Top Cyber Security Jobs in Glasgow

Supports SOC operations through second- and third-line security incident analysis, response, detection engineering, and escalation. Coordinates third-party security vendors, maintains security tooling, reviews monitoring rules, manages phishing campaigns, analyzes attack trends, and supports cyber incident response. The role also performs security reviews across systems and infrastructure, promotes secure behaviors, and advises stakeholders on operational security, policies, controls, and regulatory requirements in an Azure and Microsoft 365 environment.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Lead Samsara’s vulnerability management and application security programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, and support incident response. The role requires strong AWS, programming, vulnerability management, application security testing, AI/LLM, and security automation expertise.

Design, implement, and improve security controls across Kubernetes, cloud-native, and datacentre infrastructure. Secure networks and firewalls, integrate DevSecOps controls into CI/CD, lead vulnerability management, build detection/response capabilities, automate security workflows, and support incident response and threat hunting for GPU-accelerated and AI/ML platforms.

Monitor and respond to global security incidents, lead incident response lifecycles, conduct threat hunting, manage threat intelligence workflows, and maintain SIEM, EDR, SOAR, alerts, playbooks, and escalation processes. The role participates in on-call rotations, coordinates stakeholders, and drives continuous improvement across preparation, detection, containment, and post-incident activities.

Lead technical response to security events across Twilio's global cloud infrastructure: triage, contain, remediate, document incidents, build runbooks and automations, drive post-incident improvements, participate in on-call rotation and RCAs, and collaborate with R&D to scale threat mitigation and incident response capabilities.

Develops security requirements, architectures, and designs for complex operational technology systems, especially in nuclear and critical infrastructure environments. Conducts cyber risk assessments and security reviews, implements risk management processes, supports accreditation, and advises on secure digital transformation. The role requires strong IT and OT cybersecurity experience, knowledge of IEC 62443 and related regulatory frameworks, hands-on experience with security technologies and networking, stakeholder relationship management, and regular travel to client sites.

Owns security awareness, human-risk management, phishing simulations, supplier security assurance, email DLP improvements, certification support, governance reporting, and stakeholder engagement. The role manages third-party risk assessments, vendor performance, security policies, audit evidence, metrics, and remediation activities while advising senior leaders and business teams on cyber risk, information protection, and security culture.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Own day-to-day security operations across endpoints, identity and access, cloud, and SaaS tools. Administer MDM, patching, encryption, device compliance, and joiner/mover/leaver processes. Monitor alerts, investigate incidents, support access reviews, and improve security controls. Contribute compliance evidence for SOC 2, ISO 27001, and ISO 42001, plus vendor and customer security questionnaires. The role also provides practical desktop and device support while developing broader audit, compliance, and vendor-risk expertise.

Lead field-facing AI security strategy for enterprise customers by designing secure LLM/RAG architectures, delivering demos and POVs, advising on data protection and unsanctioned AI usage, and scaling enablement and product feedback across sales, product, and engineering teams.

Senior security researcher responsible for large-scale data collection and analysis, operating and building honeypots, performing vulnerability research and reverse engineering, developing automated tooling and GenAI/LLM workflows, collaborating with intelligence teams, reproducing vulnerabilities, and publishing technical research.

Leads security operations by managing major incidents, engineering SIEM detections, applying MITRE ATT&CK, developing automated response workflows, and improving threat-informed monitoring. Partners with engineering and platform teams on cloud security, vulnerability management, threat modeling, and security architecture. Provides technical leadership, mentors analysts, reports operational metrics, and supports ISO 27001, SOC 2, and NIS2 compliance.

Defines and governs secure, resilient enterprise technology architecture across on-premises, hybrid, multi-cloud, data center, AI/ML, edge, and emerging technology environments. Establishes architecture standards, controls, guardrails, threat modeling, detection engineering, and secure runbooks. Leads modernization roadmaps, risk assessments, design assurance, and technical trade-off decisions while embedding security into DevOps and platform engineering. Partners with enterprise architects, cybersecurity, SOC, risk, legal, vendors, and technology teams, and provides architectural leadership and mentoring.

Deliver OT cybersecurity consulting assignments across energy and critical infrastructure environments. Assess cyber risks across OT and IT systems, develop security requirements and architectures, conduct assurance and compliance activities, and produce client-ready reports, roadmaps, and proposals. Build trusted stakeholder relationships, support bids and account growth, and work independently with limited supervision. Candidates should understand OT security, operational resilience, relevant frameworks, and risk assessment approaches, with willingness to travel to client sites.

Leads global cybersecurity architecture across IT and OT environments, including architecture roadmaps, standards, solution design, governance, technology improvements, risk remediation, threat intelligence, incident response, penetration testing, and cyber accreditation. Partners with stakeholders, suppliers, and technical authorities to improve resilience and security while supporting client cyber health-check services and periodically visiting operational sites.

Own strategic post-sales relationships for enterprise customers adopting AI security and governance. Advise stakeholders from security practitioners to CISOs on AI environments, risks, governance, and use cases. Define measurable outcomes, drive platform adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and customer operationalization teams. Translate complex AI security capabilities into practical strategies and communicate customer insights internally.

Own the technical sales cycle from demo through POC to technical win. Deliver tailored demos, engage customer security and engineering teams, provide architecture guidance, support technical validation and objections, and act as a bridge to Product & Engineering. Represent OX at customer meetings and events.

Triage, investigate, and remediate security alerts using EDR and forensic artifacts. Perform tactical malware analysis, investigate Microsoft M365 activity, assist escalations, contribute to detection engineering, and work on projects to improve SOC outcomes while mentoring and collaborating with teammates.

Manage and grow channel partner relationships across Turkey, Middle East and Africa; recruit partners, drive channel-sourced pipeline and revenue, coordinate cross-functional support, execute channel marketing, register opportunities in Salesforce, and travel up to 50% for customer meetings.

Execute and manage IT audit activities, assess controls and regulatory compliance (SOX, GDPR, ISO, NIST), run control testing, use GRC tools for evidence tracking, perform IT risk assessments, manage third-party risk, coordinate with auditors and stakeholders, and provide actionable security and compliance insights to leadership.

Own administration, configuration, and lifecycle management of security tooling. Improve detection quality and reduce false positives, enforce change control and governance, maintain MITRE ATT&CK mapping and coverage analysis, and drive continuous optimisation of security tooling across enterprise, cloud, and network environments.

Lead product security incident response for hardware and software products: triage vulnerabilities, manage PSIRT JIRA tickets, coordinate cross-functional remediation, engage external researchers and vendors, define best practices for third-party and open-source components, and contribute to relevant regulations and standards.

Design, review, and specify software security architectures for embedded systems and firmware. Perform risk/threat analyses, root-cause investigations, develop countermeasures, liaise with customers and labs, and create innovative security solutions for product development and certification contexts.

Lead end-to-end security analysis and architecture for NXP product solutions, translate regulatory and certification requirements into designs, evaluate security trade-offs, and assess risks from emerging trends (including AI/ML) to secure large-scale embedded and semiconductor products.