25 Threat Modelling Jobs in London

patterns for security architecture Design effective application security solutions aligned to the Information Security and business strategy. Act as Subject Matter Expert for Application threat modelling, secure coding practices in Java and C++, and DevSecOps practices. Contribute to the security technology roadmap, policies and standards. Support development teams … in implementing threat modelling, secure development practices and use of application security assurance tools. Ensuring that architecture and solution designs are secure by design Developing Application based security policies and standards Experience Required: Strong professional background in Financial Services Outstanding understanding of Application Security Strong experience developing patterns … for application security architecture Subject Matter Expertise in application threat modelling, secure coding practices in Java and C++, and DevSecOps practices Experience of automated build and deployment pipelines Experience of operating one or more of SAST, SCA, DAST, IAST, MAST Relevant qualifications or certifications To be considered, please more »

they are looking for experienced Cyber Security Engineers to hit the ground running on various projects across Security Architecture, DevSecOps, Application Security, Cloud Security, Threat Modelling, and more. This role will be ideal for someone who has experience in the security engineering space and is ready to take … and operations teams to promote a culture of security throughout our client. Implement and maintain security tools and technologies in the DevOps environment. Conduct threat modelling exercises to identify potential security threats and risks. Develop and maintain threat models for applications, systems, and infrastructure. To be considered … prior experience in cyber security engineering, with a focus on any or multiple of the following: application security, security architecture, cloud security, DevSecOps, and threat modelling. Strong understanding of security principles, protocols, and technologies. Experience with security assessment tools and techniques. Excellent communication and collaboration skills, with the ability more »

patterns for security architecture Design effective application security solutions aligned to the Information Security and business strategy. Act as Subject Matter Expert for Application threat modelling, secure coding practices in Java and C++, and DevSecOps practices. Contribute to the security technology roadmap, policies and standards. Support development teams … in implementing threat modelling, secure development practices and use of application security assurance tools. Ensuring that architecture and solution designs are secure by design Developing Application based security policies and standards Experience Required: Strong professional background in Financial Services Outstanding understanding of Application Security Strong experience developing patterns … for application security architecture Subject Matter Expertise in application threat modeling Strong understanding of secure coding practices in Java and C++, and DevSecOps practices Experience of automated build and deployment pipelines Experience of operating one or more of SAST, SCA, DAST, IAST, MAST Relevant qualifications or certifications To be more »

overseeing application security testing, prioritising the resolution of security vulnerabilities, and increasing automation Show experience identifying potential threats and attacks to applications systems through threat modelling (PASTA and STRIDE) Demonstrate experience with threat modelling theories and application architecture reviews Have experience of monitoring security systems for more »

will engineering teams to create solutions that solve or remediate security problems. This will involve a range of activities, including (but not limited to) threat modelling, selection and configuration of DevSecOps tools, high-level and detailed security designs. About you We are looking for a Senior Security Engineer … with experience in design and implementing cloud native applications in the cloud. You should have demonstrable experience in Threat modelling, design and implementing security controls in the cloud environment (AWS or Azure) Design and implementing cloud native and hybrid solutions in major public cloud platforms. Understanding of cryptographic more »

ensuring systems are resilient against emerging threats. The position will be hands-on from day 1, as such it will require recent engineering experience, threat modelling experience and cloud security. Role responsibilities: Build and lead team Collaborate with engineering teams to improve SDLC and hardening of systems Cloud … Security Threat Modelling Code/Architecture reviews Requirements: Application/Product Security Engineering experience Leadership/Management experience Cloud native/first security experience (AWS/Azure) Please apply for more information. more »

Develop and implement security design standards and frameworks Collaborate with engineering and product teams to incorporate security considerations into product design and development Conduct threat modelling, vulnerability assessments, and security code reviews to identify potential security issues Develop and maintain a secure software development lifecycle (SDLC) to ensure … security is integrated at every stage Educate and train engineering and product teams on security awareness and best practices Experience with threat modelling, risk assessment, and the development of mitigation strategies The Senior Product Security Engineer is a high-profile role with significant business and technology engagement. This more »

Line of Service Assurance Industry/Sector Not Applicable Specialism Assurance Management Level Senior Associate Job Description & Summary PwC’s Global Threat Intelligence team is seeking strategic intelligence analysts who have a passion and aptitude for helping consumers understand the who, what and why of organised crime and espionage … activity, and applying critical thinking concepts to distil non-technical and technical information into robust assessments. PwC’s Global Threat Intelligence practice focuses on the identification of novel intrusion techniques and tracking of several hundred threat actors, ranging from organised crime groups to state affiliated espionage actors, originating … from more than 25 countries. The practice is responsible for the development and delivery of technical and strategic threat research and intelligence services and provides: Subscription and bespoke research services to public and private sector intelligence clients globally; Intelligence support to, and collection from incident response and managed threat more »

risks. Act as a subject matter expert on security-related matters, collaborating with stakeholders to address security concerns and implement effective solutions. Participate in threat hunting and threat modelling activities. To be considered for this role, you should have: Must have a strong background in a security more »

office, 4 days remote working, work from home Key Skills: Continuous Integration (CI), Continuous Deployment (CD), Infrastructure as Code (IaC), Security Automation, Vulnerability Management, Threat Intelligence, Secure Software Development Lifecycle (SSDLC), Compliance as Code, Security Orchestration, Container Security, Microservices Security, Threat Modelling, Secure Configuration Management, Secure DevOps more »

