1 to 25 of 96 Threat Modelling Jobs in London

Responsibilities Own and drive the shift‐left security programme, ensuring security is integrated into the earliest stages of the software development lifecycle through threat modelling, secure design patterns, and automated tooling. Manage the security champions programme, recruiting, training, and supporting champions across all product squads. Own the developer … publish the security engagement model for product and engineering teams, including trigger points (new service, new integration, pre‐release), SLAs and escalation paths. Oversee threat modelling for new services and major changes, ensuring threat models are completed before development progresses beyond initial design. Own the security sign ...

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

Cyber Threat Intelligence Analyst Summer-Browning Associates is supporting our client in the Central Government, who is seeking a Cyber Threat Intelligence Analyst for an initial 12-month assignment, with the possibility of extension. Location: London | Hybrid The ideal candidates will hold an active Security clearance and have … proven background in Cyber Security Threat Intelligence, with the following skills and experience: Experience in risk and threat modelling within high-threat government environments. Experience with cyber threat frameworks, such as MITRE ATT&CK, the Diamond Model, and the Intelligence Cycle. Proficiency in using open ...

technology teams. Set and direct a secure SDLC strategy that engineers engage with, coaching and mentoring our application security engineer with running our threat modelling program, embedding security in CI/CD, and iteratively improving our vulnerability management processes. Partner with engineering leadership to ensure risk‐driven supply … with our CISO to shape and implement an AI security posture that is embedded in strong security foundations, helping us stay ahead of the threat landscape rather than reacting to it. Detection, Response & SOC Partnership Own the strategic relationship with our 24/7 outsourced SOC holding them ...

role, between 8:30am-5:30pm Monday to Friday. Shifts: Monday - Friday (37.5 hours per week) The must haves: Extensive hands-on experience with Threat Modelling, SAST, DAST, and web application security, including OWASP Top 10, CWE Top 25, and SANS 25. Hands-on experience with GCP security … solution architectures to ensure appropriate security controls, data protection measures, identity controls, network security, and compliance requirements are incorporated before deployment. Perform AI-focused threat modelling and security assessments, identifying risks such as sensitive data exposure, prompt injection, indirect prompt attacks, model misuse, insecure plugins, excessive permissions ...

design, scalable, and aligned to business and regulatory requirements. Working closely with architecture, engineering, and delivery teams, you will produce high-level designs, conduct threat modelling and risk assessments, and provide architectural leadership throughout project lifecycles. Key Responsibilities Develop high-level security architecture and solution designs for enterprise … technology initiatives. Evaluate emerging technologies and security tooling, providing recommendations and business justification. Conduct threat modelling, security risk assessments, and secure-by-design reviews. Define security controls, network architectures, and data flow models for internal and external integrations. Provide technical guidance to engineering, testing, and delivery teams during ...

secure‐by‐design culture across the business. Key responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers … software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility Please note ...

secure-by-design culture across the business. Key responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers … software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility Please note ...

secure-by-design culture across the business. Key responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers … software development practices Experience working closely with software engineering teams Hands-on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility Please note ...

frameworks including ISO 27005 and NIST RMF Lead risk identification, assessment and treatment across applications, infrastructure and digital services Facilitate structured risk workshops and threat modelling sessions Assess solution architectures to identify security risks and control gaps Review and interpret IT Health Check outputs and define clear remediation … defence Proven ability to engage senior stakeholders and influence decisions Ability to translate technical findings into clear, actionable risk outcomes Confident leading risk workshops, threat modelling and control assessments Experience working within Agile delivery environments Strong analytical capability and sound judgement Any candidates must have an active ...

into complex IT and digital initiatives Advise clients on cyber risk, governance and regulatory compliance frameworks including: ISO 27001 NIST GDPR PCI-DSS Conduct threat modelling and identify security vulnerabilities within solution designs Recommend pragmatic risk mitigation strategies to technical and non-technical stakeholders Support the implementation … IDAM Privileged Access Management (PAM) Single Sign-On (SSO) Network Security Encryption technologies Understanding of infrastructure, architecture methodologies and secure design principles Experience with threat modelling and reference architecture development Excellent stakeholder engagement and communication skills Ability to learn quickly and adapt within fast-paced environments Desirable Experience ...

governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps … Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications ...

What You'll Be Doing Design secure architectures across AWS, Azure and hybrid cloud environments Develop cloud security strategies, governance and security standards Conduct threat modelling and security architecture reviews Embed security into cloud deployments through DevSecOps and automation Advise clients on best practice and modern cloud security … Looking For You'll have experience with several of the following: Cloud Security Architecture AWS, Azure and/or GCP Secure by Design & Threat Modelling Zero Trust principles DevSecOps & Infrastructure as Code Cloud Governance & IAM Relevant cloud security certifications (desirable) What's On Offer ...

