126 to 150 of 613 Threat Modelling Jobs in England

environment. The Opportunity This is a senior technical leadership role responsible for driving strategic security engineering initiatives across vulnerability management, application security, AI security, threat modelling, security analytics, and metrics engineering. You will build and lead a high-performing engineering function while delivering scalable, automated security services that … tooling and platforms. Drive vulnerability, exposure, and security posture management across complex technology estates. Develop and enhance application security, API security, AI security, and threat modelling capabilities. Establish security metrics, reporting, and analytics platforms to measure control effectiveness. Build automation-first engineering practices and integrate security into DevOps ...

environment. The Opportunity This is a senior technical leadership role responsible for driving strategic security engineering initiatives across vulnerability management, application security, AI security, threat modelling, security analytics, and metrics engineering. You will build and lead a high-performing engineering function while delivering scalable, automated security services that … tooling and platforms. Drive vulnerability, exposure, and security posture management across complex technology estates. Develop and enhance application security, API security, AI security, and threat modelling capabilities. Establish security metrics, reporting, and analytics platforms to measure control effectiveness. Build automation-first engineering practices and integrate security into DevOps ...

security solutions and architectures protecting critical assets. Provide second‐line support for Security Operations, acting as an escalation point for complex issues. Conduct threat modelling and risk assessments to identify vulnerabilities and define mitigation strategies. Oversee the relationship with the Managed Detection & Response (MDR) provider to ensure continuous … business. Required Qualifications 10 years’ experience in information security roles such as security engineering, architecture, operations, or application security. Hands‐on experience with threat modelling, penetration testing, and automated security validation. Strong understanding of cloud, network, and systems security principles. Scripting experience in at least one language; Python ...

architectures and control patterns for AI agents, including identity, permissions, tool use, data access, memory, human oversight, logging and containment. Lead security risk assessments, threat modelling and assurance reviews for high-risk agentic AI use cases, platforms and material design changes. Develop and apply test scenarios for agentic … meetings and collaboration. Qualifications: Demonstrated experience delivering security controls from design through implementation, validation and operational handover across cross-functional engineering teams. Experience with threat modelling, security assessment and remediation for applications, cloud services, APIs or AI-enabled systems. Strong understanding of agentic AI security risks and controls ...

both strategic design thinking and practical implementation experience. Key Responsibilities Lead the design and implementation of security architectures for complex systems and platforms Conduct threat modelling to identify risks and define proportionate security controls Provide security input across solution design, delivery, and operational phases Produce and present security … Strong technical security background with demonstrable architecture and design ownership Proven experience delivering security design and implementation , not purely advisory Hands‐on experience with threat modelling methodologies Exposure to operational technology (OT) or complex networked environments Experience working on government or highly regulated accounts is strongly preferred Ability ...

they’re effectively configured, maintained, and scaled as the business grows Embed secure-by-design practices into the development lifecycle — from secure coding and threat modelling to design reviews and CI/CD hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure … like OWASP and AWS Well‐Architected to real‐world scenarios Have experience reviewing and improving product and infrastructure security, including secure SDLC practices (e.g. threat modelling, secure code review, CI/CD hardening) Are familiar with compliance frameworks like ISO 27001 or SOC 2 , and can translate technical ...

experience in several of the following: Systems and operating systems: OS architecture, systems engineering and platform security, ideally with significant Linux experience. Security architecture: threat modelling, security boundaries, attack surfaces, hardening and secure-by-design principles. Networking: TCP/IP, DNS, routing, segmentation, firewalls, TLS, VPNs and secure … equally interested in exceptional architects from adjacent technical disciplines with the right systems and security expertise. Additional Responsibilities You'll lead or contribute to threat modelling and architectural risk assessments, promoting good practice around system hardening, trust, PKI, cryptography and network security. You'll contribute to secure development ...

