51 to 75 of 484 Threat Modelling Jobs in England

cloud and security assurance within a highly confidential, multi-tenant SaaS environment. Key Responsibilities: Lead product and application security across the development lifecycle, including threat modelling, secure code review, vulnerability management and CI/CD security controlsWork closely with engineering and cloud teams to secure AWS environments, including … 7+ years' experience in cyber security or security engineeringStrong experience securing cloud-native SaaS platforms, ideally within AWS environmentsHands-on application security experience across threat modelling, OWASP and secure software developmentGood understanding of cloud security, identity, access controls, encryption and monitoringExperience delivering or implementing SOC 2 and/ ...

software and product development lifecycle. Key Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation activities. Advise on secure design, cloud security, mobile security, authentication, encryption … Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience supporting audits, regulatory reviews or compliance ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

services and integrations, including authentication, authorisation, session management and firm-level data separation AWS security , covering IAM, network controls, secrets, encryption and workload isolation Threat modelling and security review for new systems, financial workflows, external integrations and AI capabilities, joining projects early enough to change their design Vulnerability … security. Hands-on experience securing AWS or another major cloud platform, including IAM, network security and cloud-native controls Secure design. You have run threat modelling and architecture reviews, and you recommend proportionate controls that fit the system and its stage rather than the textbook answer You build ...

help teams understand and remediate their exposure. You will collaborate closely with platform engineers, product squads, and risk and governance teams. Job responsibilities Perform threat modelling of platform services and cloud infrastructure, translating findings into clear, actionable remediation guidance for engineering teams Design and implement cloud security guardrails … concepts and proficient applied experience Hands‐on experience in a DevSecOps, cloud security, or compliance platform engineering role operating in AWS Practical experience with threat modelling methodologies (e.g., STRIDE or equivalent) applied to cloud services or distributed systems Good working knowledge of AWS cloud security services including Identity ...

Java, C, C++ and other relevant languages. Integrate security controls and automated testing into CI/CD pipelines , including SAST, DAST and SCA. Support threat modelling and vulnerability management across products and services. Work closely with developers, architects, DevOps teams and product owners to embed security into their … major language such as Java, C, C++, C#, Python or similar. Knowledge of secure software development lifecycles and shift-left security practices. Experience with threat modelling , such as STRIDE or similar approaches. Understanding of application, API and web security. Experience interpreting security findings, identifying false positives and prioritising ...

/SAE 21434, ISO 24882, IEC 62443, and the Cyber Resilience Act (CRA) Review the adequacy of key cybersecurity work products such as threat modelling/TARA outputs, requirements, architecture evidence, verification and validation strategies, and residual risk statements Drive closure of findings with stakeholders across systems, embedded … Excellent technical writing, communication, and stakeholder management skills, with the ability to present risk clearly and pragmatically Knowledge or experience of TARA and threat modelling approaches, including review of threat artefacts such as attack trees, is a plus Background in vulnerability management and post‐production monitoring/ ...

technical designs. Working across areas such as cloud, infrastructure, networks, integration, applications and enterprise security. Producing and reviewing security architecture and design documentation. Conducting threat modelling and identifying security risks within proposed solutions. Applying Secure by Design principles throughout the technology lifecycle. Working closely with Solution Architects, Engineers … architecture or solution-design experience. Relevant experience could include: Security Architecture or security solution design. Designing or reviewing HLDs/LLDs and technical architectures. Threat modelling and Secure by Design. Cloud security across AWS, Azure and/or GCP. Security architecture across infrastructure, networks, applications or integration environments. ...

service documentation. Supporting development teams with the adoption and integration of security tooling and best practices. Contributing to wider cyber security initiatives, including threat modelling and compliance activities. What we are looking for: Previously worked as a Senior Application Security Engineer, Lead Application Security Engineer, Principal Application Security …/CD tools such as GitHub and GitHub ActionsHighly skilled in Terraform and PythonStrong understanding of Azure security controls and cloud security governanceExperience with threat modelling in software engineering contextsKnowledge of ISO 27001 and its relevance to secure engineeringFamiliar with Agile and DevSecOps methodologiesEligible to work ...

secure‐by‐design culture across the business. Key responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers … software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility Please note ...

secure‐by‐design culture across the business. Key responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers … software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility Please note ...

help teams understand and remediate their exposure. You will collaborate closely with platform engineers, product squads, and risk and governance teams. Job responsibilitiesPerform threat modelling of platform services and cloud infrastructure, translating findings into clear, actionable remediation guidance for engineering teamsDesign and implement cloud security guardrails and policy … software engineering concepts and proficient applied experienceHands-on experience in a DevSecOps, cloud security, or compliance platform engineering role operating in AWSPractical experience with threat modelling methodologies (e.g., STRIDE or equivalent) applied to cloud services or distributed systemsGood working knowledge of AWS cloud security services including Identity ...

bank of the future from the ground up, offering you the chance to join us and make a significant impact. Job Responsibilities Perform threat modelling of platform services and cloud infrastructure, translating findings into clear, actionable remediation guidance for engineering teams Design and implement cloud security guardrails … concepts and proficient applied experience Hands-on experience in a DevSecOps, cloud security, or compliance platform engineering role operating in AWS Practical experience with threat modelling methodologies (e.g., STRIDE or equivalent) applied to cloud services or distributed systems Good working knowledge of AWS cloud security services including Identity ...