Information Security or Information Technology. Strong experience reviewing infrastructure security. Hands‐on cloud security experience across AWS and/or GCP. Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS. Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security ...

secure-by-design role spanning embedded, connected, cloud and software products, not tied to any single sector or regulatory framework. If you thrive on threat modelling, secure architecture and translating standards into practical controls, this one's for you. What you'll be doing: Designing, reviewing and documenting … product, system, application, cloud and infrastructure architectures, advising on IAM, authentication, cryptography, key management, network security, logging, monitoring and data protection. Leading and supporting threat modelling, attack surface analysis and risk assessments, including TARA to ISO/SAE 21434 , from item definition through to attack feasibility rating ...

earn their trust and enable their best work, you need to be genuinely close to the craft — able to engage at depth on threat modelling, agentic security tooling, SDLC design, and application risk. You’ll also own AppSec strategy and be accountable for how the function scales alongside … engineering context into a clear, prioritised programme of work with measurable outcomes. Be a credible technical partner to your team — engage substantively on threat models, security architecture, agentic tooling design, and risk decisions, and be willing to get into the details when it matters. Define and maintain the team ...

hands‐on, on the problems that carry the most risk. Anaplan is not a simple SaaS application. The platform performs highly dimensional, enterprise‐scale modelling with responsive recalculation and strong correctness expectations. The technical surface area includes the legacy Hyperblock engine, the newer Polaris engine, and a growing … tool and authorisation boundaries, and abuse and prompt‐injection defences, informed by references such as MITRE ATLAS and the OWASP LLM Top 10. Lead threat modelling on the riskiest systems: and turn the findings into concrete design changes. Drive secure‐by‐design into the supply chain and attack ...

Governance team The AI Security Engineer is responsible for securing AI platforms and systems against adversarial threats. The role focuses on technical security controls, threat modelling, red teaming, and continuous monitoring of AI systems. Role details Title: AI Engineer/Azure Artificial Intelligence Engineer Location: can be either … programming experience (Python, C#, or Java) Your role will focus on:- Design and implement security controls for AI and LLM systems Perform AI-specific threat modelling and risk analysis Lead red team and blue team testing of AI platforms This is a really interesting role and a great ...

Governance team The AI Security Engineer is responsible for securing AI platforms and systems against adversarial threats. The role focuses on technical security controls, threat modelling, red teaming, and continuous monitoring of AI systems. Role details Title: AI Engineer/Azure Artificial Intelligence Engineer Location: can be either … programming experience (Python, C#, or Java) Your role will focus on:- Design and implement security controls for AI and LLM systems Perform AI-specific threat modelling and risk analysis Lead red team and blue team testing of AI platforms This is a really interesting role and a great ...

Railway Cyber Security) IEC 63452 (Railway Rolling Stock Cyber Security) Conduct or oversee penetration testing activities, vulnerability assessments, architecture reviews, risk assessment and threat modelling for rail clients. Provide expert interpretation of cyber security requirements for railway operators, manufacturers, and integrators. Ensure security recommendations are aligned with safety … environments. Practical experience in penetration testing or security assessment methodologies (not necessarily a full-time tester, but capable). Experience with secure architecture review, threat modelling, and risk assessment in industrial or transport environments. Domain Knowledge In-depth understanding of the rail operational ecosystem, including signalling, rolling stock ...

assurance for large, complex and regulated organisations. Assess cloud, hybrid and on‐premises architectures across identity, networks, applications, platforms and data. Carry out threat modelling and identify credible attack paths, design weaknesses and control gaps. Judge whether proposed or alternative controls provide equivalent, proportionate protection. Review high‐level … should also have: Substantial experience as a practising security architect in large, complex or regulated organisations. Strong command of secure‐by‐design principles, threat modelling and architecture assurance. Practical experience across cloud, hybrid infrastructure, identity, networks, applications and data security. Excellent written English and the ability to explain ...

defence to deliver agentic infosec solutions aligned to our target operating model. Key Responsibilities Design security solutions for AI-driven and agentic systems Conduct threat modelling (AI-specific and traditional) and risk reviews Support the embedding security across the end-to-end agentic SDLC (design, test, release, governance … within information security, ideally with a hands‐on background in application or infrastructure security Solid understanding of core security principles and architectures Experience with: Threat modelling Secure system design Embedding security within the SDLC Exposure to AI and agentic systems (practical or conceptual), including: Security and governance ...

bring your ambition to work every day, which is why, at British Airways the sky is never the limit. The role: Cyber Threat Lead This role reports to the Cyber Threat Intelligence Manager, working with IAG and BA business to ensure BA is identifying, understanding and responding … Leading the effort to identify and report cyber threats relevant to British Airways, covering both tactical and strategic requirements Technical leader for cyber threat identification across BA Support the Cyber Threat Intelligence Manager in active threat management for BA, ensuring timely, specific, and relevant cyber threat ...

bring your ambition to work every day, which is why, at British Airways the sky is never the limit. The role: Cyber Threat Lead This role reports to the Cyber Threat Intelligence Manager, working with IAG and BA business to ensure BA is identifying, understanding and responding … Leading the effort to identify and report cyber threats relevant to British Airways, covering both tactical and strategic requirements Technical leader for cyber threat identification across BA Support the Cyber Threat Intelligence Manager in active threat management for BA, ensuring timely, specific, and relevant cyber threat ...

Looking ForWe are looking for a Principal Threat Modeling Architect. You will be responsible for leading the enterprise Threat Modeling program, establishing threat modeling standards, methodologies, and governance, and building a high-performing team of threat modeling professionals. You will partner with application development, cloud engineering … organization, a function that is critical to the firm's ability to design and deliver secure technology solutions. As cyber threats continue to evolve, threat modeling serves as a foundational security practice that enables the organization to identify architectural weaknesses early, reduce risk, strengthen security-by-design practices ...