201 to 225 of 613 Threat Modelling Jobs in England

options and recommendations clearly to senior stakeholders who may not have a security background. The work can include: Security architecture and secure-by-design Threat modelling and security risk assessment Reviewing solution and infrastructure designs Defining security requirements and controls Cloud, infrastructure, network and identity security Working with ...

Secrets Manager, ECS, Aurora and access controls Identity and access management across the business, including Cloudflare Zero Trust Security within the engineering lifecycle, from threat modelling and secure design reviews through to vulnerability management and secure development practices CI/CD and software supply-chain security, including dependencies ...

guidance, and where required production of an action plan for vulnerabilities identified with clear recommendations and outcomes to mitigate and address. Delivering risk, threat modelling and analysis for systems, applications and infrastructure. Designing proportional security controls to bring risk within appetite, leveraging native cloud technologies. Producing security architecture ...

patterns Integrate security tooling and automated controls intoCI/CD pipelines, including SAST/DAST tooling, secrets scanning, and policy-as-code enforcement Conduct threat modelling exercises, cloud security posture reviews, and risk assessments for cloud platforms and workloads Work within scaled agile delivery teams, contributing security requirements ...

cloud, network, infrastructure and application security controls. Review complex technical solutions and ensure they align with security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management activities, helping ...

risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. Responsibilities Effective business acumen and an understanding … analysis for specific domains, identify gaps in existing capabilities, service maturity. Identify missing cybersecurity and cyber-resiliency capabilities in alignment with changing business needs, threat land scape and technical requirements to increase the quality of the selected solutions also including topics such as products’ convergence over time and products ...

network, application, data and endpoint layers Lead security architecture reviews and technical security assessments Design zero-trust security models and continuous verification frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations Design security solutions supporting Information Security Management System (ISMS) compliance Architect compliance and audit ...

security solutions across network, application, data and endpoint layersLead security architecture reviews and technical security assessmentsDesign zero-trust security models and continuous verification frameworksCyber Threat & Risk ManagementAssess cyber threat landscape and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat … complianceArchitect compliance and audit capabilities for regulatory reportingLead security standards implementation and controls frameworksSecurity Solutions & IntegrationArchitect endpoint protection, data loss prevention (DLP) and advanced threat protection solutionsDesign cloud security architectures supporting hybrid and multi-cloud environmentsArchitect application security, API security and secure SDLC integrationDesign security operations centre (SOC) capabilities ...

Enterprise Security Architecture or Security Solutions Architecture to develop and own:Identify business objectives, user needs, risk appetite and cyber security obligationsIdentify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controlsVerify and evidence alignment to 'Secure by Design' principles, corporate security policy/standards … NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelinesIn-depth knowledge of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.Minimum of 10 years of experience in Cyber SecurityAny 2 of the following certifications CISSP, CISM, CCSP, CRISC or equivalent experience3+ years of experience ...

/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience ...

passionate and talented application security engineer with very deep understanding of OWASP, CWE 25, Data Protection, Access management, software vulnerabilities, best practices design and threat modelling skills, who can work in a dynamic environment. You must be dedicated to able to work with developers in producing secure code ...

cybersecurity challenges that span multiple technology domains.Job responsibilitiesCultivate a security culture with your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your product across ...

team Familiar with Risk Analysis, Network Security, Cryptography, Identity & Access Management (software/hardware development, the NIST Cybersecurity Framework, cloud technologies) Familiarity with threat modelling Able to monitor and measure risk as well as compliance You have the ability to work with customers and technical teams Desirable Domain ...

executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security ...

scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy as Code and threat modelling. A proactive, curious and collaborative approach, with the ability to guide engineering teams, support third-party supply chain security and make complex topics ...

define risk appetite and make informed decisions about whether an initiative is ready to progress. Alongside engineers, you'll get into the technical detail - threat-modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes. From POC to production, you'll bring the two sides … implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review AI architectures, guardrails, evaluations ...

implementation, periodic permission reviews, and secrets rotation.Work within the authentication standards set by the security governance team.Secure development & auditsEmbed security into the development lifecycle: threat modelling, secure code patterns, CI/CD hardening.Conduct technical security reviews of code (TypeScript, Node.js, Python), infrastructure-as-code (Terraform), and multi-tenant … with engineering growth.Assess and govern AI tooling adoption across engineering: define security standards for code assistants and LLM-powered workflows, and conduct AI-specific threat modelling.Coordinate and execute penetration tests and security audits: prepare environments, manage auditor relationships, drive post-audit action plans.Drive remediation within the qualification rules ...

