76 to 100 of 427 Threat Modelling Jobs in England

secrets detection, credential rotation and secure Key Vault practicesStrengthening software supply-chain security through SBOM generation, dependency scanning and artefact signingSupporting API security testing, threat modelling and third-party penetration testsConfiguring Azure-native security tooling, including Defender for Cloud, Azure Policy, Sentinel and Azure MonitorEnforcing identity and access …/CVE remediation toolingThe confidence to work independently, make risk-based decisions and support junior engineersExperience with Docker, Kubernetes/AKS, API security testing, threat modelling, SIEM tooling or software supply-chain security would be particularly useful.Relevant certifications such as AZ-500, AZ-400, Security+, CySA+ ...

credential rotation and secure Key Vault practices Strengthening software supply-chain security through SBOM generation, dependency scanning and artefact signing Supporting API security testing, threat modelling and third-party penetration tests Configuring Azure-native security tooling, including Defender for Cloud, Azure Policy, Sentinel and Azure Monitor Enforcing identity … remediation tooling The confidence to work independently, make risk-based decisions and support junior engineers Experience with Docker, Kubernetes/AKS, API security testing, threat modelling, SIEM tooling or software supply-chain security would be particularly useful. Relevant certifications such as AZ-500, AZ-400, Security+, CySA+ ...

Defender - triage, escalate, or contain as appropriateSupport incident response activities including containment, evidence gathering, and post-incident reviewParticipate in security risk assessments and threat modelling exercises across new and existing systemsCoordinate penetration test engagements (scope, logistics, findings review) and work with engineering teams to prioritise remediationWhat … Azure networking, and cloud security posture managementExperience writing infrastructure-as-code using Terraform or Bicep in a security engineering contextAbility to contribute to threat modelling and communicate security risk clearly to engineering and product audiencesExperience supporting or coordinating penetration testing programmes, including managing remediation cyclesFamiliarity with AI security ...

Information Security or Information Technology. Strong experience reviewing infrastructure security. Hands‐on cloud security experience across AWS and/or GCP. Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS. Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security ...

identity, access, network security, cloud security, application security, data protection, APIs, secrets management, encryption, logging, monitoring and resilience. Secure by Design, Zero Trust and threat modelling: Experience embedding security into delivery lifecycles through Secure by Design practices, Zero Trust architecture, threat modelling, security requirements, architecture review ...

Develop security and policy-as-code capabilities using tools such as OPA. Help secure cloud and data platforms, including Databricks, Dagster and Snowflake. Support threat modelling and ISO 27001 activities. Operate and improve application security services and tooling. Work directly with developers to identify and remediate vulnerabilities. About … with KQL advantageous. Experience securing GitHub/GitHub Actions, Kubernetes and APIs. Strong knowledge of application security testing and vulnerability management. Experience with DevSecOps, threat modelling and security automation. Knowledge of ISO 27001. Strong cloud security knowledge Azure (Preferred) If you’re looking for a role where ...

engineering teams to identify automation opportunities. Documentation – Produce clear documentation to support delivery, troubleshooting, and continuous improvement. Automation Planning – Contribute to automation roadmaps, threat modelling, and use case development. Pre-Sales Support – Assist with demos, scoping, and proof-of-value activities where required. Core Duties Automation Design & Development … Develop reusable scripts, templates, and components Ensure solutions support secure, multi-tenant environments Integration & Response Automation Orchestrate containment, enrichment, and remediation actions Integrate with threat intelligence, cloud, vulnerability, and reporting tools Partner with analysts to map and automate response processes Lifecycle Management & Optimisation Manage automation from design through ...

enjoy building tooling and automation, and thrive in modern cloud native engineering environments, this is an opportunity to make a real impact. Responsibilities: Lead threat modelling across a portfolio of AI native products. Build, enhance and maintain security tooling and DevSecOps automation. Coordinate penetration testing activities and ensure … Skills: Commercial experience in a DevSecOps, Product Security or Application Security role. Experience securing AI native or modern cloud native applications. Strong knowledge of threat modelling and secure software development. Experience building security tooling and automation. Hands on experience with vulnerability management, validation and remediation. Knowledge of penetration ...

