Senior Information Security Analyst

Salary: £40,000 - 80,000 per year

Requirements:

• Significant experience across multiple areas of cybersecurity, ideally including security engineering, vulnerability management, incident response, IAM, network security and security operations.
• Strong hands-on experience designing and implementing secure solutions within a complex enterprise environment.
• Experience working closely with teams to improve security controls and configurations.
• Good knowledge of enterprise security tooling, particularly endpoint protection, vulnerability management and logging/SIEM platforms.
• Experience contributing to or leading incident response, security investigations and threat-driven security activity.
• Understanding of security risk and the ability to balance security requirements with wider business and technology priorities.
• Experience or understanding of AI security and governance would be advantageous.
• Knowledge of security frameworks including NIST CSF and ISO 27000, with an understanding of risk methodologies such as FAIR.
• Strong communication skills, with the ability to explain technical security issues clearly to both technical and non-technical stakeholders.
• Comfortable operating independently as a senior individual contributor while working collaboratively with globally distributed teams.
• Relevant certifications such as CISSP, SSCP or GCIA would be beneficial, but are not essential.

Responsibilities:

• Provide technical leadership across a broad range of Information Security and security engineering activities.
• Mentor and support other members of the Information Security team, sharing knowledge, best practice and technical expertise.
• Work closely with Security, IT and Engineering teams to identify security risks and improve the organisations overall security posture.
• Assess and design secure infrastructure, architectures and processes in line with business and technology requirements.
• Develop and implement practical security requirements, controls, policies and procedures.
• Evaluate security controls and configurations across cloud, on-premise, hybrid and application environments.
• Lead or contribute to vulnerability management, security assessments and risk-based remediation activity.
• Support detection and incident response activities, including investigation, containment and remediation.
• Evaluate, implement and administer enterprise security technologies across areas such as endpoint protection, vulnerability management and SIEM/logging.
• Work with infrastructure teams to embed security into new systems, services and technology initiatives.
• Contribute to threat-driven security initiatives and improvements to the organisations monitoring and response capabilities.
• Help develop the organisations approach to AI security, including policy, risk assessment and appropriate monitoring and controls.
• Produce clear reporting on security findings, risks, remediation and overall security posture for technical and senior stakeholders.
• Act as a senior security advisor to teams across the wider organisation, balancing security requirements with practical business needs.

Technologies:

• AI
• Cloud
• IAM
• Support
• Network
• Security

More:

We are a well-established global technology company with a strong base in Edinburgh, known for developing technology used by some of the worlds most recognised companies. This senior role in our Information Security team combines hands-on security engineering with technical leadership, mentoring and influence across the organisation. You will work across enterprise technology, cloud, on-premise infrastructure, applications and research environments, with an opportunity to contribute to our approach to AI security and governance. We offer a modern Edinburgh City Centre office with excellent amenities and a collaborative culture. This is a hybrid role requiring at least two days per week in the Edinburgh office, with a competitive salary, bonus and share scheme.

last updated 39 week of 2026