51 to 75 of 315 Threat Modelling Jobs in London

Senior Security Engineer - AI, you will: Design and develop security solutions for AI-driven and agentic systems. Conduct both traditional and AI-specific threat modelling and risk assessments. Support the embedding of security controls throughout the end-to-end agentic SDLC, including design, testing, release and governance. Develop … ideally with a hands-on background in Application Security or Infrastructure Security. Strong understanding of core security principles, controls and architectures. Proven experience in: Threat modelling Secure system design Embedding security within the Software Development Lifecycle (SDLC) Exposure to AI and agentic systems, either through practical implementation ...

automation that prevent material weaknesses reaching production Secure the software supply chain through trusted dependencies, SBOMs, artefact signing, provenance and workload identity Lead threat modelling and security design reviews for complex products and platforms Diagnose vulnerabilities and misconfigurations, reduce false positives and work directly with engineers on prevention … application testing, dependency analysis, secrets detection, container and cloud posture tooling Ability to write maintainable code, scripts, integrations and policy-as-code Experience leading threat modelling and resolving complex security design trade-offs Ability to assess emerging AI and agentic engineering practices pragmatically and establish proportionate controls Ability ...

backend services and cloud platforms. You will define secure development standards and guide teams to build defensible architectures without slowing delivery. Lead threat modelling across authentication, data protection and public interfaces, implement SAST/DAST/SBOM tooling, and drive encryption and runtime defenses. #J-18808-Ljbffr ...

risk within technology projects by ensuring appropriate security requirements, controls, monitoring, and assurance activities are identified, specified, and evidenced throughout the project lifecycle. Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls. Define monitoring … Skills and Experience Strong technical knowledge in at least one of the following areas: Public cloud, Application security, Networking, On-premises infrastructure. Understanding of threat modelling, security controls, and risk analysis principles. Ability to assess risks and recommend proportionate security controls and monitoring measures, rather than relying solely ...

they’re effectively configured, maintained, and scaled as the business grows Embed secure-by-design practices into the development lifecycle — from secure coding and threat modelling to design reviews and CI/CD hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure … like OWASP and AWS Well-Architected to real-world scenarios Have experience reviewing and improving product and infrastructure security, including secure SDLC practices (e.g. threat modelling, secure code review, CI/CD hardening) Are familiar with compliance frameworks like ISO 27001 or SOC 2 , and can translate technical ...

Build for long-running, concurrent offensive-security workloads, owning the reliability, capacity, latency and cost characteristics that come with them. Engineer for an unusual threat model. Our platform intentionally runs offensive tooling against customer environments. Authorisation, tenant isolation, secrets, controlled execution, threat modelling and auditability are fundamental … reliable afterwards. You're comfortable across containers, cloud infrastructure and infrastructure-as-code. You have strong security instincts. You understand authorisation, secrets, isolation and threat modelling, and know when a design deserves suspicion. AI is already part of how you engineer software. You've gone beyond autocomplete ...

Performance: Design solution‐wide UI resilience (graceful degradation, back‐pressure, retry strategies) and own performance standards across web and mobile. Quality, Security & Compliance: Own threat modelling and security hardening for tribe front‐end products; maintain high standards through code review, secure coding practices, and risk management. External Representation … zero‐downtime deployments, observability, performance budgets). Experience with Azure development and cloud‐based infrastructure , including CI/CD and pipeline observability. Experience owning threat modelling and security hardening for front‐end products; strong grasp of OWASP and secure coding practices. Track record of originating and shepherding cross ...

client is a global investment management company. Job Title Cyber Threat Intelligence Analyst The Role The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business … leadership, and external organizations such industry peers and intelligence sharing partners. In this role you will Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sources Actively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholders Conduct tactical ...

help reduce cyber risk across client technology projects within the UK health, public sector, Defence and Central Government. You will define security requirements, perform threat modelling, and ensure effective controls and monitoring throughout the project lifecycle. You will work on cutting‐edge security challenges and collaborate with ...

London/GlasgowThe AI Security Engineer is responsible for securing AI platforms and systems against adversarial threats. The role focuses on technical security controls, threat modelling, red teaming, and continuous monitoring of AI systems. Responsibilities: Design and implement security controls for AI and LLM systemsPerform AI-specific threat modelling and risk analysisLead red team and blue team testing of AI platformsConduct prompt injection and adversarial testingImplement monitoring, logging, and alerting for AI behaviourSecure AI pipelines, APIs, and orchestration layersSupport secure deployment and CI/CD practicesSkills & Experience: Strong background in security engineering and cloud securityHands ...