trusted subject matter expert, collaborating closely across our product groups to foster a proactive, risk-conscious security culture. Through continuous mentorship and forward-thinking threat modelling, you’ll help us securely scale and drive a digital revolution in the global insurance market. What you will be doing: Provide … implementation advice and guidance on securing AI-powered applications, aligning with frameworks like OWASP ASVS and the OWASP Top 10 for LLM Applications. Lead threat modelling sessions for AI and agentic systems during the technical design phase using STRIDE and AI-specific frameworks. Establish secure guardrails, allowlists, telemetry ...

complex enterprise IT and operational technology environments. Work with technical and solution architects to embed security throughout the design and delivery lifecycle. Apply threat modelling techniques to identify threats and define appropriate security requirements. Provide specialist advice on security risks, threat-based mitigation and system design. Manage … premises architecture and virtualisation Cloud platforms and containerisation Databases and LLM technologies Mobile technologies and application security Security architecture and secure-by-design principles Threat modelling, risk assessment and security requirements Security controls, protective monitoring and IAM Previous experience working specifically as a Security Architect is desirable ...

programmes Producing technical security evidence including risk assessments and vulnerability analysis Supporting programme teams, architects, and engineers to embed cyber security best practice Conducting threat modelling and cyber risk assessments using recognised frameworks Developing risk treatment plans and implementing mitigation strategies This role is full time, standard … Royal Dockyard. Essential experience of the Cyber Security Lead Strong experience delivering secure by design or cyber security assurance activities Proven ability to conduct threat modelling and risk assessments In-depth knowledge of cyber security frameworks such as NIST, ISO 27001, and ISO 27005 Experience influencing multidisciplinary teams ...

from unsupported assurance claims and identify the limitations of the evidence available. You will work alongside senior engineers and security specialists to develop the threat model, risk methodology, research measures, evaluation scenarios and interpretation of results. This is not a conventional compliance or governance-only position. We need someone … work across the wider programme, with greater involvement during early research design and later security evaluation. What you’ll do Develop and challenge the threat model for consequential AI-agent actions. Identify credible threat scenarios, security assumptions and important failure conditions. Define practical consequence and exposure categories relevant ...

Java, C, C++ and other relevant languages. Integrate security controls and automated testing into CI/CD pipelines , including SAST, DAST and SCA. Support threat modelling and vulnerability management across products and services. Work closely with developers, architects, DevOps teams and product owners to embed security into their … major language such as Java, C, C++, C#, Python or similar. Knowledge of secure software development lifecycles and shift-left security practices. Experience with threat modelling , such as STRIDE or similar approaches. Understanding of application, API and web security. Experience interpreting security findings, identifying false positives and prioritising ...

reviewing designs for technical soundness and integration before they reach the review board Produce designs and low-level detail sufficient to pass IT Security threat modelling and review Contribute to the technical design authority (TDA) process Own the cross-business-unit backlog of architecture work, resourcing, and demand … premises (VMware), and hybrid environments Exposure to enterprise SaaS platforms such as Workday, SAP, or equivalent Strong knowledge of solution design, architecture governance, threat modelling, and security-led design review Experience with modelling approaches such as ArchiMate or UML Commercial awareness - cost-benefit analysis, TCO, FinOps Interest ...

Tektora Limited is seeking a Cyber Security Consultant with active SC Clearance to deliver threat modelling and secure design across complex client environments. The role requires hybrid travel to Bristol, Manchester, the North West England and London as needed. You will engage stakeholders, run workshops, review architectures ...

expertise across a complex digital environment. Key responsibilities: Deliver detailed cyber security risk assessments and assurance across complex digital environments. Apply cyber risk management, threat modelling and secure-by-design principles. Provide security advice across cloud, SaaS and emerging technologies, including AI . Apply relevant security standards, regulatory … cyber security risk management and assurance . Experience working in large, complex and fast-moving digital environments. Deep understanding of secure by design, threat modelling and cyber risk . Experience with cloud and SaaS security . Strong stakeholder management and communication skills. CISP and CISM qualifications. Active ...

Lead the adoption of reusable global components and shared platforms where they meet UK product and regulatory needs Security, compliance and operational integrity Ensure threat modelling, secure design, privacy by design, vulnerability management and data protection controls are integrated into engineering ways of working. Work with security, risk … automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

engineering, platform, and central architecture/governance teams, they run design and governance forums and influence without authority. They'll bring genuine cybersecurity expertise-threat modelling, security controls, identity and access, encryption, logging, and secure SDLC-so CSA's platforms and products can be trusted in production … cloud platforms and traditional on‐premise hosting; hands‐on experience with Azure, AWS and/or GCP is beneficial. Proven security architecture expertise, including: Threat modelling and secure‐by‐design practices IAM (RBAC/ABAC), privileged access concepts, and service‐to‐service authentication Encryption in transit/ ...

Architect for remote UK work with Active SC clearance. You will guide security design across delivery and engineering, review designs for compliance, and lead threat modelling and risk assessments. The role focuses on Azure security services and cloud-native controls within regulated government contexts. The position requires strong ...