Top Security Analyst Jobs in Glasgow

Conducts global cybersecurity compliance assessments against ISO, NIST, and TISAX frameworks; identifies control deficiencies, evaluates risk, maintains remediation records, and develops compliance metrics. Partners with IT, legal, governance, and security teams to address issues, trains ISMS managers, monitors risk indicators, and coordinates internal and external audits.

Monitor and analyze security alerts, handle incidents across Windows, Mac, and Linux, perform malware analysis, and remotely remediate malicious activity. The role also develops detection and response processes, communicates findings and recommendations to customers, contributes to security procedures, and supports thought leadership through public content and speaking engagements.

Provide incident handling, malware analysis, forensic investigation, remediation, detection engineering, and security automation across Windows, macOS, and Linux environments. Configure and optimize CrowdStrike Falcon modules, develop security content and automations, advise customers during incidents, produce technical findings, and support platform onboarding. The role also involves customer communication, thought leadership, operational improvement, and mentoring.

Analyze adversary activity and communicate findings to customers. Conduct threat hunting and intrusion analysis using endpoint telemetry, network and host-based analysis, digital forensics, and cyber threat intelligence. Research nation-state adversaries, improve detection capabilities, and support security investigations. The role also involves customer communication, tool development, cross-functional collaboration, and using AI technologies to improve workflows and decision-making.

Lead threat intelligence activities within ScottishPower’s Cyber Fusion Centre. Monitor the threat landscape, analyze emerging threats and adversary behavior, produce intelligence briefs, coordinate remediation, and distribute intelligence products across IT and OT security teams. The role also involves developing threat intelligence processes, working with internal and external partners, advising senior stakeholders, and translating complex technical information into actionable recommendations.

Monitor and analyze security alerts, investigate and respond to incidents across Windows, macOS, and Linux, perform malware and forensic analysis, remotely remediate threats, and improve detection and response processes. Serve as a technical escalation point, mentor junior analysts, oversee quality assurance, manage internal programs or teams, communicate findings to customers, and contribute thought leadership through public speaking and content.

Supports second-line oversight of first-line cybersecurity across M&G. Assesses cyber controls, risk processes, metrics, remediation, incident responses, and mitigation projects; reviews testing outputs, identifies gaps and root causes, and advises stakeholders on pragmatic improvements. The role requires cyber risk expertise, strong reporting and stakeholder engagement, knowledge of security domains, cloud and enterprise security products, and understanding of risk taxonomies, appetite, KRIs, and controls.

Investigate security logs and events, handle Tier I escalations, conduct threat hunting, analyze indicators of compromise, and support incident response for MDR customers. The role involves documenting findings, communicating with technical and executive audiences, guiding analysts, following cases through resolution, researching emerging threats, improving security operations processes, and reporting on threat trends.

Conduct third-party security risk assessments during supplier selection, onboarding, and contract monitoring. Analyze assessment results, identify and escalate risks, maintain security posture reports and dashboards, review cybersecurity contract clauses, and collaborate with Legal, Privacy, Procurement, and security teams. Engage suppliers as a security point of contact, advise stakeholders on mitigations, and contribute to TPRM policies, standards, processes, and continuous improvement.

Conduct third-party security risk assessments during vendor selection, onboarding, and ongoing monitoring. Analyze supplier security postures, identify and escalate risks, maintain risk reporting and dashboards, review cybersecurity contract clauses, and collaborate with Legal, Privacy, Procurement, and security teams. Engage suppliers throughout the contract lifecycle, contribute to TPRM policies and processes, and provide security guidance to internal stakeholders.

Investigates complex cyber incidents across cloud, endpoint, identity, email, and network environments. Conducts intelligence-led threat hunting, develops and validates detections, assesses risk, coordinates containment and recovery, and improves security operations processes and tooling. Uses AI-assisted analysis while validating outputs and maintaining accountability. The role also documents investigations, supports audits, communicates risks to technical and non-technical stakeholders, and serves as an escalation point for complex alerts and incidents.

Investigate fraud and insider-threat cases from initial signal through resolution. Gather and analyze logs, transactions, behavioral signals, and other evidence; triage alerts; reconstruct events; document findings objectively; maintain evidence chain of custody; and collaborate with Detection & Response, Legal, and HR. The role also contributes to investigation playbooks, detection improvements, and fraud and insider-risk prevention.

