Top Security Engineer Jobs in Glasgow

Develops offensive-security labs, challenges, ranges, and learning content for a cyber resilience platform. Researches vulnerabilities, tools, red-team tactics, and AI-driven attacks; tests lab functionality; translates technical findings for technical and non-technical audiences; and collaborates with Product teams on platform innovation.

The Staff Infrastructure Security Engineer will lead security initiatives, set architectural patterns, conduct security reviews, and mentor engineers while ensuring security in cloud infrastructures for GitLab.

Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.

Own day-to-day security operations across endpoints, identity and access, cloud, and SaaS tools. Administer MDM, patching, encryption, device compliance, and joiner/mover/leaver processes. Monitor alerts, investigate incidents, support access reviews, and improve security controls. Contribute compliance evidence for SOC 2, ISO 27001, and ISO 42001, plus vendor and customer security questionnaires. The role also provides practical desktop and device support while developing broader audit, compliance, and vendor-risk expertise.

Supports cybersecurity engineering for a federal cloud modernization program. Responsibilities include implementing and monitoring security controls, cloud systems integration, automation, AI-assisted tooling, configuration hardening, vulnerability management, evidence collection, control testing, STIG and baseline artifact maintenance, and technical documentation. The role is fully remote and requires collaboration with senior engineers, system owners, developers, and assessors.

Lead Samsara’s vulnerability management and application security programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, and support incident response. The role requires strong AWS, programming, vulnerability management, application security testing, AI/LLM, and security automation expertise.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Lead end-to-end incident response for high-severity security events across cloud environments, perform DFIR investigations, build detection and automation (including AI-assisted) workflows, partner cross-functionally, produce executive communications and RCAs, maintain runbooks/playbooks, and mentor other engineers within a 24/7 global on-call model.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Lead security operations focused on incident response, vulnerability management, SIEM and EDR monitoring, phishing campaigns, and purple team exercises. Investigate incidents, identify root causes, develop runbooks, automate workflows, manage vulnerability remediation metrics, and improve stakeholder collaboration. Partner with engineering and business teams to promote security awareness and a security-first culture while staying current on emerging threats and security operations practices.

Provides technical pre-sales leadership for Microsoft Security solutions. Serves as the primary technical contact for prospective customers, developing security strategies, delivering presentations, demonstrations, workshops, architecture sessions, trials, and proof-of-concepts. Collaborates with sellers, partners, and internal teams to overcome technical blockers, drive technical wins, tailor security recommendations, and improve customer security postures throughout the sales cycle.

Lead Pantheon's security operations strategy and roadmap, including SIEM/SOAR architecture, threat detection, incident response, threat intelligence, automation, vulnerability and abuse management, and operational resilience. Own security operations compliance for GDPR, NIS2, SOC 2, PCI DSS, and NIST CSF. Lead major incident response, executive reporting, cross-functional initiatives, and mentorship while remaining hands-on with cloud-native security, detection engineering, and security automation.

Support threat intelligence, incident analysis/response, penetration test coordination, vulnerability scanning and remediation tracking, security tool administration, dashboard maintenance, and adherence to security policies while learning and developing cybersecurity skills.

Design, automate, and maintain security controls, detection, and remediation systems; evaluate security technologies; perform risk assessments and threat models; partner with engineering for secure development; lead incident response and support compliance (SOC 2, ISO 27001); manage bug bounty and vulnerability disclosure programs.

Secure Aptos core infrastructure and products via design reviews, code audits, penetration tests; build security tools and mitigations; define secure operational practices; advise engineers; and triage bug bounty reports.

Lead Security Engineer responsible for directing security engineering and testing across platforms and services, defining testing methodology and tools, performing penetration testing and secure code assessment, embedding security in CI/CD pipelines, threat modelling, and mentoring junior engineers while liaising with stakeholders and customers. Role requires defence experience and an active security clearance.

Administer and maintain endpoint security platforms (Tanium & SentinelOne), deploy and manage Tanium modules, monitor performance, build dashboards and reports, perform audits and compliance checks, troubleshoot endpoint visibility/patching/deployments, integrate endpoint tools with IT/security systems, and provide training and support.

Serve as the technical authority for enterprise customers in data security, owning the technical sales process. Deliver technical presentations, demos, and whiteboard sessions, advise on AI/ML-driven data protection, and drive outcomes through value-based selling with partners and GTM teams.

Deploy and integrate autonomous vulnerability-management platforms into high-security, sovereign, and air-gapped environments. Read and modify customer and platform code, identify vulnerabilities, verify patches, build security tooling integrations, and navigate authentication, network, compliance, and cross-domain constraints. Act as the technical bridge between customers and core engineering and AI teams while advising customer engineering, SOC, and operational leaders on automated defense and vulnerability remediation.

Design, implement, monitor, and improve cybersecurity controls and tooling for a federal agency modernization program. The role focuses on cloud security engineering, systems integration, automation, AI-enabled capabilities, Zero Trust architecture, continuous monitoring, and secure cloud service integration. Responsibilities include solving complex network and systems problems, evaluating technologies, developing standards, supporting security assessments, and maintaining resilient cybersecurity environments.

Own administration, configuration, and lifecycle management of security tooling. Improve detection quality and reduce false positives, enforce change control and governance, maintain MITRE ATT&CK mapping and coverage analysis, and drive continuous optimisation of security tooling across enterprise, cloud, and network environments.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Support and advance the application security program: review designs and architecture, advise engineering/DevOps on secure SDLC practices, run static/dynamic scans and manual assessments, triage external pentest and bug-bounty findings, and drive security process improvements.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.