1 to 25 of 31 Threat Modelling Jobs in the South West

skilled Mobile Application Security Specialist with hands‐on experience in securing mobile platforms and applications. The ideal candidate will possess deep expertise in mobile threat modelling, vulnerability assessment, and penetration testing, with a strong understanding of Android and iOS security standards. This role is critical to ensuring … security testing tools, scripts, and frameworks to support penetration testing activities. Define and implement security policies, standards, and procedures for mobile platforms. Perform ongoing threat modelling and risk assessments to proactively address potential security gaps. Collaborate with development and DevSecOps teams to integrate security best practices throughout ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps … Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

programmes Producing technical security evidence including risk assessments and vulnerability analysis Supporting programme teams, architects, and engineers to embed cyber security best practice Conducting threat modelling and cyber risk assessments using recognised frameworks Developing risk treatment plans and implementing mitigation strategies This role is full time, standard … Royal Dockyard. Essential experience of the Cyber Security Lead Strong experience delivering secure by design or cyber security assurance activities Proven ability to conduct threat modelling and risk assessments In-depth knowledge of cyber security frameworks such as NIST, ISO 27001, and ISO 27005 Experience influencing multidisciplinary teams ...

What youll be doing Define security architecture for complex technology solutions. Work across areas including cloud, networking, OT, virtualisation, applications, databases and containerisation. Use threat modelling to identify risks and define security requirements. Provide technical security advice across the design and delivery lifecycle. Apply frameworks including NIST … more of: Cloud and container security IP networking/OT On-premises architecture and virtualisation Application and mobile security Databases and LLMs Threat modelling and security requirements Security risk and control frameworks Protective monitoring, authentication and authorisation Whats in it for you? UK-wide opportunities Associate Manager level ...

Here are some of the areas you could work in: Application Security: Learn how we build security into applications, including vulnerability management, penetration testing, threat modelling and security reviews. Cloud Security: Gain experience of how we protect cloud environments, identify security weaknesses and help teams apply appropriate security … recover. Vulnerability Management: Help identify and track security vulnerabilities, understand the risks they present and work with teams as they are addressed. Threat Modelling & Security Testing: Support security specialists in understanding what could go wrong with new systems and services and how those risks can be reduced. Risk ...

client is a global investment management company. Job Title Cyber Threat Intelligence Analyst The Role The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business … leadership, and external organizations such industry peers and intelligence sharing partners. In this role you will Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sources Actively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholders Conduct tactical ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement Design and maintain AI‐assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, networking access, observability, workload isolation, and third‐party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer‐facing guidance for safe use of AI coding assistants, AI APIs ...

native security controls. Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation. Knowledge of SSDLC practices and threat modelling. Ability to review cloud architectures and technical designs from a security perspective. Understanding of authentication and authorization patterns. Strong communication and collaboration skills ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

business and security requirements, and translate them into practical architectural solutions. Working knowledge of architectural frameworks such as SABSA and TOGAF. Strong understanding of threat modelling, risk assessment, and secure-by-design principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards ...

such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews. Strong troubleshooting, documentation, and cross-functional communication skills. Personal Team player with strong communication skills Competent ...

network, application, data and endpoint layers Lead security architecture reviews and technical security assessments Design zero-trust security models and continuous verification frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations Design security solutions supporting Information Security Management System (ISMS) compliance Architect compliance and audit ...

challenges that span multiple technology domains. Job responsibilities Cultivate a security culturewith your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your productacross its breadth ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape.The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape.* Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

architecture, ideally with exposure to cloud/SaaS security and vendor risk Working knowledge of LLM and generative AI architectures, data flows and associated threat models, including prompt injection, data leakage, model access control and agentic tool-use risk Familiarity with regulatory frameworks relevant to the sector, including DORA ...

cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities and remedial action plans. Coordinating with product ...

cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities and remedial action plans. Coordinating with product ...

SABSA and Zero Trust principles* Ensure systems are secure by design, proportionate, and aligned to mission objectivesOwn risk and assurance outcomes* Lead threat modelling, risk identification, and mitigation strategies across programmes* Provide authoritative guidance on risk trade-offs and security posture* Oversee security assurance, accreditation, and compliance activities ...

implementing enterprise security architecture and controls. Strong knowledge of information security frameworks, standards, and best practices. Experience conducting security risk assessments, vulnerability analysis, and threat modelling. Experience working with cloud platforms and supporting cloud transformation programmes. Ability to engage effectively with both technical and non-technical stakeholders. Strong documentation ...

International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy … Code Leadership - Champion Infrastructure as Code (IaC) and Security-as-Code practices, including policy enforcement, security linting, and automated compliance validation across cloud environments. Threat Modeling & Architecture Reviews - Lead advanced threat modeling (e.g., STRIDE-LM) for pipelines, microservices, and cloud-native applications, and conduct architecture reviews to drive ...

Security Design Review & Assessment Conduct detailed security reviews of IT architecture and design documentation. Assess security controls and identify gaps against security requirements. Evaluate threat models and security assumptions underlying IT designs. Review security specifications for completeness and compliance. Identify residual security risks and recommend mitigation strategies. Support authority … design principles. Technical Knowledge Comprehensive understanding of IT security controls and security frameworks. Strong knowledge of network, infrastructure, application and data security. Understanding of threat modelling and risk assessment methodologies. Knowledge of ITAR regulations and export control requirements. Understanding of security standards (ISO 27001, NIST CSF, etc.). ...

work across security controls, risk management, and zero-trust principles in a hybrid London-based environment. You will engage with public sector projects, perform threat modelling, define security policies and support secure procurement and supplier assessments, while growing through broad exposure #J-18808-Ljbffr ...

C++.Awareness of key architectural patterns/approaches, algorithms, data structures, cryptography, security protocols (e.g., TLS and OAuth/OIDC), secure system design and Threat Modelling. Certified Kubernetes and public cloud knowledge (e.g. CKAD and AWS certifications).J.P. Morgan is a global leader in financial services, providing strategic advice ...