176 to 200 of 613 Threat Modelling Jobs in England

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement Design and maintain AI-assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, network access, observability, workload isolation, and third-party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer-facing guidance for safe use of AI coding assistants, AI APIs ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement Design and maintain AI-assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, network access, observability, workload isolation, and third-party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer-facing guidance for safe use of AI coding assistants, AI APIs ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

material, and serve government customers who have no tolerance for downtime or data compromise. Key Responsibilities Own the security posture of the Spaceflux platform: threat modelling, vulnerability management, penetration test remediation, and incident response. Design and maintain secure CI/CD pipelines, integrating SAST, DAST, dependency scanning ...

Infrastructure as Code, and cloud-native engineering practices. Drive cloud security governance, architecture assurance, security remediation, and control optimisation initiatives. Conduct security architecture reviews, threat modelling exercises, risk assessments, and cloud security maturity assessments. Contribute to business development activities, thought leadership, and the continued growth of our Cloud ...

technical validation sessions.Security Leadership & StrategyDriving the organization’s Zero Trust strategy and security roadmap.Providing architectural governance and ensuring security best practices across projects.Conducting threat modelling, gap assessments, and risk evaluations for critical applications and network paths.Advocate for the adoption of modern security frameworks and secure-by-design principles.Operations ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise to guide … oversee cyber security policies aligned with defence and wider government standards.Act as the Saab UK representative on the Global Cyber Council.Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process.Manage incident response and coordinate with other company parties.Lead on the compliance of Cyber controls including DefStan ...

systems we use to guard the firm. Think about this role as some combination of incident responder, detection engineer, security engineer, SOC automation engineer, threat hunter, threat modeler, and security awareness engineer. Our SOC team is involved in engineering (e.g., we built our own SOAR, email content scanning … system, the entire alerting stack and much more) and we handle the incident response and remediation when a threat is found. Our analysts research and prioritise what threats need to be monitored, hunt for them in our data, write code to detect them and constantly tune the detection ...

role in helping to shape our client’s transformation journeys. Identify business objectives, user needs, risk appetite and cyber security obligations Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to ‘Secure by Design’ principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...

Infrastructure as Code and cloud-native engineering practices Drive cloud security governance, architecture assurance, security remediation and control optimisation initiatives Conduct security architecture reviews, threat modelling, risk assessments and cloud security maturity assessments Contribute to business development, thought leadership and the continued growth of the Cloud Security practice ...

Support the planning and scoping of IT Health Checks (ITHCs) and interpret assessment outcomes. Identify, assess and manage security risks within solution architectures. Conduct threat modelling, risk assessments and security impact analyses. Design proportionate security controls using cloud-native technologies and services. Produce architecture artefacts including security patterns ...

/63).* Define and maintain technical roadmaps, standards, and reference architectures; mentor engineers and review develop/runbooks.* Lead security assessments, threat modeling, and control efficacy reviews; partner with risk/compliance and audit functions on evidence and remediation.* Solve complex issues end-to-end, including proxy/ ...

security engineering expertise throughout the system development and operational lifecycle, ensuring security requirements are identified and implemented from concept through disposal.Conduct security architecture reviews, threat assessments, and technical risk analysis for classified environments.Support the development and maintenance of system security documentation, security architectures, and security operating procedures.Lead and coordinate … SIEM, vulnerability management, encryption, and identity management solutionsDemonstrable experience applying Secure by Design principles in complex IT systems and programmes.Experience conducting security architecture reviews, threat modelling, and risk assessments.Strong understanding of system hardening, security controls implementation, and security testing methodologies.Experience supporting system engineering and security requirements management within ...

Doing Lead the design and assurance of secure architectures across complex Defence, Government, CNI and mission-critical environments. Define security requirements, threat models, architectural principles and proportionate security controls across the system lifecycle. Identify and manage security risks across high-level and detailed solution designs, providing practical mitigation strategies … Framework (CAF), NIST and ISO 27001 . Experience applying risk-driven security architecture methodologies to complex systems and environments. Strong understanding of security requirements, threat modelling, risk assessment and security controls. The ability to communicate complex technical risks and recommendations to both technical and C-level audiences. Experience ...

engineering expertise throughout the system development and operational lifecycle, ensuring security requirements are identified and implemented from concept through disposal. Conduct security architecture reviews, threat assessments, and technical risk analysis for classified environments. Support the development and maintenance of system security documentation, security architectures, and security operating procedures. Lead … management, encryption, and identity management solutions Demonstrable experience applying Secure by Design principles in complex IT systems and programmes. Experience conducting security architecture reviews, threat modelling, and risk assessments. Strong understanding of system hardening, security controls implementation, and security testing methodologies. Experience supporting system engineering and security requirements ...

such as Docker and Kubernetes.· Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2.· Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews.· Strong troubleshooting, documentation, and cross-functional communication skills.Personal· Team player with strong communication skills· Competent troubleshooting ...

such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews. Strong troubleshooting, documentation, and cross-functional communication skills. Personal Team player with strong communication skills Competent ...

such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001 or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments and architecture reviews. Strong troubleshooting, documentation and cross-functional communication skills. Personal Strong team player with excellent communication skills. ...

hybrid and multi-cloud environments (especially Google Cloud Platform (GCP)) including identity, networking, data, and application layers. Securing Applications and API. Perform technical assessments, threat modeling, and design reviews for enterprise-scale platforms and high-risk systems. Design and validate Zero Trust architectures across identity, device, network, application ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture … building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack ...

such as Wiz, Microsoft Defender, and ArmorCode. Prioritise and coordinate remediation efforts based on business impact, exploitability, and risk exposure. Conduct security assessments and threat modelling exercises for new projects and technologies. Ensure security controls align with SOC2, ISO27001, CIS Controls, and organisational risk management requirements. Produce reports … support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. Skills and Experience Essential Microsoft Entra ...

/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates.Maintain security workflows and coach engineers on secure coding and threat‐driven design.Validation & Supplier EngagementSupport V&V, penetration testing, and remediation, and manage security alignment with suppliers.Compliance & DocumentationOwn the security compliance dossier, including Cybersecurity Plans …/hardware engineering with at least 5 years focused on cybersecurity for embedded systems, IoT, or cloud platforms.Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products.Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security ...

secure coding training, workshops and awareness sessions. Mentor development teams and promote security-first engineering practices. Drive adoption of secure development standards and methodologies. Threat & Vulnerability Management Support application vulnerability management activities. Assist development teams with vulnerability triage and remediation planning. Identify recurring weaknesses and opportunities for continuous improvement. … into CI/CD pipelines. Strong understanding of OWASP Top 10 and common vulnerability classes. Experience with API and web application security. Knowledge of threat modelling techniques and methodologies. Experience working closely with software engineering teams in enterprise environments. Ability to read and understand code in languages such ...

built into the way systems are designed and developed. The role The focus is across: Application Security Cloud Security DevSecOps Secure Software Development Lifecycles Threat Modelling Vulnerability Management Security Testing Security tooling and controls Working with development and engineering teams to implement security requirements Providing technical security advice ...