Wood Mackenzie is the global leader in analytics, insights and proprietary data across the entire energy and natural resources landscape. For over 50 years our work has guided the decisions of the world’s most influential energy producers, utilities companies, financial institutions and governments. Now, with the world’s energy system more complex and interconnected than ever before, sector-specific views are no longer enough. That’s why we’ve redefined what’s possible with Intelligence Connected. By fusing our unparalleled proprietary data with the sharpest analytical minds, all supercharged by Synoptic AI, we deliver a clear, interconnected view of the entire value chain. Our trusted team of 2,700 experts across 30 countries breaks siloes and connects industries, markets and regions across the globe. This empowers our customers to identify risk sooner, spot opportunities faster and recalibrate strategy with confidence – whether planning days, weeks, months or decades ahead. Wood Mackenzie Intelligence Connected <a href="https://www.woodmac.com/">WoodMac.com</a><a href="https://www.youtube.com/watch?v=Y4AVwhQJj_w&amp;t=10s">Wood Mackenzie Brand Video</a>Wood Mackenzie Values<ul><li>Inclusive – we succeed together</li><li>Trusting – we choose to trust each other</li><li>Customer committed – we put customers at the heart of our decisions</li><li>Future Focused – we accelerate change</li><li>Curious – we turn knowledge into action</li></ul><div>Position Overview We are seeking an experienced Cyber Security Specialist to join our security team. The ideal candidate will have a minimum of 5years cyber security experience and 3+ years in application security (DevSecOps). This is a senior hands-on role requiring an individual who has previously established or significantly matured AppSec functions within modern software engineering environments.This role will form a collaboration with product engineering teams in Edinburgh and must be capable of driving cultural change, promoting secure coding practices, and ensuring vulnerabilities (in code and architecture) are identified and remediated effectively Key Responsibilities<ul><li>Design and implement the Application Security Strategy, tooling roadmap, governance model, and SDLC integrations from ground up.</li><li>Evaluate new AppSec tools (e.g SAST/DAST/SCA/Runtime protections).</li><li>General cyber security expertise to assist Head of Cybersecurity implement strategic roadmap and strategy.</li></ul> Additional Responsibilities<ul><li>Monitor and analyze security events across cloud and on-premises environments using SIEM and security analytics tools</li><li>Develop and maintain incident response playbooks and procedures</li><li>Experience with threat intelligence platforms and threat hunting</li><li>Experience with security orchestration, automation and response (SOAR) platforms</li><li>Understanding of data protection and encryption technologies</li><li>Experience in regulated industries (financial services, healthcare, energy)</li><li>Background in offensive security or penetration testing</li><li>Design, implement, and maintain security controls across cloud platforms (AWS, Azure, GCP)</li><li>Conduct cloud security assessments and architecture reviews</li><li>Ensure compliance with cloud security best practices and frameworks (CIS Benchmarks, CSA CCM, NIST)</li><li>Manage cloud-native security tools including CSPM, CWPP, and cloud WAF solutions</li><li>Implement and maintain identity and access management (IAM) policies and controls</li><li>Lead cyber security programs and coordinate remediation efforts</li><li>Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps)</li><li>Stay current with emerging threats, vulnerabilities, and security technologies</li><li>Contribute to security awareness training and documentation</li><li>Facilitate Supplier Management and security input into bids</li><li>Support compliance initiatives (SOC 2, ISO 27001, PCI-DSS, GDPR, etc.)</li><li>Develop and enforce security policies, standards, and procedures</li><li>Conduct security audits and risk assessments</li><li>Maintain security documentation and metrics reporting</li></ul>Required Qualifications<ul><li>5+ years of experience in cybersecurity roles</li><li>3+ years of hands-on experience with cloud security (AWS, Azure, or GCP)</li><li>Proven experience leading security incidents and coordinating response efforts</li><li>Experience with security frameworks such as NIST CSF, MITRE ATT&amp;CK, or Zero Trust architecture</li></ul> Technical Skills<ul><li>Strong expertise in cloud security services and tools (AWS &amp; Azure)</li><li>Experience working with SIEM platforms (Splunk, Sentinel)</li><li>Understanding of network security, firewalls, IDS/IPS, and VPN technologies</li><li>Familiarity with security testing tools (vulnerability scanners, SAST/DAST, penetration testing tools)</li><li>Experience with endpoint detection and response (EDR) solutions</li></ul> Certifications (one or more preferred)</div><div><ul><li>CISSP (Certified Information Systems Security Professional)</li><li>CCSP (Certified Cloud Security Professional)</li><li>AWS Certified Security - Specialty</li><li>Microsoft Certified: Azure Security Engineer Associate</li></ul> Soft Skills<ul><li>Strong analytical and problem-solving abilities</li><li>Excellent written and verbal communication skills</li><li>Ability to explain complex security concepts to technical and non-technical audiences</li><li>Leadership capabilities and experience mentoring team members</li><li>Strong attention to detail and ability to work under pressure</li><li>Collaborative mindset with cross-functional teams</li><li>Business Partnering experience</li></ul> Education  Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience) Working Conditions  Some flexibility for remote work – 2 days minimum in office (Edinburgh preferred)#LI-DB1</div>Equal OpportunitiesWe are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at <a href="http://www.eeoc.gov/">www.eeoc.gov</a> If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process.

