Top Cyber Security Jobs in Glasgow

Own administration, configuration, and lifecycle management of security tooling. Improve detection quality and reduce false positives, enforce change control and governance, maintain MITRE ATT&CK mapping and coverage analysis, and drive continuous optimisation of security tooling across enterprise, cloud, and network environments.

Lead GRC activities to identify, analyse, and mitigate information and IT risks across the global estate. Build stakeholder and vendor relationships, create and maintain security policies, standards, and GRC documentation. Conduct internal security assessments, support compliance, and work with risk owners to ensure effective mitigation of threats and vulnerabilities.

Lead product security incident response for hardware and software products: triage vulnerabilities, manage PSIRT JIRA tickets, coordinate cross-functional remediation, engage external researchers and vendors, define best practices for third-party and open-source components, and contribute to relevant regulations and standards.

Lead and execute security evaluation and certification for secure products (Secure Elements, MCUs/MPUs), ensure compliance with secure development standards and regulations, define certification approaches for IoT/automotive/industrial markets, represent the company in standards bodies, and drive automation and AI-supported certification workflows.

Design, review, and specify software security architectures for embedded systems and firmware. Perform risk/threat analyses, root-cause investigations, develop countermeasures, liaise with customers and labs, and create innovative security solutions for product development and certification contexts.

Design, review, and evolve software security architectures for embedded SoC products. Conduct threat and risk analyses, define security requirements, support SDL and compliance (including CRA), analyze vulnerabilities, and specify mitigations. Drive security-by-design, secure mechanisms (secure boot, key management, secure update), liaise with customers and labs, and improve product security frameworks across product lifecycles.

Design and review software security architectures for embedded SoC products, perform threat and risk assessments, define security requirements and mitigations, support SDL and compliance (including CRA), and drive security best practices across product teams.

Lead end-to-end security analysis and architecture for NXP product solutions, translate regulatory and certification requirements into designs, evaluate security trade-offs, and assess risks from emerging trends (including AI/ML) to secure large-scale embedded and semiconductor products.

Lead CRA compliance strategy and influence security architecture across MCU/MPU product lines. Translate regulations into security controls, perform system-level threat modeling and risk assessments, ensure traceability and audit readiness, and drive security-by-design across legacy and new products while collaborating with global stakeholders.

Support supply chain security and risk management by assessing supplier and organisational security risks, maintaining risk profiles and ISMS controls, supporting accreditations (ISO 27001, CE+), responding to incidents, producing KRIs/KPIs and reports, and delivering training and guidance to stakeholders.

Provide technical security advice and through-life assurance for Thales IS/IT environments. Deliver security reviews, cloud and incident response guidance, compliance to government standards, risk assessments, CoCo assurance, and security requirements for delivery squads. Maintain security documentation and support continual assurance, training, and remediation across on-premises and cloud systems.

Designs and operates security controls across AWS and Azure environments. Responsibilities include cloud security monitoring, incident response, security automation, Infrastructure as Code standards, CI/CD security integration, policy-as-code, vulnerability management, architecture reviews, risk assessment, compliance support, penetration testing coordination, documentation, and mentoring. The role collaborates with DevOps, SRE, Engineering, Compliance, and Product teams and participates in an on-call incident response rotation.

Lead security assurance assessments, evaluate the effectiveness of risk mitigations and controls, provide remediation and advisory guidance, engage business and technology stakeholders, produce security risk reporting, and mentor security assurance analysts. The role supports enterprise-wide cyber-risk reduction and requires cross-organizational influence across a global business.

Leads security assurance activities, evaluates the effectiveness of risk mitigations and controls, provides remediation and advisory guidance, and produces security risk reporting. The role partners with business, technology, and risk stakeholders globally to reduce cyber risk, while managing, coaching, and mentoring security assurance analysts.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Own product marketing strategy for cybersecurity MDR/XDR solutions, including positioning, value propositions, go-to-market execution, sales enablement, content strategy, competitive intelligence, and product launch support. Translate complex cybersecurity capabilities into compelling business value for technical and business buyers, collaborate across Product, Commercial, and Security Operations, and measure messaging effectiveness. The role requires deep cybersecurity market knowledge, strong communication, stakeholder management, and fluent English and C2 German.

Own the strategy and roadmap for Managed Detection and Response, Endpoint Detection and Response, and Incident Response products. Lead customer discovery, translate needs into product opportunities, and collaborate with engineering, design, security operations, marketing, sales, and customer success. Manage EDR and MDR vendor relationships, support go-to-market launches, improve product processes, and drive innovation based on cybersecurity trends and data.

Lead Pantheon's security operations strategy and roadmap, including SIEM/SOAR architecture, threat detection, incident response, threat intelligence, automation, vulnerability and abuse management, and operational resilience. Own security operations compliance for GDPR, NIS2, SOC 2, PCI DSS, and NIST CSF. Lead major incident response, executive reporting, cross-functional initiatives, and mentorship while remaining hands-on with cloud-native security, detection engineering, and security automation.

Drive new business in the DACH region through cold outreach, demoing Keeper products, managing the full sales cycle from prospecting to close, maintaining accurate Salesforce pipeline, and consistently meeting quota while communicating in German and English.

Support and advance the application security program: review designs and architecture, advise engineering/DevOps on secure SDLC practices, run static/dynamic scans and manual assessments, triage external pentest and bug-bounty findings, and drive security process improvements.

Lead global SCA and SAST strategy and tooling, integrate static and open-source scanning into CI/CD pipelines, reduce false positives, perform threat modeling and architecture reviews, mentor teams, and drive developer-first application security across diverse tech stacks.

Support threat intelligence, incident analysis/response, penetration test coordination, vulnerability scanning and remediation tracking, security tool administration, dashboard maintenance, and adherence to security policies while learning and developing cybersecurity skills.

Design, automate, and maintain security controls, detection, and remediation systems; evaluate security technologies; perform risk assessments and threat models; partner with engineering for secure development; lead incident response and support compliance (SOC 2, ISO 27001); manage bug bounty and vulnerability disclosure programs.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Conduct deep technical research to identify novel risks and attack vectors in cloud- and AI-native architectures, produce proofs-of-risk and technical POCs, and partner with Product and Engineering to translate findings into product capabilities.