Top Cyber Security Jobs in Glasgow

Lead end-to-end security analysis and architecture for NXP product solutions, translate regulatory and certification requirements into designs, evaluate security trade-offs, and assess risks from emerging trends (including AI/ML) to secure large-scale embedded and semiconductor products.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Own product marketing strategy for cybersecurity MDR/XDR solutions, including positioning, value propositions, go-to-market execution, sales enablement, content strategy, competitive intelligence, and product launch support. Translate complex cybersecurity capabilities into compelling business value for technical and business buyers, collaborate across Product, Commercial, and Security Operations, and measure messaging effectiveness. The role requires deep cybersecurity market knowledge, strong communication, stakeholder management, and fluent English and C2 German.

Lead Pantheon's security operations strategy and roadmap, including SIEM/SOAR architecture, threat detection, incident response, threat intelligence, automation, vulnerability and abuse management, and operational resilience. Own security operations compliance for GDPR, NIS2, SOC 2, PCI DSS, and NIST CSF. Lead major incident response, executive reporting, cross-functional initiatives, and mentorship while remaining hands-on with cloud-native security, detection engineering, and security automation.

Support and advance the application security program: review designs and architecture, advise engineering/DevOps on secure SDLC practices, run static/dynamic scans and manual assessments, triage external pentest and bug-bounty findings, and drive security process improvements.

Support threat intelligence, incident analysis/response, penetration test coordination, vulnerability scanning and remediation tracking, security tool administration, dashboard maintenance, and adherence to security policies while learning and developing cybersecurity skills.

Secure Aptos core infrastructure and products via design reviews, code audits, penetration tests; build security tools and mitigations; define secure operational practices; advise engineers; and triage bug bounty reports.

Design and apply security architecture for cloud and software solutions. Embed security practices into Agile delivery, assess existing systems, recommend mitigations, mentor engineers, lead small teams, and support security testing, CI/CD security and compliance with standards.

Design and implement secure cloud-based solutions and DevSecOps practices. Automate security tooling in CI pipelines, perform threat modelling and vulnerability management, support penetration testing, review security outputs, convert findings into actionable work, verify secure architectures, and coach junior team members.

Lead secure design and review of cloud platforms and services, advise Agile teams on security best practices, test software/infrastructure security, mentor and manage staff, and ensure compliance with standards and regulations across public, healthcare, defence, and commercial projects.

Lead Security Engineer responsible for directing security engineering and testing across platforms and services, defining testing methodology and tools, performing penetration testing and secure code assessment, embedding security in CI/CD pipelines, threat modelling, and mentoring junior engineers while liaising with stakeholders and customers. Role requires defence experience and an active security clearance.

Lead research and advisory on application security for enterprise applications (ERP/CRM). Produce thought leadership, client-facing insights, presentations, market analysis, and support sales. Mentor analysts, drive research agenda, improve processes, and advise CIOs on security strategy, vendor evaluation, metrics, and vulnerability testing across major vendors (SAP, Salesforce, Workday, Oracle).

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Administer and maintain endpoint security platforms (Tanium & SentinelOne), deploy and manage Tanium modules, monitor performance, build dashboards and reports, perform audits and compliance checks, troubleshoot endpoint visibility/patching/deployments, integrate endpoint tools with IT/security systems, and provide training and support.

Senior technical leader driving pre-sales architecture and partner technical strategy for Qualys-based enterprise security solutions. Lead executive workshops, complex POCs, partner enablement, solution adoption roadmaps, and mentor junior architects while influencing product and partner-delivered managed services.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Lead and execute multi-vector red team campaigns including adversarial emulation, post-exploitation, social engineering, and physical testing. Develop tools, exploit vulnerabilities, produce comprehensive technical reports with remediation guidance, present findings to technical and non-technical stakeholders, mentor team members, support business development, and contribute research to the security community. Requires significant travel.

Partner with sales and partners to design, demo, and operationalize Qualys-based security solutions. Lead architecture workshops, POCs, partner enablement, and complex integration guidance across vulnerability, patching, cloud/application security, compliance, and threat detection. Influence product roadmap and produce enablement content.

Lead security engineering for an institutional product: threat modeling, secure architecture, appsec, AWS hardening, key management (HSMs/TEEs), supply-chain and reproducible builds, incident response, and compliance technical controls. Hands-on coding and infrastructure work alongside engineering.

Design and verify secure architectures across infrastructure, applications, blockchain, Rust, and AI projects. Perform in-depth security assessments and audits, recommend mitigations, and embed with engineering teams to improve security posture and operational practices.