influence secure solution design. Research emerging technologies and develop innovative approaches to challenging security problems. Contribute to the development of reference architectures and threat models. Support the delivery of secure technology solutions across major public sector and government programmes. Key Skills & Experience The organisation is looking for Security Consultants … Sign-On (SSO) and Identity and Access Management (IAM/IDAM). Network security and encryption. IT infrastructure, technical concepts and solution design methodologies. Threat modelling and security architecture development. Identifying security vulnerabilities and assessing their potential business and technical impact. Communicating security risks and recommendations ...

detection, and response capabilities for AI-related threats and misuse scenarios.Identify opportunities to use AI to enhance cyber security operations, such as alert triage, threat analysis, playbook automation, knowledge retrieval, and workflow optimisation.Stay current on evolving risks, attack techniques, regulations, and industry practices related to AI security … relevant to AI systems, including prompt injection, data exfiltration, insecure model access, supply chain risks, model poisoning, and sensitive data exposure.Experience conducting architecture reviews, threat modelling, and security assessments for complex technical solutions.Ability to translate technical risk into clear, practical guidance for both engineering and non-technical stakeholders.Strong ...

response capabilities for AI‐related threats and misuse scenarios. Identify opportunities to use AI to enhance cyber security operations, such as alert triage, threat analysis, playbook automation, knowledge retrieval, and workflow optimisation. Stay current on evolving risks, attack techniques, regulations, and industry practices related to AI security … systems, including prompt injection, data exfiltration, insecure model access, supply chain risks, model poisoning, and sensitive data exposure. Experience conducting architecture reviews, threat modelling, and security assessments for complex technical solutions. Ability to translate technical risk into clear, practical guidance for both engineering and non‐technical stakeholders. Strong ...

engineering and DevOps teams to embed security tools (e.g., SAST, DAST, SCA) into CI/CD pipelines.Help maintain and improve automated security testing workflows.Support threat modelling and secure design practices at the project level.Participate in security reviews of new features and applications.Security Testing and ToolingOversee the planning … DevSecOps environments.Hands-on experience with security testing tools (e.g., Veracode, SonarQube, Burp Suite, etc.).Familiarity with secure coding practices, OWASP Top 10, and threat modelling.Experience working in Agile or DevOps-driven environments.Strong verbal and written communication skills.Relevant security or DevSecOps certifications (e.g., CSSLP, CEH, GWEB) preferred.Eligible for SC clearance ...

DevOps teams to embed security tools (e.g., SAST, DAST, SCA) into CI/CD pipelines. Help maintain and improve automated security testing workflows. Support threat modelling and secure design practices at the project level. Participate in security reviews of new features and applications. Security Testing and ToolingOversee … DevSecOps environments. Hands-on experience with security testing tools (e.g., Veracode, SonarQube, Burp Suite, etc.).Familiarity with secure coding practices, OWASP Top 10, and threat modelling. Experience working in Agile or DevOps-driven environments. Strong verbal and written communication skills. Relevant security or DevSecOps certifications (e.g., CSSLP, CEH, GWEB ...

appropriately designed and secured.Define security requirements for endpoint, email, Microsoft 365, data, application and network architectures.Establish appropriate requirements for security logging, monitoring, alerting, threat detection and incident response.Review technical architecture and solution designs, identifying security weaknesses, control gaps, dependencies and areas requiring further assurance.Assess migration strategies and cutover approaches … security policies, information-security standards, data-protection obligations and relevant regulatory or assurance requirements.Maintain appropriate security architecture documentation, including HLDs, security principles, control matrices, threat models, risk assessments, exception records and architecture decision records.Provide clear security recommendations and risk-based advice to programme leadership and senior stakeholders.Support continuous improvement ...

testing, release and operation.Review security architecture, tooling coverage, integration dependencies and control gaps.Assess capabilities including SAST, SCA, DAST, secrets scanning, IaC scanning, API security, threat modelling and CI/CD security.Map controls against frameworks including NIST SSDF, OWASP SAMM and OWASP DSOMM.Review security tooling and integrations across GitHub ...

design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines and escalated where required Maintain ...