76 to 100 of 247 Threat Modelling Jobs in London

providing mitigation recommendations. Support governance, risk, compliance, and assurance activities. Contribute to security roadmaps and continuous improvement initiatives. Provide guidance on cloud security monitoring, threat management, and incident response capabilities. Support managed cloud security service engagements where required. Essential Skills & ExperienceProven experience working as a Security Architect within complex … secure cloud solutions within AWS, Azure, or multi-cloud environments. Deep understanding of security architecture principles, frameworks, and best practices. Experience conducting security reviews, threat modelling, and risk assessments. Strong knowledge of identity and access management, network security, encryption, and security monitoring. Experience integrating security into cloud transformation ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement Design and maintain AI-assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, network access, observability, workload isolation, and third-party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer-facing guidance for safe use of AI coding assistants, AI APIs ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

Infrastructure as Code, and cloud-native engineering practices. Drive cloud security governance, architecture assurance, security remediation, and control optimisation initiatives. Conduct security architecture reviews, threat modelling exercises, risk assessments, and cloud security maturity assessments. Contribute to business development activities, thought leadership, and the continued growth of our Cloud ...

systems we use to guard the firm. Think about this role as some combination of incident responder, detection engineer, security engineer, SOC automation engineer, threat hunter, threat modeler, and security awareness engineer. Our SOC team is involved in engineering (e.g., we built our own SOAR, email content scanning … system, the entire alerting stack and much more) and we handle the incident response and remediation when a threat is found. Our analysts research and prioritise what threats need to be monitored, hunt for them in our data, write code to detect them and constantly tune the detection ...

role in helping to shape our client’s transformation journeys. Identify business objectives, user needs, risk appetite and cyber security obligations Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to ‘Secure by Design’ principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...

Infrastructure as Code and cloud-native engineering practices Drive cloud security governance, architecture assurance, security remediation and control optimisation initiatives Conduct security architecture reviews, threat modelling, risk assessments and cloud security maturity assessments Contribute to business development, thought leadership and the continued growth of the Cloud Security practice ...

Doing Lead the design and assurance of secure architectures across complex Defence, Government, CNI and mission-critical environments. Define security requirements, threat models, architectural principles and proportionate security controls across the system lifecycle. Identify and manage security risks across high-level and detailed solution designs, providing practical mitigation strategies … Framework (CAF), NIST and ISO 27001 . Experience applying risk-driven security architecture methodologies to complex systems and environments. Strong understanding of security requirements, threat modelling, risk assessment and security controls. The ability to communicate complex technical risks and recommendations to both technical and C-level audiences. Experience ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture … building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack ...

such as Wiz, Microsoft Defender, and ArmorCode. Prioritise and coordinate remediation efforts based on business impact, exploitability, and risk exposure. Conduct security assessments and threat modelling exercises for new projects and technologies. Ensure security controls align with SOC2, ISO27001, CIS Controls, and organisational risk management requirements. Produce reports … support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. Skills and Experience Essential Microsoft Entra ...

secure coding training, workshops and awareness sessions. Mentor development teams and promote security-first engineering practices. Drive adoption of secure development standards and methodologies. Threat & Vulnerability Management Support application vulnerability management activities. Assist development teams with vulnerability triage and remediation planning. Identify recurring weaknesses and opportunities for continuous improvement. … into CI/CD pipelines. Strong understanding of OWASP Top 10 and common vulnerability classes. Experience with API and web application security. Knowledge of threat modelling techniques and methodologies. Experience working closely with software engineering teams in enterprise environments. Ability to read and understand code in languages such ...

Secrets Manager, ECS, Aurora and access controls Identity and access management across the business, including Cloudflare Zero Trust Security within the engineering lifecycle, from threat modelling and secure design reviews through to vulnerability management and secure development practices CI/CD and software supply-chain security, including dependencies ...

guidance, and where required production of an action plan for vulnerabilities identified with clear recommendations and outcomes to mitigate and address. Delivering risk, threat modelling and analysis for systems, applications and infrastructure. Designing proportional security controls to bring risk within appetite, leveraging native cloud technologies. Producing security architecture ...

patterns Integrate security tooling and automated controls intoCI/CD pipelines, including SAST/DAST tooling, secrets scanning, and policy-as-code enforcement Conduct threat modelling exercises, cloud security posture reviews, and risk assessments for cloud platforms and workloads Work within scaled agile delivery teams, contributing security requirements ...

