10 of 10 Threat Modelling Jobs in the City of London

into complex IT and digital initiatives Advise clients on cyber risk, governance and regulatory compliance frameworks including: ISO 27001 NIST GDPR PCI-DSS Conduct threat modelling and identify security vulnerabilities within solution designs Recommend pragmatic risk mitigation strategies to technical and non-technical stakeholders Support the implementation … IDAM Privileged Access Management (PAM) Single Sign-On (SSO) Network Security Encryption technologies Understanding of infrastructure, architecture methodologies and secure design principles Experience with threat modelling and reference architecture development Excellent stakeholder engagement and communication skills Ability to learn quickly and adapt within fast-paced environments Desirable Experience ...

guardrails into CI/CD pipelines in partnership with engineering and platform teams. Defining and maintaining secure development standards, secure coding guidelines, and threat-modelling practices. Providing practical, risk-based security guidance to engineering, product, and architecture teams. Working with our Vulnerability Lead to drive identification, triage … into CI/CD pipelines (eg, GitHub, AWS DevOps). Strong understanding of Agile, DevOps, and cloud-native architectures. Practical experience with secure coding, threat modelling, and vulnerability management. Strong problem-solving skills and the ability to prioritise risk in line with business needs. ...

software, infrastructure, and platform engineering teams to improve security across systems and workflows Contribute across a broad range of security initiatives, including detection, hardening, threat analysis, infrastructure protection, and secure engineering practices Investigate vulnerabilities, suspicious activity, and emerging threats, helping drive remediation and operational improvements Build scalable solutions that … improve visibility, detection quality, and security operations efficiency Support security architecture and threat modelling discussions, helping teams make pragmatic, risk-aware decisions Evaluate new attack techniques, tooling, and security research, translating relevant findings into actionable engineering improvements Help strengthen security awareness and engineering best practices across the wider ...

business acquisition-focused role responsible for building pipeline, generating revenue, and winning new customers for cybersecurity services including VAPT, Red Teaming, Product Security, Threat Modelling, and Vulnerability Management. The ideal candidate will have experience selling cybersecurity services or technology solutions and be comfortable engaging with enterprise … tenders, and customer due diligence requests Promote and sell services including: VAPT (Web, Mobile, API, Cloud, Infrastructure) Red Teaming/Adversary Simulation Vulnerability Management Threat Modelling Product Security/Secure SDLC Advisory Develop repeat business and cross-sell opportunities within customer accounts Maintain accurate CRM updates, pipeline forecasts ...

Threat & Adversarial AI Expert 6 Months Contract + Extension London Based 2 days in the office £500 to £600 a day Inside IR35 A pioneering financial institution is seeking an experienced Threat & Adversarial AI Expert to join their cybersecurity team. You will act as the primary architect … safety for the firm's generative AI ecosystem, ensuring agentic capabilities remain resilient against an evolving global threat landscape. As a Threat AI Expert, you will lead the organisation's Generative AI security strategy. Key responsibilities include: Advanced Threat Modelling: Leading structured sessions using STRIDE ...

remediation tracking, and clear reporting aligned to regulatory expectations. Security Architecture & Change Enablement • Act as a security architect for projects and change initiatives. • Perform threat modelling where appropriate and define proportionate, practical controls across endpoints, cloud, identity, and data. Collaboration & Continuous Improvement • Partner with IT and Engineering teams ...

deployment and tuning (Defender for Endpoint, CrowdStrike), Intune/Jamf device management, privileged access workstations, JIT/JEA models - API and application security: threat modelling (STRIDE/PASTA), OAuth 2.0/OIDC implementation review, secrets management (Key Vault, HashiCorp Vault), and secure SDLC integration - PKI, certificate lifecycle automation … automation and IaC: Python, PowerShell, Terraform, Bicep, or Sentinel analytics rules - you codify controls, you do not document them - MITRE ATT&CK coverage mapping; threat hunting, adversary emulation, and proactive gap analysis against realistic TTPs - Cloud infrastructure - Azure preferred, AWS considered; IAM, managed services, automated and auditable deployment pipelines ...

Advising on secure design, risk, and compliance across complex IT estates Applying frameworks like ISO 27001, NIST, GDPR, PCI-DSS in real environments Running threat modelling and identifying architectural vulnerabilities Working closely with architects, engineers, and stakeholders to influence secure solutions Translating technical risk into clear business impact ...

logging, encryption, access control and network design Own security controls around package repositories, container images, third-party dependencies and base image standards Run threat modelling for new platform services, Kubernetes components and pipeline changes, converting findings into practical remediation work Partner with Security Operations to build detections ...

vulnerabilities, ARKO provides real-time security insights directly within the IDE. This solves the limitations of traditional static security tools by offering contextual threat models, prioritisation of risks, and actionable remediation guidance. Based in London, DevSecAI bridges the gap between development, security, and compliance in one seamless workflow. ...