In the middle of the energy transition, businesses and governments are faced with significant challenges. But the pace and scale of change mean every decision is made&nbsp;under mounting pressure.&nbsp; Now, more than ever, companies need reliable data, analytics and actionable insight. Wood Mackenzie is the&nbsp;leading global provider of data and analytics solutions&nbsp;for the renewables, energy and natural resources sectors . Wood Mackenzie&rsquo;s services&nbsp;include data, analytics, insight, events and consultancy.&nbsp; A trusted partner for over 50 years, Wood Mackenzie&rsquo;s team has over 2,300 experts across more than 30 global&nbsp;locations who cover the entire supply chain. Wood Mackenzie&rsquo;s data and analytics empowers energy producers, governments and financial institutions to be confident in&nbsp;their investment decisions in the face of rapidly evolving markets. Part of the Veritas group.

Cyber Security Specialist (AppSec)

Wood Mackenzie is the global leader in analytics, insights and proprietary data across the entire energy and natural resources landscape. For over 50 years our work has guided the decisions of the world’s most influential energy producers, utilities companies, financial institutions and governments. Now, with the world’s energy system more complex and interconnected than ever before, sector-specific views are no longer enough. That’s why we’ve redefined what’s possible with Intelligence Connected. By fusing our unparalleled proprietary data with the sharpest analytical minds, all supercharged by Synoptic AI, we deliver a clear, interconnected view of the entire value chain. Our trusted team of 2,700 experts across 30 countries breaks siloes and connects industries, markets and regions across the globe. This empowers our customers to identify risk sooner, spot opportunities faster and recalibrate strategy with confidence – whether planning days, weeks, months or decades ahead. Wood Mackenzie Intelligence Connected <a href="https://www.woodmac.com/">WoodMac.com</a><a href="https://www.youtube.com/watch?v=Y4AVwhQJj_w&amp;t=10s">Wood Mackenzie Brand Video</a>Wood Mackenzie Values<ul><li>Inclusive – we succeed together</li><li>Trusting – we choose to trust each other</li><li>Customer committed – we put customers at the heart of our decisions</li><li>Future Focused – we accelerate change</li><li>Curious – we turn knowledge into action</li></ul><div>Position Overview We are seeking an experienced Cyber Security Specialist to join our security team. The ideal candidate will have a minimum of 5years cyber security experience and 3+ years in application security (DevSecOps). This is a senior hands-on role requiring an individual who has previously established or significantly matured AppSec functions within modern software engineering environments.This role will form a collaboration with product engineering teams in Edinburgh and must be capable of driving cultural change, promoting secure coding practices, and ensuring vulnerabilities (in code and architecture) are identified and remediated effectively Key Responsibilities<ul><li>Design and implement the Application Security Strategy, tooling roadmap, governance model, and SDLC integrations from ground up.</li><li>Evaluate new AppSec tools (e.g SAST/DAST/SCA/Runtime protections).</li><li>General cyber security expertise to assist Head of Cybersecurity implement strategic roadmap and strategy.