Permanent Threat Modelling Jobs in England

1 to 25 of 63 Permanent Threat Modelling Jobs in England

Head of Application and Product Security

London, United Kingdom
Bumble
technologies in the security domain.What you'll doResponsible for the continuous development of an advanced secure SDLC framework, incorporating automation, machine learning, and contextual threat analysis. Ensure that any software developed and/or deployed meets the high standards expected to ensure the security and privacy of our customers.Enhance … Bumble Inc.’s mobile and web application defences using the latest techniques in software composition, static and dynamic testing and threat modelling for systems written in Kotlin, Swift, PHP, Go and C.Conduct sophisticated security assessments and penetration testing to preemptively identify and mitigate potential threats.Lead and expand the more »
Salary: £ 70 K
Posted:

Info Security Exposure Management Specialist

Bromley, Kent, United Kingdom
Bank of America
SQL Injection, Cross-Site Scripting, Cross-Site Request Forgery, Remote Code Execution, Authentication/Authorization, Privilege Escalation, Business Logic Bypass, etc.)Experience in conducting Threat ModelingKnowledge of network and Web related protocols/technologiesExperience with web application vulnerability scanning tools (e.g. , NetSparker, Burp Suite pro etc.)Experience with vulnerability more »
Salary: £ 70 K
Posted:

AWS Security Architect

London Area, United Kingdom
Hamilton Barnes 🌳
environments Set up Network Access Control Lists (NACLs) to control inbound and outbound traffic and apply subnetting principles for secure network segmentation Produce Detailed Threat models after reviewing technical design documents Skills: Should have proven experience as a Security Architect working in a large, complex organization. Ideally, this experience more »
Posted:

Security Architect

London Area, United Kingdom
JNC Recruitment Limited
ideal candidate for the Security Architect will have the following skills and experience: Extensive experience designing security solutions, primarily for on-prem Experience with Threat Modelling frameworks Thorough knowledge of Information Security controls Excellent communication skills, with the ability to translate complex engineering terms into language that business more »
Posted:

Information Security Consultant

City Of London, England, United Kingdom
Barclay Simpson
required projects Manage security risk for the whole project life cycle Perform security activities, including but not limited to, security design reviews, risk assessments, threat modelling, and vulnerability management and risk mitigation on internally & externally developed software Embedding security within DevOps (eg CI/CD pipelines), developing security more »
Posted:

Senior Threat Analyst

Greater Bristol Area, United Kingdom
Iceberg Cyber Security
Threat Analyst with Security Clearance needed !!! The threat of Cyber attack is rising daily, companies specifically in the Defense industry dealing with sensitive information are in a constant battle to stay ahead of the oncoming threats. In this role you will be building and implementing processes and procedures … for continuous and effective threat modelling, you will have to keep up to date with the global threat landscape, identify security gaps within this company and build attack simulations to support Purple Team engagements by outlining potential attack patterns. To be successful in this role you will … need an in-depth understanding of the external security environment and how the organisation reacts to the security threat. Good knowledge of the cyber threat landscape, global current affairs and geopolitics. The ideal candidate has served in the Armed Forces. If you or someone you know fits the description more »
Posted:

Lead Product Security Engineer

Bristol, England, United Kingdom
Hybrid / WFH Options
Barclay Simpson
be aligned to a product area and will be responsible for embedding security. This is a varied role which will see you carrying out threat modelling, reviewing solution designs and challenging everything to find security issues. The role will require you to regularly engage and challenge key senior more »
Posted:

Principal Security Consultant

Greater Bristol Area, United Kingdom
Logiq Consulting
inherently secure. - Ideally you will have worked across the system lifecycle, undertaking the security risk management activities required to support each phase, from initial threat and risks assessments and specification of security requirements, through to overseeing implementation and testing of socio-technical security architectures. You will also have experience … assurance workstreams for projects delivering secure systems and services within a government context. Undertaking and producing socio-technical security risk assessments, ideally including technical threat modelling (e.g. using STRIDE). Development and implementation of risk management strategies and plans. Specification, development and technical assurance of security policies and … Knowledge and understanding of core cyber security risk management areas, including but not limited to: Security governance and risk management approaches, tools, and techniques. Threat modelling (e.g. STRIDE) and socio-technical risk assessment (e.g. NIST 800-30) methodologies. Attack classification and characterisation frameworks (e.g. MITRE ATT&CK) Computer more »
Posted:

Security Architect (SAP)

London Area, United Kingdom
Stack Digital
effective authorization concepts for SAP systems. Administer SAP roles and analyze user access to ensure compliance with segregation of duties (SoD) policies. Produce detailed threat models after reviewing technical design documents. Review and input security into solution architecture and high-level designs. Advise and consult with development teams on more »
Posted:

DevSecOps Engineer

London Area, United Kingdom
Locke and McCloud
the CI/CD pipeline and automate security testing and compliance checks. Provide guidance and support to development teams on secure coding practices and threat modelling techniques. Collaborate with cloud architects to design and implement secure cloud environments. To be considered for this role, you should have: Must more »
Posted:

Software Security Engineer, Software Security Specialist, COR5774

London, United Kingdom
Hybrid / WFH Options
Corriculo Ltd
software systems by reviewing designs, auditing code, and performing penetration tests. The role involves developing and implementing vulnerability mitigation strategies, conducting risk assessments and threat modelling, and managing vulnerabilities using industry standards. You will act as a security expert, proactively identifying and addressing potential threats, and integrating robust more »
Employment Type: Permanent, Work From Home
Salary: £75,000
Posted:

Application Security Leader

Greater London, England, United Kingdom
RX Global
overseeing application security testing, prioritising the resolution of security vulnerabilities, and increasing automation Show experience identifying potential threats and attacks to applications systems through threat modelling (PASTA and STRIDE) Demonstrate experience with threat modelling theories and application architecture reviews Have experience of monitoring security systems for more »
Posted:

Information Security Technical Analyst

East Sussex, England, United Kingdom
Legal & General
and solution designs , to help advise project managers and developers across the business. Maintain awareness of current and emerging security risks and the changing threat landscape and recommend mitigating solutions to project managers and developers to help ensure security enhancement and controls are pro-actively applied across the LGRI … preferred) and/or AWS security technologies is essential. Expertise and practical experience of Information Security frameworks including NIST, ISO27001/17 and STRIDE Threat Modelling Framework. Understanding of general security practices such as encryption, IAM, PAM, penetration testing, container security, security information and event management etc. and more »
Posted:

Technical Security Architect

England, United Kingdom
Hybrid / WFH Options
Nationwide Building Society
to product owners and delivery teams working on a viariety solutions for both colleagues and members. This will include developing solution overviews and designs, threat models, and architectural patterns. This opportunity is within the Security Architecture team, and part of Security and Resilience. The team have a challenging mandate … understanding their problems helping find secure solutions Assuring and advising on secure systems design Creating patterns and other architecture artefacts Good knowledge of cryptography Threat Modelling using common industry techniques (such as STRIDE, Attack Trees, PnG), and working with a recognised risk framework to evaluate severity and priority. … level you will have: A good general appreciation of enterprise-wide security threats, controls and principles across the above areas Experience or aptitude for threat evaluation and documenting enterprise-level architectural solutions that mitigate, or offer a risk aligned roadmap to mitigation. Producing artefacts such as Security designs, patterns more »
Posted:

Info Security Exposure Management Specialist

Camberley, Surrey, United Kingdom
Bank of America
SQL Injection, Cross-Site Scripting, Cross-Site Request Forgery, Remote Code Execution, Authentication/Authorization, Privilege Escalation, Business Logic Bypass, etc.)Experience in conducting Threat ModelingKnowledge of network and Web related protocols/technologiesExperience with web application vulnerability scanning tools (e.g. , NetSparker, Burp Suite pro etc.)Experience with vulnerability more »
Salary: £ 70 K
Posted:

Application Security - SSDLC

London Area, United Kingdom
Stott and May
and champion security within your current role, you're very likely to be successful. You will be training developers on writing secure code, perform threat modelling and security testing of applications, run SAST, DAST, SCA and secret scanning tools, manage the bug bounty program and lead incident response more »
Posted:

Security Engineer

Reading, England, United Kingdom
Oracle
Responsible for the planning, design and build of SIEM detections; automation and SOC workflow enrichments. Strong understanding of current threat landscape, data ingest and telemetry requirements. Experience with SIEM platforms such as Splunk, Azure Sentinel, Qradar, Exabeam, etc. Python scripting MITRE Caldera and ATT&CK Atomic Red Team SOAR … do attitude Bias for action and execution of tasks Willingness to grow skillset Career Level - IC4 Responsible for authoring, tuning and deploying SIEM detections, Threat Hunting and automation via pyton scripting and SOAR tools. May participate in an incident management team, responding to security events in line with Oracle … development of secure architectures and recommends security controls to mitigate those risks. Evaluations of internal security architecture may include design assessment, risk assessment, and threat modeling. Brings advanced-level skills to research, evaluate, track, and manage information security threats and vulnerabilities in situations where in-depth analysis of ambiguous more »
Posted:

Senior DevSecOps Engineer

London Area, United Kingdom
Locke and McCloud
risks. Act as a subject matter expert on security-related matters, collaborating with stakeholders to address security concerns and implement effective solutions. Participate in threat hunting and threat modelling activities. To be considered for this role, you should have: Must have a strong background in a security more »
Posted:

Senior Threat Modeller (Remote)

Frimley, England, United Kingdom
Hybrid / WFH Options
CBS Butler
Senior Threat Modeller Remote-based with occasional travel to Preston or Frimley £45,000 - £55,000 + 2.5% bonus + excellent Benefits What you'll be doing - Senior Threat Modeller Building and implementing processes and procedures for continuous and effective threat modelling capability Producing reports detailing … digest Contributing to plans and delivering activities in support of organisational and security development needs in accordance with regulatory requirements and changes in the threat landscape Maintaining up to date knowledge of cyber security threats, analyst toolsets and relevant activity group tactics, techniques, and procedures (TTPs) Identifies security gaps … and builds attack simulations to support Purple Team engagements by illustrating potential attack patterns to prioritise future remediation efforts Your skills and experiences - Senior Threat Modeller An in-depth understanding of the external security environment and how the organisation reacts to security threats Good knowledge of cyber threat more »
Posted:

Application Security and DevSecOps Engineer, AXA DCP

London, England, United Kingdom
AXA
development and continuous improvement of security processes, policies, standards and other governing documents and ensure compliance. Participate in and support delivery of security audits, threat modelling and assessments and remediation of findings. Perform in-depth analysis of application code and infrastructure, architecture, and configurations to ensure compliance with more »
Posted:

Lead Product Security Engineer

London Area, United Kingdom
Hybrid / WFH Options
InfoSec People Ltd
the Governance, Risk, and Compliance (GRC) team to inform on risk, compliance, and assurance matters related to the portfolio of change initiatives. Ensure that Threat Modeling is implemented for identified programs, projects, and engineering initiatives within the portfolio. Work closely with the Security Culture team to ensure alignment and more »
Posted:

Product Manager

Stafford, England, United Kingdom
GE Vernova
standards, cyber asset protection regulations and standards, and communication protocols like IEC61850, DNP, IEC(phone number removed)-104 – affecting the utilities industry. Experience with threat modeling techniques and tools. An excellent customer service mindset. Experience with operating systems like Microsoft Windows, Linux, and VxWorks. Good writing and oral communication more »
Posted:

Security Engineer

Chichester, England, United Kingdom
Natures Way Foods Careers
IT Security Engineer role. preferably manufacturing but not essential. Key Responsibilities Responsible for educating the workforce on information security through training and building awareness. Threat modelling, mitigation, validation, including software and hardware penetration testing. Work with all functions of the IT department to design security into the system … and drive security reviews. Develop tools to assist in modelling, analysis, detection, and prevention of security threats. Secure the system while ensuring ease of use for the user and network operations. Stay current on industry developments affecting security and privacy policy. Implement security measures, plans and polices to resolve more »
Posted:

Lead Cloud Security Consultant

Bristol, Gloucestershire, United Kingdom
Barclay Simpson Corporate Governance Recruitment
be aligned to a product area and will be responsible for embedding security. This is a varied role which will see you carrying out threat modelling, reviewing solution designs and challenging everything to find security issues. The role will require you to regularly engage and challenge key senior more »
Salary: £ 80 K
Posted:

Security Architect - London - £100-130k

London, United Kingdom
JNC Recruitment Ltd
ideal candidate for the Security Architect will have the following skills and experience: Extensive experience designing security solutions, primarily for on-prem Experience with Threat Modelling frameworks Thorough knowledge of Information Security controls Excellent communication skills, with the ability to translate complex engineering terms into language that business more »
Employment Type: Permanent
Salary: GBP 130,000 Annual
Posted:
Threat Modelling
England
10th Percentile
£37,500
25th Percentile
£52,500
Median
£70,000
75th Percentile
£81,250
90th Percentile
£101,250