26 to 50 of 484 Threat Modelling Jobs in England

Engineer on Mystra, you'll own application security end-to-end across multi-tenant, trillion-row-scale, AI-enabled data platforms. You'll lead threat modelling and design review with product teams, build the tooling and patterns that make secure codet, and find and fix the vulnerabilities that … steered by your own expert judgement and intuition, to keep Genomics secure against state-of-the-art threats. A Day in the Life Leading threat modelling and design reviews for new products and infrastructure, and defining the security invariants every team builds against: tenant isolation, authentication and authorisation ...

Engineer on Mystra, you'll own application security end-to-end across multi-tenant, trillion-row-scale, AI-enabled data platforms. You'll lead threat modelling and design review with product teams, build the tooling and patterns that make secure codet, and find and fix the vulnerabilities that … steered by your own expert judgement and intuition, to keep Genomics secure against state-of-the-art threats. A Day in the Life Leading threat modelling and design reviews for new products and infrastructure, and defining the security invariants every team builds against: tenant isolation, authentication and authorisation ...

edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security is engineered into everyday work - from threat modelling and architecture at design time to hardened, monitored systems in production. You'll build trusted relationships with client engineering leads, platform teams, and senior stakeholders … Report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal engineering rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles — building the tooling and automation that make ...

that process. This role exists to embed security expertise directly into how our engineering teams build and ship software: setting the standards, running the threat modelling, and making the judgement calls that keep pace with delivery instead of slowing it down. About Redgate Redgate brings together people … scanner tells you. It's a role built on trust: teams will come to you for guidance, and the judgement you bring to triage, threat modelling, and governance decisions will shape how security actually gets done here. Partner directly with engineering and product teams to define and operationalise ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

Access Management (IAM)—directly into emerging engineering streams. Guide technical squads on implementing secure contemporary architectures, safely handling RESTful APIs and containerized microservices. 2. Threat Modelling & Proactive Risk Management Maintain an up-to-date stance on the evolving financial service threat landscape. Lead collaborative Threat Modelling … GitHub Actions, or GitLab CI integrated with logging clusters like Splunk, Datadog, or ELK Stack. Secondary Roles & Responsibilities 1. Operational Research & Incident Advisory Evaluate threat intelligence data and primary risk trends to continuously recommend security enhancements to the platform's security stack. Support incident readiness functions by acting ...

dayLondon, England Contract Threat Intelligence Analyst594 per day (Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Threat Intelligence Analyst | Cyber Security | Enterprise SecurityWe are currently recruiting for an experienced Threat Intelligence Analyst to join a major cybersecurity … programme supporting critical business and technology operations. This is an exciting opportunity for a security professional with strong experience in Threat Intelligence, Enterprise Security Architecture, Platform Security, and Security Architecture Design to help identify, analyse, and mitigate emerging cyber threats across complex environments. Working within a highly skilled cybersecurity ...

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting. This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits. You will be responsible for: Designing and implementing threat ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

Lead security architecture reviews across new products, platforms, APIs, applications, integrations and data solutions, translating threats and risks into practical engineering requirements. Drive a threat-led approach to security , using threat modelling, attacker behaviour and frameworks such as MITRE ATT&CK to inform architecture decisions and prioritise … including end-to-end ownership of security architecture for modern software products and solutions. Strong knowledge of product and application security , including secure SDLC, threat modelling, vulnerability management and security testing. Strong understanding of cloud and platform security , alongside the ability to work with on‐premise and legacy ...

NIST, NCSC and Cyber Essentials Plus. Risk Management & Compliance Identify, assess, and manage cyber security risks across systems and suppliers. Support risk assessments, threat modelling, and vulnerability management. Ensure compliance with UK GDPR, data protection regulations, and organisational policies. Cloud & Technology Security Hands-on Azure cloud security experience … security controls. Design and run SIEM/SOAR use-cases in Microsoft Sentinel (data connectors, analytics rules, workbooks, automation playbooks) to support SOC operations, threat detection, and incident response. Support DevSecOps practices and secure software development. Governance & Awareness Develop and maintain security policies, standards, and procedures. Provide guidance ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through …/DAST tooling, API security, and container security in agile delivery contexts. Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through …/DAST tooling, API security, and container security in agile delivery contexts. Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through …/DAST tooling, API security, and container security in agile delivery contexts. Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector ...

expert security design guidance to delivery and engineering teams. Review solution and product designs to ensure compliance with security standards and best practice. Conduct threat modelling and security risk assessments. Design security controls aligned to organisational risk appetite. Support the deployment of cloud-based services, predominantly within Azure … Good knowledge of ISO 27001, NIST CSF and CIS Controls. Experience with Azure security services, identity management and cloud-native security controls. Exposure to threat modelling and risk assessment methodologies. Understanding of security assurance and controls testing activities. Excellent stakeholder engagement and communication skills. Desirable Skills & Certifications CISSP ...

architectures across digital, cloud and data‐driven solutions, ensuring they follow best practice, comply with regulations and meet organisational security standards. Facilitate and guide threat‐modelling activities—such as identifying risks, attack paths and mitigations—so that security is embedded early in every solutionEnsure consistent and comprehensive application … SaaS, PaaS, IaaS (including AWS, Azure) etc], including IAM, network protection, encryption, monitoring, zero‐trust concepts and secure cloud‐native designHands‐on experience with threat‐modelling techniques and the ability to translate identified threats into meaningful, actionable technical controls. Practical knowledge of key regulatory and compliance frameworks including ...

Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling for major projects and new technologies Taking a lead role in the secure adoption of Microsoft 365 Copilot, AI agents and custom … engineering and incident response Supporting complex and high‐severity security incidents alongside internal teams and external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting technical controls and evidence ...

governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps … Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications ...

governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps … Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications ...

stakeholders on Secure by Design principles and security best practices. Reviewing and assuring solution designs against established security standards, patterns and architectural frameworks. Leading threat modelling, risk assessments and security design reviews. Identifying security risks and recommending effective mitigation strategies. Supporting cloud-first solutions across Azure and wider … engineering, assurance and risk teams to validate security controls. Producing high-quality security architecture artefacts, standards and blueprints. Monitoring emerging cyber threats and incorporating threat intelligence into security decision-making. Experience Required Extensive experience in Security Architecture within Central Government or the wider Public Sector. Strong understanding ...

team to take it even further. About the Role We are seeking a Principal Product Cybersecurity Assurance Engineer with deep expertise in product security, threat modelling, and risk assurance for highly regulated electromechanical systems. In this role, you will lead the delivery of product cybersecurity across Humanoid … inference pipeline and cloud-to-robot communication architecture. Own and maintain key security artefacts for audit-ready cybersecurity documentation including Security Management Plans, Threat Analysis and Risk Assessment (TARA) reports, Risk Assessments, and Remediation Action Plans across both platforms. Security Assurance & Certification Drive security assurance through the full product ...