into platforms other teams operate against.ResponsibilitiesDesign, implement, and continuously improve a Secure SDLC integrated from design through productionEmbed security into planning and delivery via threat modelling, security requirements, and automated controlsLead application security reviews for new systems, major features, and high-risk changes across web, API, mobile … lifecycle management, PCI PIN and PCI-DSS scope experience is required.Application security at scale. SAST/DAST/SCA toolchain design and rollout. Threat modelling as a routine practice, not an event. Familiarity with modern AppSec tooling (Snyk, Wiz, Veracode, Checkmarx, Semgrep, GitHub Advanced Security or equivalents).Cloud ...

engineering, platform, and central architecture/governance teams, they run design and governance forums and influence without authority. They'll bring genuine cybersecurity expertise-threat modelling, security controls, identity and access, encryption, logging, and secure SDLC-so CSA's platforms and products can be trusted in production … premise hosting; hands-on experience with Azure, AWS and/or GCP is beneficial. You will also have proven security architecture expertise, including: Threat modelling and secure-by-design practices. IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication. Encryption in transit/at rest ...

engineering, platform, and central architecture/governance teams, they run design and governance forums and influence without authority. They'll bring genuine cybersecurity expertise-threat modelling, security controls, identity and access, encryption, logging, and secure SDLC-so CSA's platforms and products can be trusted in production … premise hosting; hands-on experience with Azure, AWS and/or GCP is beneficial. You will also have proven security architecture expertise, including: Threat modelling and secure-by-design practices. IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication. Encryption in transit/at rest ...

hands-on implementation. About the role. You'll advise enterprise clients across banking, insurance, and public sector on security posture - from architecture review and threat modelling through to hands-on implementation of identity, segmentation, and detection controls. Our clients don't need another slide deck telling them they … their platform teams and get zero-trust principles actually implemented, on their timeline, without breaking the systems that run their business. Lead architecture reviews, threat modelling sessions, and control gap assessments against frameworks like NIST, ISO 27001, and industry-specific regulation. Translate risk into a roadmap Turn assessment ...

earn their trust and enable their best work, you'll need to be genuinely close to the craft — able to engage at depth on threat modelling, agentic security tooling, SDLC design, and application risk. You'll also own AppSec strategy and be accountable for how the function scales … context into a clear, prioritised programme of work with measurable outcomes. Be a credible technical partner to your team — able to engage substantively on threat models, security architecture, agentic tooling design, and risk decisions, and willing to get into the details when it matters. Define and maintain the team ...

project lifecycle. Responsibilities Design and develop security architectures for secure infrastructure and network environments. Produce high and low-level security architecture documentation. Conduct threat modelling, security risk assessments and vulnerability analysis. Define security controls aligned to Secure by Design principles. Support security assurance, accreditation and governance activities. Work …/IPS and boundary protection PKI, cryptography and key management Identity & Access Management (IAM) and Privileged Access Management (PAM) Secure by Design principles Threat modelling and security risk assessment Experience producing security architecture artefacts and supporting security accreditation activities. Good knowledge of: NCSC guidance JSP 440 MOD security ...

secure operating models that enable the safe deployment and use of AI solutions across complex business environments. This role focuses on AI security assessments, threat modelling, governance frameworks, security controls, secure integrations and identifying AI-specific security risks. Please only apply if you have the right to work … visa sponsorship is not available. You will be responsible for Conducting security assessments of AI solutions, including threat modelling. Developing governance frameworks, security standards and best practice for AI adoption. Designing controls for identity, access management, auditability and human oversight. Supporting the implementation of security guardrails for AI, generative ...

operating models that enable the safe deployment and use of AI solutions across complex business environments. . This role focuses on AI security assessments, threat modelling, governance frameworks, security controls, secure integrations and identifying AI-specific security risks . Please only apply if you have the right … work in the UK, as visa sponsorship is not available. You will be responsible for Conducting security assessments of AI solutions, including threat modelling. Developing governance frameworks, security standards and best practice for AI adoption. Designing controls for identity, access management, auditability and human oversight. Supporting the implementation ...

part of a bigger team, working with a group of a Senior Security Architects and Digital Engineering stakeholders to produce security architecture artifacts, threat modelling, design assurance, and reusable patterns that strengthen the programme’s security posture. Key Responsibilities: You will lead and deliver core security architecture outputs … including: Digital Engineering Security Artifacts and Engagement Report Security Requirements Specification Security Principles Framework Infrastructure Mapping Document & Security Architecture Design Pack Threat Modelling Report Reusable Security Pattern Library Knowledge Transfer Pack (training materials, handover content, recorded walkthroughs) We are looking for someone with: Extensive Security Architecture/Security ...

