1 to 25 of 34 Threat Modelling Jobs in Berkshire

teams, and strengthening enterprise security posture—particularly across Microsoft 365, Azure, data platforms, and AI-enabled solutions. You will play a key role in threat modelling, risk assessments, guardrail design & implementation, and delivering practical security guidance for engineering, data, and application/product teams. RATIONALE/DELIVERABLES: Contribute … enhanced productivity systems Support the roll-out of the new AI information security control framework Support the Data governance team KEY RESPONSIBILITIES Perform threat modelling (STRIDE), guardrail definition, and security posture assessments across applications, data platforms, APIs, cloud services, and SaaS ecosystems. Identify security control gaps, especially around ...

Secure Development Lifecycle (SDLC) Partner with engineering teams to embed security in the SDLC and DevSecOps practices. Advise and guide on secure coding practices, threat modeling, and architectural reviews. Instrument automated tooling for CI/CD pipelines to improve visibility of security signals and enforcement. Customer & External Engagement Represent ...

Secure Development Lifecycle (SDLC) Partner with engineering teams to embed security in the SDLC and DevSecOps practices. Advise and guide on secure coding practices, threat modeling, and architectural reviews. Instrument automated tooling for CI/CD pipelines to improve visibility of security signals and enforcement. Customer & External Engagement Represent ...

What You'll Do Core Responsibilities: Conduct advanced penetration testing across network infrastructure, web applications, and mobile platforms for enterprise clients Perform vulnerability assessments, threat modelling, and risk analysis across diverse technical environments Execute social engineering assessments and physical security testing Produce detailed scoping documents and executive-level … growth-focused security consultancy—not a commodity testing mill ✓ Continuous Learning: Access to research funding, certification sponsorship, conference attendance, and exposure to cutting-edge threat landscapes The Application Process This is a carefully selected search—we're looking for genuine penetration testing professionals with the technical depth to advise ...

Lead installation, configuration, testing and handover of CyberArk secrets-management solutions into Run & Maintain teams. Provide architectural leadership on privileged access risk reduction through threat modelling, control selection and adherence to security policies. Act as a trusted advisor to senior stakeholders (CISO, security architects, platform owners, programme leadership ...

Certify that platforms are fully secured and operational before onboarding activities. Implement controls for identity and access management, encryption, and monitoring. Risk Management Conduct threat modeling and risk assessments for new tenants and onboarding processes. Provide mitigation strategies for identified vulnerabilities. Documentation & Reporting Maintain detailed security architecture documentation ...

Certify that platforms are fully secured and operational before onboarding activities. Implement controls for identity and access management, encryption, and monitoring. Risk Management Conduct threat modeling and risk assessments for new tenants and onboarding processes. Provide mitigation strategies for identified vulnerabilities. Documentation & Reporting Maintain detailed security architecture documentation ...

know your way around: HMG SPF, ISO27001, NCSC guidance, or similar frameworks. Security architecture models like TOGAF or SABSA. Technical risk assessments, threat modelling, or assurance work. Tools like SIEMs, identity management systems, or endpoint protection platforms. If you've worked on systems that can't afford ...

Cyber Threat Analyst is responsible for identifying, analysing, and reporting cyber threats that could impact the organisation's IT and OT environments. The role supports the protection of critical national infrastructure by delivering timely threat intelligence, actionable insights, and risk-based recommendations to security and operational teams. … Responsibilities Monitor, analyse, and assess cyber threats, threat actors, and campaigns relevant to the utilities sector Produce actionable threat intelligence to support SOC, incident response, and risk teams Track emerging threats affecting IT, OT, SCADA, and critical infrastructure Correlate intelligence from internal telemetry, SIEM, and external intelligence feeds ...

designing, implementing, and maintaining secure architectures, with a deep understanding of industry-standard frameworks such as ISO 27001, NIST, and CIS Controls. Knowledge of threat modelling, risk assessments, and mitigation strategies tailored to various technical and business environments. Stay updated on emerging security threats, technologies, and regulatory requirements ...

align their cyber strategy with regulatory frameworks and industry best practices. Key Responsibilities: Conduct gap analysis and rationalisation of controls against regulatory frameworks. Perform threat modelling, risk identification, assessment, and mitigation planning. Analyse, protect, and manage data outputs, including Data Loss Prevention (DLP) and Rights Management. Conduct ...

