5 of 5 Threat Modelling Jobs in the East of England

software and product development lifecycle. Key Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation activities. Advise on secure design, cloud security, mobile security, authentication, encryption … Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience supporting audits, regulatory reviews or compliance ...

What You'll Be Doing Owning the software security strategy and roadmap across the product line Defining security architecture, standards and best practices Embedding threat modelling and security requirements into product development Working closely with software and product teams to drive secure-by-design principles Leading architecture reviews … maturity across the organisation What We're Looking For You'll likely bring experience in: Security Architecture Product Security Secure Software Development Lifecycle (SDLC) Threat Modelling Vulnerability Management Security Testing & Assurance Secure CI/CD Pipelines Risk Assessment & Security Governance Software Architecture and Engineering Leadership Desirable Experience Embedded ...

Establish approaches for triaging findings, managing false positives, tracking remediation, and measuring security improvement. Promote security-by-design and secure-by-default principles through threat modelling, design reviews, architectural guidance, and secure coding practices. Improve the identification, assessment, documentation, and remediation of vulnerabilities throughout the software development lifecycle. … drive improvements to software quality, reliability, and security. The following skills and attributes are a plus: Experience applying secure software development lifecycle practices, including threat modelling, secure design, vulnerability management, and release governance. Experience with vulnerability disclosure, severity assessment, remediation planning, and security updates. Experience leading technical initiatives ...

pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier Engagement Support V&V, penetration testing, and remediation, and manage security alignment with suppliers. Compliance & Documentation Own the security compliance dossier … hardware engineering with at least 5 years focused on cybersecurity for embedded systems, IoT, or cloud platforms. Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products. Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security ...

roles. Proven experience delivering security assurance within Operational Technology (OT) environments. Strong understanding and practical application of the IEC 62443 standards framework. Experience undertaking threat analysis, risk assessments, and security control definition. Knowledge of security architecture principles, including network segmentation, zones, and conduits. Experience defining and managing security requirements … Security Management Plans, ensuring delivery against agreed timescales, budgets, and quality expectations. Develop secure architectures using zoning, segmentation, and defence-in-depth principles. Conduct threat modelling, security risk assessments, and define effective mitigation strategies. Assess third-party products and components against security requirements and standards. Review engineering ...