Windows, macOS, and Linux environments. Configure and optimize CrowdStrike Falcon modules, develop security content and automations, advise customers during incidents, produce technical findings, and support platform onboarding. The role also involves customer communication, thought leadership, operational improvement, and mentoring.

Monitor and analyze security alerts, investigate and respond to incidents across Windows, macOS, and Linux, perform malware and forensic analysis, remotely remediate threats, and improve detection and response processes. Serve as a technical escalation point, mentor junior analysts, oversee quality assurance, manage internal programs or teams, communicate findings to customers, and contribute thought leadership through public speaking and content.

Lead IT risk assessments, evaluate and document inherent and residual risks, partner with stakeholders to develop and monitor risk response plans, support enterprise IT risk and cyber security initiatives, maintain risk management procedures and best practices, and communicate risks across ITS and business units.

Customer-facing Threat Analyst supporting financial institutions with fraud detection, behavioral biometrics, and threat prevention. Responsibilities include advanced analytics, customer consulting, fraud strategy, SQL-based reporting, rule deployment, proof-of-value analysis, workshops, emerging-threat research, and sales enablement. The role partners with customers, Data Science, Sales, and Product teams to improve fraud detection while minimizing customer friction. Remote role based preferably in the UK, with travel across EMEA approximately twice monthly.

Investigate security logs and events, handle Tier I escalations, conduct threat hunting, analyze indicators of compromise, and support incident response for MDR customers. The role involves documenting findings, communicating with technical and executive audiences, guiding analysts, following cases through resolution, researching emerging threats, improving security operations processes, and reporting on threat trends.

Track and analyze PRC-nexus cyber operations, adversary campaigns, tactics, techniques, and procedures using proprietary telemetry, open-source data, and third-party intelligence. Produce strategic and tactical intelligence reports, conduct research, identify intelligence gaps, support customer briefings, review peer reporting, respond to information requests, and contribute to process automation and analytic improvements. The role requires geopolitical knowledge of China and the Indo-Pacific, cyber threat intelligence expertise, and the ability to work independently under deadlines.

Investigate fraud and insider-threat cases from initial signal through resolution. Gather and analyze logs, transactions, behavioral signals, and other evidence; triage alerts; reconstruct events; document findings objectively; maintain evidence chain of custody; and collaborate with Detection & Response, Legal, and HR. The role also contributes to investigation playbooks, detection improvements, and fraud and insider-risk prevention.

Leads security operations by managing major incidents, engineering SIEM detections, applying MITRE ATT&CK, developing automated response workflows, and improving threat-informed monitoring. Partners with engineering and platform teams on cloud security, vulnerability management, threat modeling, and security architecture. Provides technical leadership, mentors analysts, reports operational metrics, and supports ISO 27001, SOC 2, and NIS2 compliance.

Conduct third-party and supplier security assurance, security control testing, PCI DSS assessments, regulatory reviews, and audits. Evaluate security evidence, identify risks and control gaps, improve policies and governance, support security inquiries, and advise engineering and product teams on secure changes. The role also drives remediation, process automation, risk prioritization, and continuous improvement while mentoring less experienced analysts.

Lead EMEA insider risk investigations and assessments, identify threats to people and assets, conduct interviews and evidence analysis, brief stakeholders, develop mitigation strategies and training, and collaborate with InfoSec, HR, Legal, and IT to strengthen insider risk controls and awareness.

Detect, analyze, and respond to security incidents in real time across Windows, macOS, and Linux. Perform malware and forensic analysis, remote remediation, develop detection and triage processes, produce customer-facing communications, mentor and quality-assure junior analysts, manage programs/teams, and contribute to public thought leadership.

Triage, investigate, and remediate security alerts using EDR and forensic artifacts. Perform tactical malware analysis, investigate Microsoft M365 activity, assist escalations, contribute to detection engineering, and work on projects to improve SOC outcomes while mentoring and collaborating with teammates.

Execute and manage IT audit activities, assess controls and regulatory compliance (SOX, GDPR, ISO, NIST), run control testing, use GRC tools for evidence tracking, perform IT risk assessments, manage third-party risk, coordinate with auditors and stakeholders, and provide actionable security and compliance insights to leadership.

Lead research and thought leadership on Cyber GRC tools and market trends. Produce high-value insights, presentations, and client advisory; support sales, mentor junior analysts, peer-review content, and drive research process improvements. Engage clients virtually and in-person, present at events, and help clients select and implement Cyber GRC platforms.

Lead research and advisory on application security for enterprise applications (ERP/CRM). Produce thought leadership, client-facing insights, presentations, market analysis, and support sales. Mentor analysts, drive research agenda, improve processes, and advise CIOs on security strategy, vendor evaluation, metrics, and vulnerability testing across major vendors (SAP, Salesforce, Workday, Oracle).

Lead cybersecurity research and thought leadership, produce actionable insights and market analysis, advise senior clients on strategy and risk, support sales and events, mentor analysts, and drive research agenda and process improvements. Travel up to 25%.

The L3 SOC Analyst leads complex incident investigations, drives automation, mentors junior analysts, and enhances SOC capabilities using advanced security technologies.