Top Security Engineer Jobs in Glasgow

Own and scale Mozilla's web bug bounty program; triage and validate reports; drive end-to-end vulnerability remediation; perform targeted code reviews (JavaScript, Python); collaborate with SIRT on incidents; build tooling and KPIs to improve triage and program insight; engage external researchers and platforms.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001 and SOC 2 Type 2). Manage SoA, risk treatment, audits, policy lifecycle, gap remediation, internal audits, and cross-functional control ownership while advising security leadership on certification readiness and compliance strategy.

Design, implement, and manage GCP infrastructure using Terraform; architect GCP services and BigQuery storage; integrate Vertex AI and Wiz Security Control for ML and continuous security monitoring; build automation and tooling; enforce GCP security best practices, Policies-as-Code, and perform regular security assessments and audits while collaborating with cross-functional teams.

Lead embedding security into software delivery by partnering with engineering teams to improve CI/CD security, triage and remediate findings, design secure-by-default patterns, automate security validation and evidence generation, facilitate threat modeling, and provide reusable templates and guidance to reduce risk at scale.

Embed security into software delivery by partnering with engineering teams to improve CI/CD pipeline security, triage and remediate findings, perform threat modeling, design secure-by-default patterns, build reusable templates and automation, support compliance and audit evidence, and communicate security standards and best practices.

Advance Firefox security architecture and cryptography stack by designing and implementing web platform security features. Improve browser reliability, performance, and memory efficiency. Debug and resolve security-sensitive, multi-threaded issues, contribute to standards-based implementations, and collaborate across teams on security initiatives, technical design, and planning.

Design and enforce Rego policy-as-code for GCP, integrate security into GCP CI/CD pipelines, implement IaC with Terraform, perform GCP security assessments and incident response, and drive GCP-specific security best practices across teams.

Design, implement, and maintain Rego policy-as-code and Terraform IaC to secure GCP infrastructure. Integrate security into CI/CD pipelines, perform GCP security assessments, threat modeling, incident response, and collaborate across teams to enforce compliance and container/microservice security.

Lead security engineering for an institutional product: threat modeling, secure architecture, appsec, AWS hardening, key management (HSMs/TEEs), supply-chain and reproducible builds, incident response, and compliance technical controls. Hands-on coding and infrastructure work alongside engineering.

Own and execute end-to-end collaboration-platform integrations for acquisitions: scope and migrate Google Workspace, Slack, Zoom, mailboxes, channels, and domains. Maintain platform governance, email/domain security, DLP, archiving, eDiscovery/legal holds, and incident response. Build repeatable playbooks, automation, and tooling; coordinate cross-functionally with Legal, Compliance, IT, Security, and Corporate Development.