1 to 25 of 415 Threat Modelling Jobs in the UK

Threat Modelling Engineer Location: London Working Pattern: 4 days onsite/1 day remote Contract: Initial 6-month contract Rate: £400 - £500 per day Damia Group is supporting a leading organisation in the delivery of a high-profile Cyber Security programme and is looking for an experienced Senior … Threat Modelling Engineer to join the team in London. You will play a key role in identifying and assessing security threats, defining appropriate mitigating controls, and helping to continuously improve the organisation's threat modelling capability. This is a hands-on position combining Threat Modelling ...

Threat Modelling Engineer Location: London Working Pattern: 4 days onsite/1 day remote Contract: Initial 6-month contract Rate: £400 - £500 per day Damia Group is supporting a leading organisation in the delivery of a high-profile Cyber Security programme and is looking for an experienced Senior … Threat Modelling Engineer to join the team in London. You will play a key role in identifying and assessing security threats, defining appropriate mitigating controls, and helping to continuously improve the organisation's threat modelling capability. This is a hands-on position combining Threat Modelling ...

misconfiguration management so that findings are actionable, low-noise and owned by the right teams. Day to day, you'll run practical threat-modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. We're looking … misconfiguration & vulnerability management: experience identifying and reducing infrastructure-as-code and AWS vulnerabilities & misconfigurations at scale through pragmatic guardrails, tooling and clear remediation paths. Threat modelling: confidence running lightweight, practical threat-modelling sessions that lead to useful engineering decisions and risk reduction. CI/ ...

hands-on security engineering role. The role requires someone who can work directly with product and engineering teams, review designs, assess APIs, run threat models, test systems, coordinate penetration testing, identify vulnerabilities, and help teams remediate issues. The role ensures DTS products, APIs, data collaboration capabilities, AI-enabled workflows … scanning, and container scanning. Helping teams triage, prioritise, and remediate security findings. Working with engineering teams to make security checks practical and repeatable. 3. Threat Modelling and Security Design Reviews Run threat modelling and security design reviews for new and changed capabilities. This includes: Facilitating threat ...

hands-on security engineering role. The role requires someone who can work directly with product and engineering teams, review designs, assess APIs, run threat models, test systems, coordinate penetration testing, identify vulnerabilities, and help teams remediate issues. The role ensures DTS products, APIs, data collaboration capabilities, AI-enabled workflows … scanning, and container scanning. Helping teams triage, prioritise, and remediate security findings. Working with engineering teams to make security checks practical and repeatable. 3. Threat Modelling and Security Design Reviews Run threat modelling and security design reviews for new and changed capabilities. This includes: Facilitating threat ...

Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Security Operations Analyst | Cyber Threat Intelligence | Threat ModellingWe are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing … environments. This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat ...

Senior Threat Modelling & Application Security Engineer Day rate: Up to £450 - £500 (Inside IR35) Location: London/Hybrid - 4 days a week onsite Duration: 6 months (Initial) A major organisation is seeking a Senior Threat Modelling & Application Security Engineer to help drive secure-by-design practices … across cloud and application environments. Key Responsibilities Conduct threat modelling using STRIDE, PASTA, ATT&CK and Attack Trees. Identify vulnerabilities and define mitigating security controls. Review technical architectures and support secure SDLC processes. Develop security automation tooling and Python-based applications. Partner with engineering teams to embed security ...

Senior Threat Modelling & Application Security Engineer Day rate: Up to £450 - £500 (Inside IR35) Location: London/Hybrid - 4 days a week onsite Duration: 6 months (Initial) A major organsiation is seeking a Senior Threat Modelling & Application Security Engineer to help drive secure-by-design practices … across cloud and application environments. Key Responsibilities Conduct threat modelling using STRIDE, PASTA, ATT&CK and Attack Trees. Identify vulnerabilities and define mitigating security controls. Review technical architectures and support secure SDLC processes. Develop security automation tooling and Python-based applications. Partner with engineering teams to embed security ...

Threat Intelligence Analyst £594 per day (Umbrella) | Inside IR35 Remote with occasional client site visits Active SC Clearance Required Contract until March 2027 Threat Intelligence Analyst | Cyber Security | Enterprise Security We are currently recruiting for an experienced Threat Intelligence Analyst to join a major cybersecurity programme supporting … critical business and technology operations. This is an exciting opportunity for a security professional with strong experience in Threat Intelligence, Enterprise Security Architecture, Platform Security, and Security Architecture Design to help identify, analyse, and mitigate emerging cyber threats across complex environments. Working within a highly skilled cybersecurity team ...

like you: We're currently hiring a Senior Application Security Engineer to own AppSec end-to-end across our development lifecycle: from design-stage threat modelling through to code review, tooling, and remediation of findings. This is a hands-on engineering role, not a compliance or customer-facing … AppSec programme for Flagstone and report back on its success to relevant stakeholders including leadershipFormalise a secure development lifecycle which includes owning threat modelling and secure design review for new features and systems, working directly with engineering teams during design rather than after the fact, introducing security gates ...

# Security LeadLead security reviews, threat modelling, external testing, report handling and launch sign-off.All open rolesApplyAbout the role## What this role does.EvaEsi is a whole new model line, built on the research from Forlais. It is a significant launch, and you can help shape it.You will lead … security for the platform. That means security reviews, threat modelling, external testing, handling reports and giving the sign-off before launch.We take security seriously and the role comes with the standing to act on what you find.What we look for## Qualifications.* Application security experience on real production systems. ...