Build for long-running, concurrent offensive-security workloads, owning the reliability, capacity, latency and cost characteristics that come with them. Engineer for an unusual threat model. Our platform intentionally runs offensive tooling against customer environments. Authorisation, tenant isolation, secrets, controlled execution, threat modelling and auditability are fundamental … reliable afterwards. You're comfortable across containers, cloud infrastructure and infrastructure-as-code. You have strong security instincts. You understand authorisation, secrets, isolation and threat modelling, and know when a design deserves suspicion. AI is already part of how you engineer software. You've gone beyond autocomplete ...

contract where you can lead the security workstream on a genuinely high-profile project? Do you enjoy working across the full lifecycle, from threat modelling and risk assessment through to customer-facing assurance documentation? My client is an established manufacturer of precision technology, delivering solutions used across … into the Embedded Software Engineering Manager. Your responsibilities: Your day-to-day work will involve identifying vulnerabilities and developing the project's risk assessment, threat model and security architecture, ensuring security risks are proportionately treated and clearly evidenced. You'll be advising engineering teams on security controls across ...

cyber risk within technology projects by ensuring appropriate security requirements, controls, monitoring, and assurance activities are identified, specified, and evidenced throughout the project lifecycle.Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls.Define monitoring and logging … looking for experience in the following skills:Strong technical knowledge in at least one of the following areas:Public cloudApplication securityNetworkingOn-premises infrastructureUnderstanding of threat modelling, security controls, and risk analysis principles.Ability to assess risks and recommend proportionate security controls and monitoring measures, rather than relying solely ...

applications.Resilience & Performance: Design solution-wide UI resilience (graceful degradation, back-pressure, retry strategies) and own performance standards across web and mobile.Quality, Security & Compliance: Own threat modelling and security hardening for tribe front-end products; maintain high standards through code review, secure coding practices, and risk management.External Representation: Represent … graceful degradation, zero-downtime deployments, observability, performance budgets).Experience with Azure development and cloud-based infrastructure, including CI/CD and pipeline observability.Experience owning threat modelling and security hardening for front-end products; strong grasp of OWASP and secure coding practices.Track record of originating and shepherding cross-team ...

Performance: Design solution‐wide UI resilience (graceful degradation, back‐pressure, retry strategies) and own performance standards across web and mobile. Quality, Security & Compliance: Own threat modelling and security hardening for tribe front‐end products; maintain high standards through code review, secure coding practices, and risk management. External Representation … zero‐downtime deployments, observability, performance budgets). Experience with Azure development and cloud‐based infrastructure , including CI/CD and pipeline observability. Experience owning threat modelling and security hardening for front‐end products; strong grasp of OWASP and secure coding practices. Track record of originating and shepherding cross ...

Engineer, London/GlasgowThe AI Security Engineer is responsible for securing AI platforms and systems against adversarial threats.The role focuses on technical security controls, threat modelling, red teaming, and continuous monitoring of AI systems.Responsibilities:Design and implement security controls for AI and LLM systemsPerform AI-specific threat modelling and risk analysisLead red team and blue team testing of AI platformsConduct prompt injection and adversarial testingImplement monitoring, logging, and alerting for AI behaviourSecure AI pipelines, APIs, and orchestration layersSupport secure deployment and CI/CD practicesSkills & Experience:Strong background in security engineering and cloud securityHands ...

applied to architectures, technical decisions, and third-party integrations. Your work will involve maintaining and prioritizing the product’s security backlog, coordinating risk assessments, threat modelling, and vulnerability assessments, and ensuring that required security controls (e.g., access control, encryption, secure configuration) are implemented and evidenced. You will monitor … security by design and by default” across architectures, user stories, technical decisions, and third-party integrations Proficiency in coordinating product-level security risk assessments, threat modelling, and vulnerability assessments, as well as maintaining a prioritized security backlog Experience interpreting and cascading central security policies, standards, and regulatory requirements ...

propose ways to improve delivery speed and process without weakening those controls. Build security into the SDLC by default, from secure coding and threat modelling to dependency scanning and security review, and apply AI-assisted workflows without compromising the security of secrets, data or the supply chain. Build … them. Security built into how you develop, at an engineering and development level, not just awareness of policy. You can speak to secure coding, threat modelling, dependency and secrets management, and pipeline security, and you understand how to use AI tooling without introducing security or data-handling risk. ...

looking for a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, helping protect the systems that deliver essential water services to millions of customers every day. You'll play a key role in identifying, assessing, and reducing cyber risk across a large and complex technology estate, making … closely with technical teams and business stakeholders to keep our services safe, resilient, and running smoothly. What you'll be doing as a Cyber Threat & Vulnerability Analyst: As a Cyber Threat & Vulnerability Analyst, you’ll be responsible for supporting and improving how we identify, assess, and manage cyber ...