Enterprise Security Architecture or Security Solutions Architecture to develop and own: Identify business objectives, user needs, risk appetite and cyber security obligationsIdentify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controlsVerify and evidence alignment to 'Secure by Design' principles, corporate security policy/standards … NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelinesIn-depth knowledge of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. Minimum of 10 years of experience in Cyber SecurityAny 2 of the following certifications CISSP, CISM, CCSP, CRISC or equivalent experience3+ years ...

challenges that span multiple technology domains. Job responsibilitiesCultivate a security culture with your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your product across ...

executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security ...

products across Consumer, OTC and MRE lines. This is a senior, hands-on role: you'll design and run the secure development lifecycle, lead threat modeling and architecture review, own the security debt lifecycle for product engineering teams, and architect the automated pipelines that protect billions in transaction volume. … Driven SDLC Innovation: Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into our secure development lifecycle. Threat Modelling & Architecture Reviews: Lead STRIDE/attack-tree threat models for sensitive flows including authentication, payment, custody, reconciliation and sign ...

define risk appetite and make informed decisions about whether an initiative is ready to progress. Alongside engineers, you'll get into the technical detail - threat-modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes. From POC to production, you'll bring the two sides … implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review AI architectures, guardrails, evaluations ...

influence secure solution design. Research emerging technologies and develop innovative approaches to challenging security problems. Contribute to the development of reference architectures and threat models. Support the delivery of secure technology solutions across major public sector and government programmes. Key Skills & Experience The organisation is looking for Security Consultants … Sign-On (SSO) and Identity and Access Management (IAM/IDAM). Network security and encryption. IT infrastructure, technical concepts and solution design methodologies. Threat modelling and security architecture development. Identifying security vulnerabilities and assessing their potential business and technical impact. Communicating security risks and recommendations ...

response capabilities for AI-related threats and misuse scenarios. Identify opportunities to use AI to enhance cyber security operations, such as alert triage, threat analysis, playbook automation, knowledge retrieval, and workflow optimisation. Stay current on evolving risks, attack techniques, regulations, and industry practices related to AI security … systems, including prompt injection, data exfiltration, insecure model access, supply chain risks, model poisoning, and sensitive data exposure. Experience conducting architecture reviews, threat modelling, and security assessments for complex technical solutions. Ability to translate technical risk into clear, practical guidance for both engineering and non-technical stakeholders. Strong ...

DevOps teams to embed security tools (e.g., SAST, DAST, SCA) into CI/CD pipelines. Help maintain and improve automated security testing workflows. Support threat modelling and secure design practices at the project level. Participate in security reviews of new features and applications. Security Testing and ToolingOversee … DevSecOps environments. Hands-on experience with security testing tools (e.g., Veracode, SonarQube, Burp Suite, etc.).Familiarity with secure coding practices, OWASP Top 10, and threat modelling. Experience working in Agile or DevOps-driven environments. Strong verbal and written communication skills. Relevant security or DevSecOps certifications (e.g., CSSLP, CEH, GWEB ...

architecture and secure solution design. Identity & Access Management (IAM/IDAM), Privileged Access Management (PAM), Single Sign-On (SSO), network security and encryption technologies. Threat modelling and reference architecture development. Cloud and/or network security. Working within large enterprise or public sector environments. Excellent communication and stakeholder ...

solving skills, with the ability to assess complex security risks and develop effective mitigation strategies. Further Experienced in: Identifying security flaws in solutions through threat modelling, risk analysis, architectural assessments and design reviewsCurrent security vulnerabilities and threats specific to AI/ML, MITRE ATLAS framework and OWASPIdentity ...

effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data. Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices. Consults on security direction, maintaining a vigil over prudent assurance ...