Threat Intelligence and Vulnerability Manager 6-Month Contract | Inside IR35 | London 1-2 Days Per Week We're looking for an experienced security leader to take ownership of Threat Intelligence, Vulnerability Management, Threat Modelling, Security Testing and External Threat Hunting capabilities within a complex, high … uncover vulnerabilities, drive assurance activities, and provide the intelligence needed to strengthen enterprise security across IT, OT, physical and people security domains. Key Experience Threat Intelligence & Threat Hunting Vulnerability Management & Risk Prioritisation Threat Modelling & Security Assurance Penetration Testing & Control Validation Security Operations & Incident Readiness Supplier & Security ...

Manager, Security Threat, Vulnerability and Testing (m/f/d) Job Description Manager, Security Threat, Vulnerability and Testing (m/f/d) IN SHORT As Senior Manager, Security Threat, Vulnerability & Testing , you will lead SEFE's enterprise threat intelligence, vulnerability management, security testing … proactive threat detection capabilities. Working across cyber, operational technology (OT), physical security, and people security domains, you will ensure emerging threats and vulnerabilities are identified early, prioritised appropriately, and addressed in line with business risk, resilience, and regulatory requirements. WHAT WILL YOU DO Own and evolve SEFE's enterprise ...

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation. Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies. Act as the technical lead for AI security, helping to establish … incidents, working with internal teams, external SOC providers and specialist partners. Improve vulnerability and exposure management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation. Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory or contractual ...

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

Security design and assurance expertise Knowledge of security frameworks and standards Security Operations Analyst Key responsibilities include: Security operations monitoring and analysis Cyber threat intelligence assessment Threat modelling and risk identification Incident investigation and security event analysis Experience required: Security Operations Centre (SOC) or cyber defence experience … Hands-on threat intelligence and analysis capability Threat modelling expertise Strong understanding of cyber security technologies and processes Threat Intelligence Analyst Key responsibilities include: Production of threat intelligence reports and assessments Analysis of Indicators of Compromise (IOCs) and Tactics, Techniques & Procedures (TTPs) Tracking emerging cyber ...

Lead technical security design across infrastructure, cloud and application environments Collaborate with SMEs across Identity, Security Testing and Privacy Conduct risk assessments and support threat modelling activities Provide clear justification of design decisions to both technical and non-technical stakeholders Ensure alignment to industry standards and government security … Understanding of network security, encryption, authentication and access control Experience with security tooling such as SIEM, IDS, firewalls and vulnerability assessment tools Knowledge of threat modelling and risk assessment TO BE CONSIDERED: Please either apply through this advert or emailing me directly via robin.muirhead@searchability.com. For further information ...

influence architecture, automate security controls, strengthen detection & response, and drive a measurable uplift in our security posture. You'll define our standards, lead threat modelling, and champion secure‐by‐design practices across an engineering organisation that's modernising rapidly and ready for your expertise. Key responsibilities: Security architecture … design: Collaborate with engineering and platform teams to design secure solutions, perform threat modelling and review designs for cloud, container and service‐based architectures. Cloud security: Define and enforce secure configurations, network segmentation, identity and access controls for public cloud (primarily AWS).Application & infrastructure hardening: Implement secure coding ...

workflows that power the business. This role brings the same security discipline we build into our own products to that internal estate: threat modelling, secure design, and technical review for the applications, services, and AI-enabled tools our teams build and use. You'll work closely with … depend on your individual strengths and interests. What You'll DoSecurity architecture and design reviewConduct architecture and design reviews for our applications and servicesLead threat modelling for new tools and features, identifying design flaws and defining security requirementsAdvise engineering and business teams on security best practice as they ...

everything they build. Key Responsibilities Define and evolve Product Security strategy across the Secure SDLC. Embed Secure-by-Design principles into software engineering. Lead threat modelling and security architecture reviews. Build scalable security tooling and automation that integrates into developer workflows. Partner with Engineering and Product teams … security controls. Built Secure SDLC frameworks developers genuinely adopted. Strong software engineering background with the technical credibility to influence engineers. Hands-on experience with threat modelling, Secure-by-Design, security architecture and developer enablement. Experience building security tooling, automation or integrating security into CI/CD pipelines. Remained ...

operating models. Protect cloud environments across network, application, identity, and data layers. Produce security, configuration, deployment, and DevSecOps models for cloud-based services. Conduct threat modelling exercises and security design reviews as part of secure-by-design initiatives. Required Skills & Experience Minimum 3 years' experience working … security architecture principles. Experience designing secure public, private, and hybrid cloud environments. Knowledge of security governance, risk management, and compliance frameworks. Proven experience conducting threat modelling and security design reviews. Experience implementing secure-by-design principles. Familiarity with DevSecOps practices and secure deployment methodologies. Technical Experience Microsoft Azure ...

part of a multi-disciplinary Agile team, you will implement DevSecOps practices throughout the software development lifecycle, embedding security practices (e.g. vulnerability management, threat modelling etc.) and automating security artifact generation (e.g. secret scanning, container security, SAST, DAST etc.). You will provide subject matter expertise in application … delivery teams. Verifying the implementation of security principles, architectural patterns, and requirements. Driving the adoption of cyber security practices (e.g. vulnerability management, threat modelling etc.) within Agile delivery teams. Putting people first & developing others Youll help coach and develop more junior members of the team. Minimum (essential) requirements ...

technical evaluations of supplier cybersecurity posture, control maturity, and architectural resilience, particularly for the firm's most critical and complex third-party relationships. Perform threat modelling against supplier environments to identify potential security risks and develop mitigation strategies tailored to the firm's risk appetite. Evaluate supplier security … credible challenge and expert advisory input. Drive the evolution of the third-party assurance methodology by embedding deeper technical assessment capabilities, including architecture reviews, threat modelling, and cloud security posture evaluation. Translate complex technical cybersecurity risks and supplier control deficiencies into clear, actionable, business-relevant insights for senior ...