level of security within the product.Key Responsibilities and Technologies Championing security throughout the FortiDLP product. Help maintain up-to-date and vulnerability-free dependencies. Threat modelling, design and code review. Maintaining and tuning automatic vulnerability checks within Continuous Integration systems. Triage findings of scanning tools and ensure prompt … least 3-5 years of software engineering experience. Familiarity with computer science fundamentals and backend development concepts. Experience in Golang. Experience with threat modelling and security concepts. Some familiarity with Checkmarx/Trivy/Kics or similar tools, as well as DAST tooling in general.Communication and CollaborationWe work ...

role blends incident response, detection engineering, and SOC automation, with emphasis on building tools and systems rather than mere monitoring. The team performs threat modelling, threat hunting, and ongoing tuning of detection logic, while sharing best practices across the firm. English fluency is essential. #J-18808-Ljbffr ...

awareness during test design and risk assessment Actively test for common web security weaknesses and advise teams on risk Facilitate light-weight threat modelling with delivery teams Test against WCAG standards in a practical delivery context Identify accessibility issues in web products and work with teams to improve … Strong understanding of risk-based testing, test design, and modern quality engineering practices Practical security testing awareness, including OWASP Top 10 and light-weight threat modelling Practical accessibility testing experience, including working against WCAG standards Experience using coding agents and AI-assisted workflows in day-to-day engineering ...

Engineer and play a pivotal role in defending clients against evolving cyber threats. You will leverage your expertise in SIEM platforms, threat detection, and incident response to strengthen security operations center (SOC) capabilities. Collaborating with cross-functional teams, you’ll develop automated playbooks, engineering use cases, and deploying advanced … real-time environment. Core Responsibilities SIEM Engineering & Analytics Deploy, configure, and maintain SIEM platforms such as Splunk, QRadar, Sentinel, and Chronicle to enable robust threat detection.Normalize and onboard diverse log sources from cloud and on-premises environments for seamless monitoring.Develop and continually refine SIEM rules and queries ...

demonstrate continuous compliance with stringent standards such as PCI DSS and 3DSDrive security infrastructure deployments across our growing environmentsPerform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actionsLead … implementation (CKA, CKS qualifications are a plus)Experience with Infrastructure as Code and infrastructure provisioning tools, particularly TerraformExperience configuring GCP-native security posture and threat management with Security Command CenterExperience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact AnalysisExperience with key and secret management ...

Help reduce cyber risk across technology programmes by identifying, defining, and assuring appropriate security requirements, controls, and risk treatments throughout the project lifecycle. Conduct threat modelling exercises using industry frameworks such as MITRE ATT&CK to identify credible threats and recommend proportionate security controls. Design and advise … following domains: Cloud security (Azure, AWS, GCP) Network security Identity and Access Management (IAM) Application security/DevSecOps Infrastructure and platform security Continuous Threat Exposure Management Ability to analyse technical risks and communicate recommendations to both technical and non-technical stakeholders. Strong written, verbal, and presentation skills. Demonstrated ability ...

scalable solutions.What you’ll be doing: Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments.Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift.Partner … expertise and a passion for security! Here’s what we need:Governance, Risk & Compliance: Risk-based decisions, adherence to regulatory and internal security standards.Threat Modelling and Risk Management: Identify threats and mitigations for complex cloud systems.Cloud Security Expertise: broad knowledge across the following Security Domains and their capabilities within ...

scalable solutions.What you’ll be doing: Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments.Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift.Partner … expertise and a passion for security! Here’s what we need:Governance, Risk & Compliance: Risk-based decisions, adherence to regulatory and internal security standards.Threat Modelling and Risk Management: Identify threats and mitigations for complex cloud systems.Cloud Security Expertise: broad knowledge across the following Security Domains and their capabilities within ...

architectures and reusable solution patterns Define and author enterprise‐level security policies, controls frameworks, and governance documentation aligned to industry standards Lead risk assessments, threat modelling exercises, and security posture evaluations for cloud platforms and SaaS products, utilising methodologies such as FAIR Drive compliance programmes covering ...