</li></ul> Additional Responsibilities<ul><li>Monitor and analyze security events across cloud and on-premises environments using SIEM and security analytics tools</li><li>Develop and maintain incident response playbooks and procedures</li><li>Experience with threat intelligence platforms and threat hunting</li><li>Experience with security orchestration, automation and response (SOAR) platforms</li><li>Understanding of data protection and encryption technologies</li><li>Experience in regulated industries (financial services, healthcare, energy)</li><li>Background in offensive security or penetration testing</li><li>Design, implement, and maintain security controls across cloud platforms (AWS, Azure, GCP)</li><li>Conduct cloud security assessments and architecture reviews</li><li>Ensure compliance with cloud security best practices and frameworks (CIS Benchmarks, CSA CCM, NIST)</li><li>Manage cloud-native security tools including CSPM, CWPP, and cloud WAF solutions</li><li>Implement and maintain identity and access management (IAM) policies and controls</li><li>Lead cyber security programs and coordinate remediation efforts</li><li>Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps)</li><li>Stay current with emerging threats, vulnerabilities, and security technologies</li><li>Contribute to security awareness training and documentation</li><li>Facilitate Supplier Management and security input into bids</li><li>Support compliance initiatives (SOC 2, ISO 27001, PCI-DSS, GDPR, etc.)</li><li>Develop and enforce security policies, standards, and procedures</li><li>Conduct security audits and risk assessments</li><li>Maintain security documentation and metrics reporting</li></ul>Required Qualifications<ul><li>5+ years of experience in cybersecurity roles</li><li>3+ years of hands-on experience with cloud security (AWS, Azure, or GCP)</li><li>Proven experience leading security incidents and coordinating response efforts</li><li>Experience with security frameworks such as NIST CSF, MITRE ATT&amp;CK, or Zero Trust architecture</li></ul> Technical Skills<ul><li>Strong expertise in cloud security services and tools (AWS &amp; Azure)</li><li>Experience working with SIEM platforms (Splunk, Sentinel)</li><li>Understanding of network security, firewalls, IDS/IPS, and VPN technologies</li><li>Familiarity with security testing tools (vulnerability scanners, SAST/DAST, penetration testing tools)</li><li>Experience with endpoint detection and response (EDR) solutions</li></ul> Certifications (one or more preferred)</div><div><ul><li>CISSP (Certified Information Systems Security Professional)</li><li>CCSP (Certified Cloud Security Professional)</li><li>AWS Certified Security - Specialty</li><li>Microsoft Certified: Azure Security Engineer Associate</li></ul> Soft Skills<ul><li>Strong analytical and problem-solving abilities</li><li>Excellent written and verbal communication skills</li><li>Ability to explain complex security concepts to technical and non-technical audiences</li><li>Leadership capabilities and experience mentoring team members</li><li>Strong attention to detail and ability to work under pressure</li><li>Collaborative mindset with cross-functional teams</li><li>Business Partnering experience</li></ul> Education  Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience) Working Conditions  Some flexibility for remote work – 2 days minimum in office (Edinburgh preferred)#LI-DB1</div>Equal OpportunitiesWe are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at <a href="http://www.eeoc.gov/">www.eeoc.gov</a> If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process.

Cyber Security Specialist (AppSec)

About the Job

About the Company

Wood Mackenzie

Similar Jobs

Senior Manager, Product and Application Security

Senior Manager, Product and Application Security

Global IT Security Expert - OT

Global IT Security Expert - OT

Global IT Security Expert - IAM

Global IT Security Expert - IAM

Senior Cloud Security Engineer (F/M/D)

Senior Cloud Security Engineer (F/M/D)

Security Engineer

Security Engineer

Cloud Engineer

Cloud Engineer

IT Service Professional - Information Security (F/M/D)

IT Service Professional - Information Security (F/M/D)

Cyber Security Analyst

Cyber Security Analyst

Staff AWS Cloud Security Engineer

Staff AWS Cloud Security Engineer

Cyber Security Specialist

Cyber Security Specialist