Top Security Engineer Jobs in Glasgow

Create and improve governance, risk, and compliance security labs, challenges, and learning content. Research regulations and standards, develop practical simulations, peer-review cyber ranges, simplify complex cybersecurity concepts, and advise engineering and product teams on security and privacy by design. The role requires GRC audit experience, knowledge of major compliance frameworks, strong cybersecurity fundamentals, and the ability to create engaging training for technical and non-technical users.

Build and maintain mobile runtime application security capabilities, including RASP shields, anti-tampering, code hardening, secure storage, attestation, and applied cryptography. Develop Python backend services and APIs for threat telemetry, consoles, SIEM integration, and observability. Collaborate on CI/CD, testing, QA, vendor evaluations, product roadmaps, and technical pre-sales. The role requires ownership across the product lifecycle and practical expertise across mobile security, backend engineering, cloud, and delivery infrastructure.

Designs, develops, tests, and troubleshoots scalable security systems using Java and Python. Creates secure production code, contributes to architecture and design artifacts, analyzes data to improve security applications, and supports resilient cloud security platforms. Requires software engineering, system design, application development, testing, SDLC, agile, and security expertise, with AWS and Python preferred.

Leads edge networking, DevOps enablement, and security for a remote kiosk fleet. Responsibilities include managing OpenWrt and pfSense devices, developing GitLab and Terraform templates, administering AWS and Linux infrastructure, overseeing penetration tests and vulnerability remediation, managing certificates and credentials, and improving supplier security. The role also establishes device identity, secure connectivity, patching standards, audit evidence, and security practices while coaching engineering teams.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Design, implement, configure, and improve cybersecurity tools and platforms. Evaluate emerging technologies, support AI-enabled security and automation, strengthen monitoring and observability, investigate technical security issues, deliver secure cloud and SaaS integrations, and collaborate with architecture, compliance, and technology teams to improve security posture and organizational resilience.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Secure Tide’s web, mobile, and cloud-native products through vulnerability hunting, threat modeling, secure design reviews, remediation, proof-of-concept scripting, and CI/CD security automation. The role serves as an Application Security subject matter expert, partners with engineering and product teams, communicates risks to executives, and mentors junior engineers.

Designs, builds, tests, and improves cloud security labs, challenges, and learning content for a cyber resilience platform. The role focuses on AWS, Azure, GCP, Kubernetes, SIEM, CSPM/CNAPP, containers, Terraform, serverless technologies, identity, access, networking, monitoring, and DevSecOps. Responsibilities include creating realistic attack-and-defense simulations, translating technical research into accessible content, collaborating with engineering and product teams, and supporting cloud security content strategy.

Own security and compliance governance across engineering, translating standards into practical controls and production code. Manage ISO 27001, SWIFT, FPS, SOC 2 and audit activities; maintain risks, controls, evidence, and remediation. Improve release management, incident reviews, backup and restore testing, disaster recovery, operational resilience, and third-party governance. Automate control checks and evidence collection while partnering with engineering, auditors, risk teams, and leadership.

Maintain and improve Microsoft Defender for Endpoint, Microsoft Sentinel, security monitoring, endpoint protection, log ingestion, and detection capabilities. Support application onboarding, cloud security controls, audits, incident response, investigations, AI-driven security use cases, and stakeholder collaboration. The role also mentors junior team members and helps maintain operational KPIs, KRIs, and standards.

Design, implement, and improve security controls across Kubernetes, cloud-native, and datacentre infrastructure. Secure networks and firewalls, integrate DevSecOps controls into CI/CD, lead vulnerability management, build detection/response capabilities, automate security workflows, and support incident response and threat hunting for GPU-accelerated and AI/ML platforms.

Lead technical response to security events across Twilio's global cloud infrastructure: triage, contain, remediate, document incidents, build runbooks and automations, drive post-incident improvements, participate in on-call rotation and RCAs, and collaborate with R&D to scale threat mitigation and incident response capabilities.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001 and SOC 2 Type 2). Manage SoA, risk treatment, audits, policy lifecycle, gap remediation, internal audits, and cross-functional control ownership while advising security leadership on certification readiness and compliance strategy.

Design, implement, test, and ship Firefox security and hardening features for enterprise users. Improve browser security architecture across operating systems, including privilege isolation, trust boundaries, cryptographic protocols, WebPKI, and security-sensitive web APIs. Investigate security issues, deliver maintainable fixes, and resolve stability, correctness, performance, memory, and multithreading challenges in a complex native codebase.

Own day-to-day security operations across endpoints, identity and access, cloud, and SaaS tools. Administer MDM, patching, encryption, device compliance, and joiner/mover/leaver processes. Monitor alerts, investigate incidents, support access reviews, and improve security controls. Contribute compliance evidence for SOC 2, ISO 27001, and ISO 42001, plus vendor and customer security questionnaires. The role also provides practical desktop and device support while developing broader audit, compliance, and vendor-risk expertise.

Respond to and investigate security incidents, manage threat and vulnerability programs, operate SIEM and EDR tooling, develop incident response runbooks, automate security workflows, lead phishing and security awareness campaigns, and support purple team exercises. The role also owns vulnerability reporting, remediation metrics, stakeholder communication, and continuous improvement of security operations.

Lead Samsara’s vulnerability management and application security programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, and support incident response. The role requires strong AWS, programming, vulnerability management, application security testing, AI/LLM, and security automation expertise.

Monitor and respond to global security incidents, lead incident response lifecycles, conduct threat hunting, manage threat intelligence workflows, and maintain SIEM, EDR, SOAR, alerts, playbooks, and escalation processes. The role participates in on-call rotations, coordinates stakeholders, and drives continuous improvement across preparation, detection, containment, and post-incident activities.

Lead product security incident response for hardware and software products: triage vulnerabilities, manage PSIRT JIRA tickets, coordinate cross-functional remediation, engage external researchers and vendors, define best practices for third-party and open-source components, and contribute to relevant regulations and standards.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Lead Pantheon's security operations strategy and roadmap, including SIEM/SOAR architecture, threat detection, incident response, threat intelligence, automation, vulnerability and abuse management, and operational resilience. Own security operations compliance for GDPR, NIS2, SOC 2, PCI DSS, and NIST CSF. Lead major incident response, executive reporting, cross-functional initiatives, and mentorship while remaining hands-on with cloud-native security, detection engineering, and security automation.

Support threat intelligence, incident analysis/response, penetration test coordination, vulnerability scanning and remediation tracking, security tool administration, dashboard maintenance, and adherence to security policies while learning and developing cybersecurity skills.

Secure Aptos core infrastructure and products via design reviews, code audits, penetration tests; build security tools and mitigations; define secure operational practices; advise engineers; and triage bug bounty reports.