1 to 25 of 427 Threat Modelling Jobs in England

Umbrella) | Inside IR35 Remote with occasional client site visits Active SC Clearance Required Contract until March 2027 Security Operations Analyst | Cyber Threat Intelligence | Threat Modelling We are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing … environments. This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat ...

tooling behind themBe the person in the room when something real happens, and the person writing the honest post-mortem afterwardsThreat intelligence and threat modellingStand up a threat intelligence capability — somewhere past incidents, near-misses, industry reports, and internal telemetry get captured, tagged, and made usefulBuild this into … threat intel data warehouse that actually informs decisions: future threat modelling, control design, roadmap prioritisation, and tabletop scenarios. Not a dashboard nobody readsRun threat modelling as a routine practice, not a one-off — including automated threat modelling using AI against designs, code ...

misconfiguration management so that findings are actionable, low-noise and owned by the right teams. Day to day, you’ll run practical threat-modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. We’re looking … misconfiguration & vulnerability management: experience identifying and reducing infrastructure-as-code and AWS vulnerabilities & misconfigurations at scale through pragmatic guardrails, tooling and clear remediation paths. Threat modelling: confidence running lightweight, practical threat-modelling sessions that lead to useful engineering decisions and risk reduction. CI/ ...

Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Security Operations Analyst | Cyber Threat Intelligence | Threat ModellingWe are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing … environments. This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat ...

management and AWS misconfiguration management so that findings are actionable, low-noise and owned by the right teams.Day to day, you’ll run practical threat-modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. … misconfiguration & vulnerability management: experience identifying and reducing infrastructure-as-code and AWS vulnerabilities & misconfigurations at scale through pragmatic guardrails, tooling and clear remediation paths.Threat modelling: confidence running lightweight, practical threat-modelling sessions that lead to useful engineering decisions and risk reduction.CI/CD and code security: hands ...

coding guidance so that security findings are clear, actionable and owned by the right teams. You’ll work closely with engineers to support practical threat modelling, triage application vulnerabilities, improve security playbooks and help teams remediate issues in a pragmatic way. You do not need … code security awareness: familiarity with security tooling in development workflows, such as SAST, software composition analysis, secret scanning or repository security controls. Threat modelling awareness: experience participating in, supporting or facilitating lightweight threat-modelling sessions for applications, services or new features. Automation mindset: ability to write ...

Senior Application Security Consultant (SAST/DAST/OWASP )/DevSecOps Security - Banking - London Secure SDLC | SAST | DAST | Threat Modelling | Cloud Security | CI/CD Location: London (Hybrid - 8 days onsite per month) Contract: 12 Months + extension Rate: £500-£550 per day (Umbrella) The Opportunity … across business-critical applications and cloud platforms. Conduct security architecture and secure design reviews. Perform application security risk assessments and define security requirements. Lead Threat Modelling workshops using STRIDE, MITRE ATT&CK or similar methodologies. Embed Secure SDLC principles into engineering teams. Integrate security tooling into CI/ ...

Threat Intelligence Analyst £594 per day (Umbrella) | Inside IR35 Remote with occasional client site visits Active SC Clearance Required Contract until March 2027 Threat Intelligence Analyst | Cyber Security | Enterprise Security We are currently recruiting for an experienced Threat Intelligence Analyst to join a major cybersecurity programme supporting … critical business and technology operations. This is an exciting opportunity for a security professional with strong experience in Threat Intelligence, Enterprise Security Architecture, Platform Security, and Security Architecture Design to help identify, analyse, and mitigate emerging cyber threats across complex environments. Working within a highly skilled cybersecurity team ...

Agile delivery teams by embedding security-by-design principles throughout the software development lifecycle.Define and document security patterns, reference architectures, and reusable security artefacts.Lead threat modelling activities and identify appropriate mitigation strategies.Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making.Advise on identity … operating within client-facing and/or consultancy environments.Demonstrated experience designing and implementing enterprise security architectures.Strong understanding of security architecture methodologies and frameworks.Experience conducting threat modelling and security risk assessments.Experience supporting security assurance activities within regulated environments.Proven ability to balance security requirements with operational and business objectives.Experience designing ...

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

secure coding guidance so that security findings are clear, actionable and owned by the right teams.You’ll work closely with engineers to support practical threat modelling, triage application vulnerabilities, improve security playbooks and help teams remediate issues in a pragmatic way. You do not need … code security awareness: familiarity with security tooling in development workflows, such as SAST, software composition analysis, secret scanning or repository security controls.Threat modelling awareness: experience participating in, supporting or facilitating lightweight threat-modelling sessions for applications, services or new features.Automation mindset: ability to write scripts or small ...

