1 to 25 of 37 Threat Modelling Jobs in the North of England

Newcastle, offering the opportunity to work with a diverse portfolio of clients, helping them strengthen their security posture and manage risk in an evolving threat landscape.You will play a key role in delivering security advisory services, conducting assessments, and supporting organisations in aligning with industry standards and best practices. … role will also involve supporting clients with modern security challenges, including threat modelling, secure-by-design practices and emerging AI security considerations. Key Responsibilities Provide expert guidance on information security strategies, frameworks and best practices. Conduct security risk assessments, gap analyses and audits. Support clients in achieving ...

Newcastle, offering the opportunity to work with a diverse portfolio of clients, helping them strengthen their security posture and manage risk in an evolving threat landscape. You will play a key role in delivering security advisory services, conducting assessments, and supporting organisations in aligning with industry standards and best … practices. The role will also involve supporting clients with modern security challenges, including threat modelling, secure-by-design practices and emerging AI security considerations. Key Responsibilities Provide expert guidance on information security strategies, frameworks and best practices. Conduct security risk assessments, gap analyses and audits. Support clients ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through … SAST/DAST tooling, API security, and container security in agile delivery contexts.Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through … SAST/DAST tooling, API security, and container security in agile delivery contexts.Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance ...

purpose solutions. Supporting the security triage of proposed solutions and identifying the resources, timescales and expertise required. Conducting security risk assessments using recognised threat-modelling techniques. Producing high-level and low-level security designs for high-security-impact workstreams. Defining security requirements based on risk-assessment findings, organisational … secure solutions across varied technology environments. You will also have: Experience providing security architecture and assurance support to enterprise-scale programmes. Strong knowledge of threat-modelling techniques such as STRIDE, DREAD and MITRE ATT&CK. The ability to translate risk assessments into structured, high-quality security requirements ...

engineering teams to identify automation opportunities. Documentation – Produce clear documentation to support delivery, troubleshooting, and continuous improvement. Automation Planning – Contribute to automation roadmaps, threat modelling, and use case development. Pre-Sales Support – Assist with demos, scoping, and proof-of-value activities where required. Core Duties Automation Design & Development … Develop reusable scripts, templates, and components Ensure solutions support secure, multi-tenant environments Integration & Response Automation Orchestrate containment, enrichment, and remediation actions Integrate with threat intelligence, cloud, vulnerability, and reporting tools Partner with analysts to map and automate response processes Lifecycle Management & Optimisation Manage automation from design through ...

engineering, platform, and central architecture/governance teams, they run design and governance forums and influence without authority. They'll bring genuine cybersecurity expertise-threat modelling, security controls, identity and access, encryption, logging, and secure SDLC-so CSA's platforms and products can be trusted in production … premise hosting; hands-on experience with Azure, AWS and/or GCP is beneficial. You will also have proven security architecture expertise, including: Threat modelling and secure-by-design practices. IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication. Encryption in transit/at rest ...

engineering, platform, and central architecture/governance teams, they run design and governance forums and influence without authority. They'll bring genuine cybersecurity expertise-threat modelling, security controls, identity and access, encryption, logging, and secure SDLC-so CSA's platforms and products can be trusted in production … premise hosting; hands-on experience with Azure, AWS and/or GCP is beneficial. You will also have proven security architecture expertise, including: Threat modelling and secure-by-design practices. IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication. Encryption in transit/at rest ...

based hybrid team. You will advise clients on security strategies, conduct assessments, and help strengthen risk management across a diverse portfolio. The role covers threat modelling, secure-by-design practices, and regulatory alignment with ISO 27001, NIST and GDPR, with a focus on client-facing delivery and proactive ...

contract where you can lead the security workstream on a genuinely high-profile project? Do you enjoy working across the full lifecycle, from threat modelling and risk assessment through to customer-facing assurance documentation? My client is an established manufacturer of precision technology, delivering solutions used across … into the Embedded Software Engineering Manager. Your responsibilities: Your day-to-day work will involve identifying vulnerabilities and developing the project's risk assessment, threat model and security architecture, ensuring security risks are proportionately treated and clearly evidenced. You'll be advising engineering teams on security controls across ...