. The mission is a scalable, proactive approach to securing the bank's mobile apps so engineers can operate with confidence in an evolving threat landscape. You will help build, deliver, and drive the security of the mobile platform, including the design and delivery of a world-class security … security framework for the mobile platform and associated services (penetration testing, research, consultancy) Conduct regular hands-on reviews of mobile application security posture Apply threat modelling and mitigation techniques across the mobile channel Develop and maintain pen-testing security tools, scripts, policies, and procedures Research emerging technologies ...

security within the product. Key Responsibilities and Technologies Championing security throughout the FortiDLP product. Help maintain up-to-date and vulnerability-free dependencies. Threat modelling, design and code review. Maintaining and tuning automatic vulnerability checks within Continuous Integration systems. Triage findings of scanning tools and ensure prompt remediations. … least 3-5 years of software engineering experience. Familiarity with computer science fundamentals and backend development concepts. Experience in Golang. Experience with threat modelling and security concepts. Some familiarity with Checkmarx/Trivy/Kics or similar tools, as well as DAST tooling in general. Communication and Collaboration ...

applied to architectures, technical decisions, and third-party integrations. Your work will involve maintaining and prioritizing the product's security backlog, coordinating risk assessments, threat modelling, and vulnerability assessments, and ensuring that required security controls (e.g., access control, encryption, secure configuration) are implemented and evidenced. You will monitor … ensure "security by design and by default" across architectures, user stories, technical decisions, and third-party integrationsProficiency in coordinating product-level security risk assessments, threat modelling, and vulnerability assessments, as well as maintaining a prioritized security backlogExperience interpreting and cascading central security policies, standards, and regulatory requirements into ...

applied to architectures, technical decisions, and third-party integrations. Your work will involve maintaining and prioritizing the product’s security backlog, coordinating risk assessments, threat modelling, and vulnerability assessments, and ensuring that required security controls (e.g., access control, encryption, secure configuration) are implemented and evidenced. You will monitor … security by design and by default” across architectures, user stories, technical decisions, and third-party integrations Proficiency in coordinating product-level security risk assessments, threat modelling, and vulnerability assessments, as well as maintaining a prioritized security backlog Experience interpreting and cascading central security policies, standards, and regulatory requirements ...

influencing projects from inception through to deployment while providing practical, pragmatic security guidance. Key Experience Secure by Design & Security Assurance Security Architecture & Design Reviews Threat Modelling & Risk Identification Microsoft Security Stack (Identity, Endpoint, Cloud & Monitoring) Security Platform Configuration & Support Security Standards, Controls & Governance Vendor & Security Tool Management Stakeholder … Across Engineering & Delivery Teams What You'll Be Doing Embed security into projects and programmes from day one Conduct security design reviews and lightweight threat modelling Drive security assurance throughout the delivery lifecycle Enhance configuration, adoption and effectiveness of security platforms Support onboarding and implementation of new security ...

continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

demonstrate continuous compliance with stringent standards such as PCI DSS and 3DSDrive security infrastructure deployments across our growing environmentsPerform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actionsLead … implementation (CKA, CKS qualifications are a plus)Experience with Infrastructure as Code and infrastructure provisioning tools, particularly TerraformExperience configuring GCP-native security posture and threat management with Security Command CenterExperience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact AnalysisExperience with key and secret management ...

continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

financial services organisation is seeking a Cyber Security Engineer to join its Proactive Security function. This role will focus on strengthening security capabilities through threat detection, security engineering, automation, and proactive defence initiatives across a complex enterprise environment. Permanent (£70k - £80k) London/Hybrid Must have UK citizenship/… Visa/EU settled status Key Responsibilities Threat Modelling & Security Engineering Develop and maintain threat models for business-critical systems and services. Assess security risks and recommend controls during project design and implementation. Build and maintain capabilities for proactive detection, configuration monitoring, and automated remediation. Lead security ...

Help reduce cyber risk across technology programmes by identifying, defining, and assuring appropriate security requirements, controls, and risk treatments throughout the project lifecycle. Conduct threat modelling exercises using industry frameworks such as MITRE ATT&CK to identify credible threats and recommend proportionate security controls. Design and advise … following domains: Cloud security (Azure, AWS, GCP) Network security Identity and Access Management (IAM) Application security/DevSecOps Infrastructure and platform security Continuous Threat Exposure Management Ability to analyse technical risks and communicate recommendations to both technical and non-technical stakeholders. Strong written, verbal, and presentation skills. Demonstrated ability ...

both technical and non-technical stakeholders. Develop security principles, controls and approaches aligned to client requirements, industry standards and regulatory frameworks. Conduct security assessments, threat and risk assessments, vulnerability assessments and security audits. Advise clients on security controls, emerging technologies and appropriate technical solutions. Work with technology vendors … systems integrator or professional services environment . Strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS . Experience with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to: Identify business objectives, user needs, risk appetite and cyber security obligations Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to:- Identify business objectives, user needs, risk appetite and cyber security obligations- Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls- Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...

architectures and reusable solution patterns Define and author enterprise‐level security policies, controls frameworks, and governance documentation aligned to industry standards Lead risk assessments, threat modelling exercises, and security posture evaluations for cloud platforms and SaaS products, utilising methodologies such as FAIR Drive compliance programmes covering ...

design decisions and raising overall DevSecOps maturity across the organization Lead vulnerability management and remediation across application, pipeline, and cloud environments while participating in threat modeling and architecture reviews to ensure security is embedded at the design level What We're Looking For: Basic Required Qualifications: 8+ years ...