connectors, and Copilot Studio bots Establish reference architectures and reusable patterns for role-based security, data design, integration, eventing, and observability Lead architecture reviews, threat modeling, and solution design approvals; produce HLD/LLD, sequence diagrams, deployment topologies, and data models Integration & Data Architect secure integrations with Azure services ...

performance testing. • Architecture & Patterns: Proven application of SOLID, GoF, Hexagonal/Clean Architecture, CQRS, Circuit Breaker, Retry/Backoff, and idempotency. • Domain Driven Design: Modelling with bounded contexts, aggregates, entities/value objects, domain events, anti-corruption layers, and clear service boundaries. • Event Driven Architecture: Kafka experience including schema … testing, and telemetry driven decisions to improve customer outcomes and delivery metrics. • Security & Compliance: Secure coding, authn/z, secrets management, data protection, and threat modelling aligned to org standards. • Collaboration & Documentation: Clear technical communication, ADRs/diagrams, and effective cross team partnership (backend–frontend–platform). Desirable ...

business with responsibility for building security into key product areas. This is a varied role that will include varied responsibilities, such as threat modelling, reviewing solution designs, code scanning and offering technical challenge to identify security issues and solve security problems. The role will see you aligned ...

business with responsibility for building security into key product areas. This is a varied role that will include varied responsibilities, such as threat modelling, reviewing solution designs, code scanning and offering technical challenge to identify security issues and solve security problems. The role will see you aligned ...

teams with architectural direction, challenge, and assurance Assessing options and trade-offs across cost, risk, resilience, and operability Embedding cyber security by design, including threat modelling and risk reduction Defining technical standards and guardrails aligned to enterprise and regulatory requirements What we're looking for Proven experience ...

Lambda, API Gateway, CDK) A proven background in building RESTful APIs that interact with IDPs Security-first mindset with experience in secure coding, threat modelling, and protecting PII Ability to mentor, collaborate, and lead with hands-on problem-solving £85k-£90k + bonus + benefits. 95% remote & London ...

Lambda, API Gateway, CDK) A proven background in building RESTful APIs that interact with IDPs Security-first mindset with experience in secure coding, threat modelling, and protecting PII Ability to mentor, collaborate, and lead with hands-on problem-solving £85k-£90k + bonus + benefits. 95% remote & London ...

infrastructure, systems, and services. Key Responsibilities Provide security oversight and expert guidance on cryptocurrency-related projects and initiatives. Conduct security assessments and perform threat modelling on cryptocurrency assets and products. Collaborate with cross-functional teams to design and implement effective risk-mitigation controls. Continuously monitor control performance, investigate ...

security testing including SAST, DAST, and penetration testing. Understanding of authentication and authorization frameworks (OAuth, JWT, SAML) and familiarity with secure coding practices and threat modelling Experience in test automation tools, frameworks, and practices. The successful candidate will have experience working in a fast-paced and multi-vendor ...

security testing including SAST, DAST, and penetration testing. Understanding of authentication and authorization frameworks (OAuth, JWT, SAML) and familiarity with secure coding practices and threat modelling Desirable Experience in connected vehicle ecosystems, IoT, or automotive software testing. Knowledge of security, performance, and compliance testing. Experience working ...

security testing including SAST, DAST, and penetration testing. Understanding of authentication and authorization frameworks (OAuth, JWT, SAML) and familiarity with secure coding practices and threat modelling Desirable Experience in connected vehicle ecosystems, IoT, or automotive software testing. Knowledge of security, performance, and compliance testing. Experience working ...

connectors, and Copilot Studio bots. * Establish reference architectures and reusable patterns for role-based security, data design, integration, eventing, and observability. * Lead architecture reviews, threat modelling, and solution design approvals; produce HLD/LLD, sequence diagrams, deployment topologies, and data models. Integration & Data * Architect secure integrations with Azure ...

experience with agents: LangChain, AutoGPT, CrewAI, or custom agent frameworks • Regulated industry background: Financial services, healthcare, or other domains with compliance requirements • Security/threat modelling expertise: Understanding of adversarial AI, prompt injection, or system security • Real-time systems experience: Trading systems, fraud detection, or other low-latency ...

high-availability systems. Partner with product, SRE, and network engineering to deliver roadmap features from concept to GA with security-by-design. Contribute to threat modeling, architecture reviews, and compliance/audit readiness for Tier 0 services. ...