Top Security Analyst Jobs in Glasgow

Monitor and analyze security alerts, investigate and respond to incidents across Windows, macOS, and Linux, perform malware and forensic analysis, remotely remediate threats, and improve detection and response processes. Serve as a technical escalation point, mentor junior analysts, oversee quality assurance, manage internal programs or teams, communicate findings to customers, and contribute thought leadership through public speaking and content.

Lead EMEA insider risk investigations and assessments, identify threats to people and assets, conduct interviews and evidence analysis, brief stakeholders, develop mitigation strategies and training, and collaborate with InfoSec, HR, Legal, and IT to strengthen insider risk controls and awareness.

Detect, analyze, and respond to security incidents in real time across Windows, macOS, and Linux. Perform malware and forensic analysis, remote remediation, develop detection and triage processes, produce customer-facing communications, mentor and quality-assure junior analysts, manage programs/teams, and contribute to public thought leadership.

Performs information security control testing, risk treatment tracking, exception management, user access reviews, audit-ready evidence collection, and compliance reporting. The analyst coordinates risk and compliance activities across IT, digital transformation, procurement, legal, sales, service desk, internal audit, and external stakeholders. The role also improves and automates assurance processes while assessing control effectiveness against frameworks such as ISO 27001 and NIST.

Triage, investigate, and remediate security alerts using EDR and forensic artifacts. Perform tactical malware analysis, investigate Microsoft M365 activity, assist escalations, contribute to detection engineering, and work on projects to improve SOC outcomes while mentoring and collaborating with teammates.

Eight-week remote internship focused on blue team cybersecurity operations. Interns learn system hardening, secure configuration, patch management, incident response, digital forensics, log analysis, threat hunting, vulnerability management, network defense, cloud and mobile security, and security monitoring. The role includes configuring firewalls, SIEM tools, IDS/IPS, and VPNs, using tools such as ELK Stack, Suricata, Snort, Security Onion, and Zeek, and completing a capstone project.

Eight-week remote internship providing hands-on training in SOC operations, including security monitoring, ELK and Wazuh log analysis, traffic analysis, threat intelligence, vulnerability management, compliance reporting, incident response, and forensic analysis. Interns complete a capstone project and presentation while developing documentation, communication, alert triage, and threat detection skills through mentorship and practical security challenges.

Eight-week remote cybersecurity internship focused on defensive security. Interns practice threat detection, incident response, vulnerability assessment, security monitoring, malware and intrusion detection, network traffic analysis, and attack analysis. They use SIEM platforms, Wireshark, and vulnerability scanners, respond to simulated incidents, and produce detailed security reports. The program includes mentorship, professional development, certification, and potential job placement opportunities.

Supports federal cybersecurity governance and compliance activities under the NIST Risk Management Framework. Responsibilities include system categorization, security control selection and assessment, authorization support, risk trade-off analysis, mitigation strategy development, POA&M and risk-register tracking, regulatory monitoring, evidence collection, dashboards, and compliance reporting. The analyst also supports client presentations and advises stakeholders on cybersecurity designs and solutions.

Execute and manage IT audit activities, assess controls and regulatory compliance (SOX, GDPR, ISO, NIST), run control testing, use GRC tools for evidence tracking, perform IT risk assessments, manage third-party risk, coordinate with auditors and stakeholders, and provide actionable security and compliance insights to leadership.

Lead GRC activities to identify, analyse, and mitigate information and IT risks across the global estate. Build stakeholder and vendor relationships, create and maintain security policies, standards, and GRC documentation. Conduct internal security assessments, support compliance, and work with risk owners to ensure effective mitigation of threats and vulnerabilities.

Support supply chain security and risk management by assessing supplier and organisational security risks, maintaining risk profiles and ISMS controls, supporting accreditations (ISO 27001, CE+), responding to incidents, producing KRIs/KPIs and reports, and delivering training and guidance to stakeholders.

Translate sales and go-to-market requirements into developer-ready user stories, workflows, mockups, and prototypes in Jira. Collaborate with sales engineering, product, and GTM teams to iterate rapidly on production-grade demos. Validate complex IAM features through manual testing across devices and browsers, including mobile push and biometric verification. Maintain demo readiness, coordinate developer and stakeholder feedback, use approved AI tools responsibly, and improve sales engineering processes.

Lead research and thought leadership on Cyber GRC tools and market trends. Produce high-value insights, presentations, and client advisory; support sales, mentor junior analysts, peer-review content, and drive research process improvements. Engage clients virtually and in-person, present at events, and help clients select and implement Cyber GRC platforms.

Lead research and advisory on application security for enterprise applications (ERP/CRM). Produce thought leadership, client-facing insights, presentations, market analysis, and support sales. Mentor analysts, drive research agenda, improve processes, and advise CIOs on security strategy, vendor evaluation, metrics, and vulnerability testing across major vendors (SAP, Salesforce, Workday, Oracle).

Lead research and thought leadership on threat and exposure management. Produce high-value insights, analyze market trends, advise clients, support sales, present at events, mentor analysts, and improve research processes. Engage clients virtually and in person, delivering actionable recommendations and peer-reviewed content while collaborating across global teams.

Produce thought-leading research and advisory on security operations, threat detection, incident response and automation. Engage clients via written research, inquiries, presentations, and events; mentor practitioners; support sales and media; and maintain expertise across SIEM, SOC ecosystems, cloud/on-prem security, and automation trends.

Lead and manage SOC 1/SOC 2 examinations and SOX 404 IT control activities; assess ITGCs/ITACs, perform gap and impact assessments, drive remediation, collect auditor-ready evidence, and partner cross-functionally to design scalable controls for cloud and hybrid environments.

Lead cybersecurity research and thought leadership, produce actionable insights and market analysis, advise senior clients on strategy and risk, support sales and events, mentor analysts, and drive research agenda and process improvements. Travel up to 25%.

Monitor SIEM and security tooling, ingest and analyse logs from firewalls, networking and GPU infrastructure, triage and investigate alerts, perform threat hunting, coordinate incident response and remediation, track vulnerabilities, maintain runbooks, support compliance and audit activities, and communicate findings to engineering and operations.

Lead IT risk assessments, evaluate and document inherent and residual risks, partner with stakeholders to develop and monitor risk response plans, support enterprise IT risk and cyber security initiatives, maintain risk management procedures and best practices, and communicate risks across ITS and business units.

Support and maintain GRC programs including data and system classification, vendor security assessments, SOC 2 audit coordination, policy lifecycle management, and remediation of control gaps across technical and business stakeholders.

Lead insider risk and data loss investigations from triage to closure, operate and tune DLP across environments, build detections and workflows, partner with HR/Legal/Compliance/IT, mature insider risk program, support audits, and mentor others.

The L3 SOC Analyst leads complex incident investigations, drives automation, mentors junior analysts, and enhances SOC capabilities using advanced security technologies.

Transform SOC operational data into actionable insights to improve MDR service delivery. Analyze workflows, identify gaps and trends, define performance metrics, validate improvements, integrate AI into analysis, conduct root-cause investigations, and collaborate with cross-functional teams to enhance quality, efficiency, and customer experience.