DevOps, and operational teams, you will contribute to cloud architecture designs, automate security remediation processes, and provide proactive insights into cloud risks, vulnerabilities, and threat mitigation strategies. You will leverage your expertise in cloud security, infrastructure as code, CI/CD pipelines, containerisation, and governance frameworks to ensure that … software development lifecycle practices. Identify, assess, and mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while ...

scalable solutions.What you’ll be doing: Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments.Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift.Partner … expertise and a passion for security! Here’s what we need:Governance, Risk & Compliance: Risk-based decisions, adherence to regulatory and internal security standards.Threat Modelling and Risk Management: Identify threats and mitigations for complex cloud systems.Cloud Security Expertise: broad knowledge across the following Security Domains and their capabilities within ...

security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills ...

redesign of Segregation of Duties (SoD) rule sets during business process transformation. Integrate legacy and modern SAP platforms with enterprise IAM solutions. Conduct threat modelling and security assessments throughout the migration lifecycle. Ensure secure transition from traditional ABAP security models to modern SAP HANA and cloud security frameworks. ...

depth, zero trust, least privilege, and secure by design approaches (A, I, P) Strong risk and assurance capability, including conducting risk assessments and threat modelling, developing risk management strategies, and leading internal and external security audits, assessments, and penetration testing aligned to frameworks such as CAF and NIST ...

DevOps, and operational teams, you will contribute to cloud architecture designs, automate security remediation processes, and provide proactive insights into cloud risks, vulnerabilities, and threat mitigation strategies. Drive continuous improvements and enhancements to cloud infrastructure in alignment with business strategy, budget, and security objectives. Design, build, and maintain secure … software development lifecycle practices. Identify, assess, and mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while ...

/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience ...

remediation), patch management, endpoint protection/anti-malware, and access control management (e.g., IAM/PAM), including driving findings to closure.Working knowledge of threat modelling and risk assessment, applied to cloud architectures and CI/CD pipelines to guide secure design and prioritised risk treatment.Experience with AppSec tooling ...

adversarial assessments where needed, and translating findings into practical actions. Using your expertise, you’ll design and deploy AI-driven security capabilities such as threat detection, anomaly detection and incident response. You’ll also advise on risk, compliance and regulation, ensuring we continue to meet industry standards … capabilities.Experience with security frameworks and regulations, such as ISO 27001, NIST and UK GDPR. (5+ years exp)Demonstrated experience in conducting risk assessments, threat modelling, and security audits. (5+ years exp)Good communication, project management, and organisational skills, with a high level of attention to detail.Ability to collaborate ...

adversarial assessments where needed, and translating findings into practical actions. Using your expertise, you’ll design and deploy AI-driven security capabilities such as threat detection, anomaly detection and incident response. You’ll also advise on risk, compliance and regulation, ensuring we continue to meet industry standards … capabilities.Experience with security frameworks and regulations, such as ISO 27001, NIST and UK GDPR. (5+ years exp)Demonstrated experience in conducting risk assessments, threat modelling, and security audits. (5+ years exp)Good communication, project management, and organisational skills, with a high level of attention to detail.Ability to collaborate ...

Consultant Shaping and reviewing security architecture for complex IT and digital platforms Assessing cyber risks and identifying weaknesses early in the design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR ...

Consultant Shaping and reviewing security architecture for complex IT and digital platforms Assessing cyber risks and identifying weaknesses early in the design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR ...

architectures and solution designs (e.g. Privileged Access Management, SSO, IDAM, network security, encryption) Understanding of IT infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and/or cloud security experience preferred SABSA/ ...

Experience working in enterprise cloud environments (Azure, AWS, GCP). Experience building cloud infrastructure and using cloud IaC tooling (Terraform, Cloudformation, BICEP) Experience in threat modelling, security reviews and testing. Proficiency in scripting languages: PowerShell, Bash, Python and behaviour-driven design Strong familiarity with security standards, security controls ...

Quality Engineering & Secure Development: Create automated tests, including unit, integration, and functional tests. Apply secure-by-design principles in all coding activities, participating in threat modelling where appropriate. Contribute to code reviews and continuously improve code quality within the squad. Maintain documentation for services, features, and reusable components. ...