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

Security design and assurance expertise Knowledge of security frameworks and standards Security Operations Analyst Key responsibilities include: Security operations monitoring and analysis Cyber threat intelligence assessment Threat modelling and risk identification Incident investigation and security event analysis Experience required: Security Operations Centre (SOC) or cyber defence experience … Hands-on threat intelligence and analysis capability Threat modelling expertise Strong understanding of cyber security technologies and processes Threat Intelligence Analyst Key responsibilities include: Production of threat intelligence reports and assessments Analysis of Indicators of Compromise (IOCs) and Tactics, Techniques & Procedures (TTPs) Tracking emerging cyber ...

influence architecture, automate security controls, strengthen detection & response, and drive a measurable uplift in our security posture. You’ll define our standards, lead threat modelling, and champion secure‐by‐design practices across an engineering organisation that’s modernising rapidly and ready for your expertise.Key responsibilities:Security architecture & design … Collaborate with engineering and platform teams to design secure solutions, perform threat modelling and review designs for cloud, container and service‐based architectures.Cloud security: Define and enforce secure configurations, network segmentation, identity and access controls for public cloud (primarily AWS).Application & infrastructure hardening: Implement secure coding practices, vulnerability ...

everything they build. Key Responsibilities Define and evolve Product Security strategy across the Secure SDLC. Embed Secure-by-Design principles into software engineering. Lead threat modelling and security architecture reviews. Build scalable security tooling and automation that integrates into developer workflows. Partner with Engineering and Product teams … security controls. Built Secure SDLC frameworks developers genuinely adopted. Strong software engineering background with the technical credibility to influence engineers. Hands-on experience with threat modelling, Secure-by-Design, security architecture and developer enablement. Experience building security tooling, automation or integrating security into CI/CD pipelines. Remained ...

everything they build. Key Responsibilities Define and evolve Product Security strategy across the Secure SDLC. Embed Secure-by-Design principles into software engineering. Lead threat modelling and security architecture reviews. Build scalable security tooling and automation that integrates into developer workflows. Partner with Engineering and Product teams … security controls. Built Secure SDLC frameworks developers genuinely adopted. Strong software engineering background with the technical credibility to influence engineers. Hands-on experience with threat modelling, Secure-by-Design, security architecture and developer enablement. Experience building security tooling, automation or integrating security into CI/CD pipelines. Remained ...

edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security assurance is woven into everyday engineering work - from threat modelling at design time to control testing in production. You'll build trusted relationships with client security teams, senior stakeholders, and government security communities … report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles - making security a shared engineering responsibility rather than ...

roadmap, backlog and design decisions. Work with colleagues across product, development, and networks & infrastructure to embed security across the product lifecycle. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities. Assign pragmatic risk levels and support sensible prioritisation of remediation … software-led environment. Good understanding of how product and development teams operate, including how security considerations are balanced alongside product delivery. Strong experience of threat modelling, secure design review, vulnerability assessment and remediation prioritisation. The judgement to assess exploitability and business impact pragmatically Practical experience applying security across ...

roadmap, backlog and design decisions. Work with colleagues across product, development, and networks & infrastructure to embed security across the product lifecycle. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities. Assign pragmatic risk levels and support sensible prioritisation of remediation … software-led environment. Good understanding of how product and development teams operate, including how security considerations are balanced alongside product delivery. Strong experience of threat modelling, secure design review, vulnerability assessment and remediation prioritisation. The judgement to assess exploitability and business impact pragmatically Practical experience applying security across ...

part of a multi-disciplinary Agile team, you will implement DevSecOps practices throughout the software development lifecycle, embedding security practices (e.g. vulnerability management, threat modelling etc.) and automating security artifact generation (e.g. secret scanning, container security, SAST, DAST etc.). You will provide subject matter expertise in application … delivery teams. Verifying the implementation of security principles, architectural patterns, and requirements. Driving the adoption of cyber security practices (e.g. vulnerability management, threat modelling etc.) within Agile delivery teams. Putting people first & developing others Youll help coach and develop more junior members of the team. Minimum (essential) requirements ...

part of a multi-disciplinary Agile team, you will implement DevSecOps practices throughout the software development lifecycle, embedding security practices (e.g. vulnerability management, threat modelling etc.) and automating security artifact generation (e.g. secret scanning, container security, SAST, DAST etc.). You will provide subject matter expertise in application … actioned by the delivery teams.Verifying the implementation of security principles, architectural patterns, and requirements.Driving the adoption of cyber security practices (e.g. vulnerability management, threat modelling etc.) within Agile delivery teams.Putting people first & developing others – You’ll help coach and develop more junior members of the team.Minimum (essential) requirements ...

Newcastle, offering the opportunity to work with a diverse portfolio of clients, helping them strengthen their security posture and manage risk in an evolving threat landscape.You will play a key role in delivering security advisory services, conducting assessments, and supporting organisations in aligning with industry standards and best practices. … role will also involve supporting clients with modern security challenges, including threat modelling, secure-by-design practices and emerging AI security considerations. Key Responsibilities Provide expert guidance on information security strategies, frameworks and best practices. Conduct security risk assessments, gap analyses and audits. Support clients in achieving ...

reduce persistent risks and proactively shape organization-level security posture.You are responsible for establishing and maintaining the enterprise-wide application security review methodology — including threat modelling philosophy, security testing standards, and remediation validation. You design security patterns and standards that serve as the foundation for secure development across … high-risk issues and establishing risk acceptance processes at the VP and SVP level.This role requires deep expertise in application security architecture, advanced threat modelling, and secure development practices, combined with strong business acumen to perform cost-benefit analyses and influence product roadmaps. You will regularly partner with ...

that process. This role exists to embed security expertise directly into how our engineering teams build and ship software: setting the standards, running the threat modelling, and making the judgement calls that keep pace with delivery instead of slowing it down. About Redgate Redgate brings together people … scanner tells you. It's a role built on trust: teams will come to you for guidance, and the judgement you bring to triage, threat modelling, and governance decisions will shape how security actually gets done here. Partner directly with engineering and product teams to define and operationalise ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...