Investigate fraud and insider-threat cases from initial signals through resolution. Gather and analyze logs, transactions, behavioral data, and other evidence; triage alerts; reconstruct events; document findings objectively; preserve evidence; and collaborate with Detection & Response, Legal, and HR. The role also contributes to investigation playbooks, detection improvements, and prevention efforts while handling confidential information with discretion.

Owns the integration and analysis of people, security, technology, fraud, physical security, investigation, and governance data to identify insider-risk patterns. The role produces actionable intelligence, supports investigations, strengthens controls, and develops monitoring, automation, governance, and reporting capabilities. It requires influencing senior stakeholders, translating complex findings into business outcomes, and making risk-based recommendations amid ambiguity.

Support federal cybersecurity governance, risk, and compliance activities across the NIST RMF lifecycle. Conduct security control assessments, risk analyses, POA&M reviews, authorization support, and mitigation tracking. Maintain cyber risk registers, dashboards, and FISMA reporting while supporting IRM, SCRM, and TPRM programs. Present technical findings and recommendations to technical and non-technical stakeholders, using Power BI and automation tools to improve compliance reporting and risk visibility.

Leads security operations by managing major incidents, engineering SIEM detections, applying MITRE ATT&CK, developing automated response workflows, and improving threat-informed monitoring. Partners with engineering and platform teams on cloud security, vulnerability management, threat modeling, and security architecture. Provides technical leadership, mentors analysts, reports operational metrics, and supports ISO 27001, SOC 2, and NIS2 compliance.

Conduct third-party and supplier security assurance, security control testing, PCI DSS assessments, regulatory reviews, and audits. Evaluate security evidence, identify risks and control gaps, improve policies and governance, support security inquiries, and advise engineering and product teams on secure changes. The role also drives remediation, process automation, risk prioritization, and continuous improvement while mentoring less experienced analysts.

Supports authorized penetration testing for a federal agency through assessment planning, reconnaissance, enumeration, evidence collection, findings documentation, remediation recommendations, retesting, and reporting. The role also assists with triaging external-facing asset findings, CISA WAS/FAST results, KEV exposures, and VDP submissions. Responsibilities include maintaining schedules and scope records, coordinating stakeholders, tracking actions, and using automation and AI-enabled tools to improve testing and reporting workflows.

Lead EMEA insider risk investigations and assessments, identify threats to people and assets, conduct interviews and evidence analysis, brief stakeholders, develop mitigation strategies and training, and collaborate with InfoSec, HR, Legal, and IT to strengthen insider risk controls and awareness.

Detect, analyze, and respond to security incidents in real time across Windows, macOS, and Linux. Perform malware and forensic analysis, remote remediation, develop detection and triage processes, produce customer-facing communications, mentor and quality-assure junior analysts, manage programs/teams, and contribute to public thought leadership.

Triage, investigate, and remediate security alerts using EDR and forensic artifacts. Perform tactical malware analysis, investigate Microsoft M365 activity, assist escalations, contribute to detection engineering, and work on projects to improve SOC outcomes while mentoring and collaborating with teammates.

Execute and manage IT audit activities, assess controls and regulatory compliance (SOX, GDPR, ISO, NIST), run control testing, use GRC tools for evidence tracking, perform IT risk assessments, manage third-party risk, coordinate with auditors and stakeholders, and provide actionable security and compliance insights to leadership.

Support supply chain security and risk management by assessing supplier and organisational security risks, maintaining risk profiles and ISMS controls, supporting accreditations (ISO 27001, CE+), responding to incidents, producing KRIs/KPIs and reports, and delivering training and guidance to stakeholders.

Translate sales and go-to-market requirements into developer-ready user stories, workflows, mockups, and prototypes in Jira. Collaborate with sales engineering, product, and GTM teams to iterate rapidly on production-grade demos. Validate complex IAM features through manual testing across devices and browsers, including mobile push and biometric verification. Maintain demo readiness, coordinate developer and stakeholder feedback, use approved AI tools responsibly, and improve sales engineering processes.

Lead research and thought leadership on Cyber GRC tools and market trends. Produce high-value insights, presentations, and client advisory; support sales, mentor junior analysts, peer-review content, and drive research process improvements. Engage clients virtually and in-person, present at events, and help clients select and implement Cyber GRC platforms.