based hybrid team. You will advise clients on security strategies, conduct assessments, and help strengthen risk management across a diverse portfolio. The role covers threat modelling, secure-by-design practices, and regulatory alignment with ISO 27001, NIST and GDPR, with a focus on client-facing delivery and proactive ...

applications.Resilience & Performance: Design solution-wide UI resilience (graceful degradation, back-pressure, retry strategies) and own performance standards across web and mobile.Quality, Security & Compliance: Own threat modelling and security hardening for tribe front-end products; maintain high standards through code review, secure coding practices, and risk management.External Representation: Represent … graceful degradation, zero-downtime deployments, observability, performance budgets).Experience with Azure development and cloud-based infrastructure, including CI/CD and pipeline observability.Experience owning threat modelling and security hardening for front-end products; strong grasp of OWASP and secure coding practices.Track record of originating and shepherding cross-team ...

Performance: Design solution‐wide UI resilience (graceful degradation, back‐pressure, retry strategies) and own performance standards across web and mobile. Quality, Security & Compliance: Own threat modelling and security hardening for tribe front‐end products; maintain high standards through code review, secure coding practices, and risk management. External Representation … zero‐downtime deployments, observability, performance budgets). Experience with Azure development and cloud‐based infrastructure , including CI/CD and pipeline observability. Experience owning threat modelling and security hardening for front‐end products; strong grasp of OWASP and secure coding practices. Track record of originating and shepherding cross ...

they’re effectively configured, maintained, and scaled as the business grows Embed secure-by-design practices into the development lifecycle — from secure coding and threat modelling to design reviews and CI/CD hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure … like OWASP and AWS Well-Architected to real-world scenarios Have experience reviewing and improving product and infrastructure security, including secure SDLC practices (e.g. threat modelling, secure code review, CI/CD hardening) Are familiar with compliance frameworks like ISO 27001 or SOC 2 , and can translate technical ...

contract where you can lead the security workstream on a genuinely high-profile project? Do you enjoy working across the full lifecycle, from threat modelling and risk assessment through to customer-facing assurance documentation? My client is an established manufacturer of precision technology, delivering solutions used across … into the Embedded Software Engineering Manager. Your responsibilities: Your day-to-day work will involve identifying vulnerabilities and developing the project's risk assessment, threat model and security architecture, ensuring security risks are proportionately treated and clearly evidenced. You'll be advising engineering teams on security controls across ...

across Lloyds Bank, Halifax, Bank of Scotland and Scottish Widows. You’ll help design, build and enhance a world-class mobile security framework, leading threat modelling, security assessments, penetration testing capabilities and security tooling across Android and iOS platforms. Working within agile teams, you’ll drive continuous improvements … impact and do the best work of your career, you’ve just found itWhat we’re looking for Experience of mobile platform security, threat modelling and mitigation techniquesStrong hands-on experience conducting reviews of mobile application security postureExperience developing and maintaining penetration testing tools, scripts, policies and proceduresIn ...

across Lloyds Bank, Halifax, Bank of Scotland and Scottish Widows. You’ll help design, build and enhance a world-class mobile security framework, leading threat modelling, security assessments, penetration testing capabilities and security tooling across Android and iOS platforms. Working within agile teams, you’ll drive continuous improvements … impact and do the best work of your career, you’ve just found itWhat we’re looking for Experience of mobile platform security, threat modelling and mitigation techniquesStrong hands-on experience conducting reviews of mobile application security postureExperience developing and maintaining penetration testing tools, scripts, policies and proceduresIn ...

cyber risk within technology projects by ensuring appropriate security requirements, controls, monitoring, and assurance activities are identified, specified, and evidenced throughout the project lifecycle.Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls.Define monitoring and logging … looking for experience in the following skills:Strong technical knowledge in at least one of the following areas:Public cloudApplication securityNetworkingOn-premises infrastructureUnderstanding of threat modelling, security controls, and risk analysis principles.Ability to assess risks and recommend proportionate security controls and monitoring measures, rather than relying solely ...