Compliance Engineer, you will play a crucial role in ensuring the safety and security of our organization's systems and data. With the constant threat of cyber attacks and the ever-evolving regulatory landscape, your expertise in security risk management and compliance will help us maintain a robust security … security risk management & compliance in ISO 27001, GDPR, PCI DSS Strong understanding of network security principles and practices Experience in conducting risk assessments and threat modelling Generally proficient in Linux operating systems (e.g., Red Hat, CentOS, Alma, ubuntu) Familiarity with security technologies, including firewalls, intrusion detection systems, and more »

Kibana), Dynatrace, AppDynamics, Grafana and Prometheus Deployment of Docker containers (micro services) with Helm and Kubernetes (or Red Hat OpenShift) · Experience with DevSecOps in threat modelling, vulnerability testing, and incident management. Experience in security tolling and techniques e.g. Protectively Marked Systems, Splunk, GuardDuty, Nessus, Snort, OWASP, SonarQube, Snyk more »

the CI/CD pipeline and automate security testing and compliance checks. Provide guidance and support to development teams on secure coding practices and threat modelling techniques. Collaborate with cloud architects to design and implement secure cloud environments. To be considered for this role, you should have: Must more »

collaborate closely with software and cloud engineering teams to embed best practices and fortify our client's security posture. Key Responsibilities: Perform continuous security threat modelling, risk, capability, and/or maturity assessments. Integrate security seamlessly into the development process Collaborating with development and DevOps teams to create more »

framework. Support in the development/design and management of Product/Platform security processes and automated tooling that prevent security issues. Lead on threat modelling exercises for our products. Perform security-focused code reviews. Prioritise and oversee vulnerability remediation. Manage the implementation of logging and integration to more »

process • Establish and execute on forward looking application security strategies that enables proactive secure application development • Collaborate with development teams in conducting security reviews, threat modeling, and code analysis to identify and mitigate security vulnerabilities. • Provide guidance and training to developers on secure coding practices, security best practices, and more »

such as SABSA and TOGAF Be able to be client-facing and translate technical information into easy-to-understand non-technical formats Understanding of Threat Modelling using the likes of STRIDE etc Previous experience in a Consulting role being able to provide Technical Consultancy/Technical Delivery If more »

controls and NIST Guidelines Experience in implementing security automation using scripting languages e.g. Python and infrastructure-as-code (IaC) tools Ability to perform security threat modelling and risk assessments to identify and prioritize security risks Experience with security incident response and handling, including log analysis and forensics Outstanding more »

within your current role, my client will be very interested in speaking with you. You will be training developers on writing secure code, perform threat modelling and security testing of applications, run SAST, DAST, SCA and secret scanning tools, manage the bug bounty program and lead incident response more »

technology and business colleagues. Products that have the right security culture will strive to prioritize sustainable controls and driving real risk reduction outcomes.? Embed threat modelling, solutions architecture, secure code review into product and application teams so they adopt our control products and create products that are secure more »

Key responsibilities: Lead the development, deployment, and maintenance of Rego policies Utilise GCP services to design and implement secure microservices and containerised applications Perform threat modeling and risk assessments for GCP deployments If you have a vast exposure to DevSecOps roles with a proven track record as a Security more »

business. Responsibilities: Strategic Security Design : Develop comprehensive security architectures, integrating advanced security practices, to safeguard against emerging threats. Focus on cloud security, AI-driven threat detection, and the adoption of zero-trust principles. Standards and Frameworks : Define and update technical security standards and principles, incorporating industry best practices and … compliance requirements from frameworks such as NIST, ISO, and GDPR. Security Reviews and Threat Modeling : Conduct rigorous security assessments and threat modeling for ongoing and new projects, ensuring designs meet stringent security standards. Implement continuous improvement practices for threat identification and mitigation. Cross-functional Leadership : Lead cross more »

role will support the design, implementation and assurance of technical project demands and applications. Requirements: Experience with end to end assurance Strong experience performing threat modelling High level/Low level design, identifying security risks Third party security posture Scope and organise pen testing Security requirements for RFP more »

CSA-CSM, NIST, COBIT, MITRE is a plus experience in client data confidentiality, EU General Data Protection (EUGDPR), compliance, risk management, risk control, threat modelling is a plus If you match the above criteria, please apply! This role is advertised via Hays Talent Solutions. more »

and compliance. Key Responsibilities: Assist in implementing the company's cyber security strategy. Ensure timely documentation and review of security policies. Conduct ongoing security threat modeling and risk assessments. Integrate security measures into the development process. Design and implement security training programs based on identified needs. Act as a … security tools, monitoring for issues. Define key performance and risk indicators for software security. Review software designs to ensure compliance with security requirements. Manage threat models to identify and mitigate risks during software development. Required Knowledge & Experience: Familiarity with industry-standard application security frameworks. Proficiency in security methodologies and more »