1 to 25 of 177 Threat Modelling Jobs in the UK excluding London

Cyber Security Consultant – Threat Modelling & Security Architecture Location: UK-based, with travel to Bristol, Manchester, North West England and London for on-site work Working Pattern: Hybrid with travel to client sites as required Type: Permanent Clearance: UK National with active SC Clearance — this is a mandatory requirement … Consultancy Tektora are supporting an established Technology Consultancy who are looking to speak with SC Cleared Cyber Security Consultants for a permanent opportunity delivering threat modelling and secure design across complex client environments. Please note: active SC Clearance is essential for this role. Applications cannot be considered without ...

play a critical role in designing, assuring, and delivering secure solutions across our client engagements. You will champion Secure by Design principles and lead threat modelling activities to ensure risks are identified and mitigated early in the lifecycle. Working closely with stakeholders, you will define security architectures, ensure … Design – Embed security into every stage of the solution lifecycle, ensuring systems are designed with security controls from the outset rather than retrofitted. Threat Modelling – Lead and facilitate threat modelling exercises (e.g. STRIDE), identifying vulnerabilities and defining mitigations early in delivery Risk Assessment – Identify, assess ...

skilled Mobile Application Security Specialist with hands‐on experience in securing mobile platforms and applications. The ideal candidate will possess deep expertise in mobile threat modelling, vulnerability assessment, and penetration testing, with a strong understanding of Android and iOS security standards. This role is critical to ensuring … security testing tools, scripts, and frameworks to support penetration testing activities. Define and implement security policies, standards, and procedures for mobile platforms. Perform ongoing threat modelling and risk assessments to proactively address potential security gaps. Collaborate with development and DevSecOps teams to integrate security best practices throughout ...

Confidential Computing , and secure workload segmentation . Develop security design documentation, diagrams, and rationale aligned with business and compliance requirements. Apply risk‐based and threat‐based approaches to recommend secure and proportionate solutions. Agentic AI & LLM Security Architecture You will be responsible for shaping security controls around emerging … prompt defense, prompt isolation API & orchestration security, including secure agent tool use Data security for vector stores, embeddings, and retrieval services Performing AI‐specific threat modelling , including: Model extraction & poisoning Hallucination‐driven risk Sensitive data leakage Toxic output & jailbreak attempts Advising on secure integration of AI with cloud ...

business-critical platforms and services. Working closely with architecture, engineering, cloud and infrastructure teams, you will provide security leadership, conduct architecture reviews, perform threat modelling, and define security controls across complex enterprise environments. Key Responsibilities Define and maintain secure architecture principles, standards and reference architectures. Conduct security architecture … design reviews across cloud, infrastructure, applications and network environments. Perform threat modelling and security risk assessments. Design secure-by-design solutions across cloud, hybrid infrastructure, applications, identity and network environments. Support the implementation of Zero Trust security principles. Provide architectural guidance across AWS and Azure environments. Define security ...

experienced Senior Information Security Consultant to join our team. This is a senior advisory role — you will provide expert guidance across security architecture review, threat modelling, and AI risk assessment, working closely with project teams, technology leads, and senior business stakeholders to ensure security risk is understood … Deliver security advisory services to the business, acting as a trusted consultant to stakeholders at all levels — from project teams to senior leadership. Lead threat modelling exercises across programs and key systems, translating findings into clear, business-relevant risk statements for non-technical audiences. Conduct security architecture reviews ...

part of a multi-disciplinary Agile team, you will implement DevSecOps practices throughout the software development lifecycle, embedding security practices (e.g. vulnerability management, threat modelling etc.) and automating security artifact generation (e.g. secret scanning, container security, SAST, DAST etc.). You will provide subject matter expertise in application … delivery teams. Verifying the implementation of security principles, architectural patterns, and requirements. Driving the adoption of cyber security practices (e.g. vulnerability management, threat modelling etc.) within Agile delivery teams. Putting people first & developing others – You'll help coach and develop more junior members of the team. Minimum (essential ...

/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services and architecture changes. Validate fixes and identify root causes to reduce recurring vulnerabilities. … prioritise and remediate security issues. Hands-on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting knowledge to understand unfamiliar code and contribute to automation. The confidence to work independently ...

Engineer on Mystra, you'll own application security end-to-end across multi-tenant, trillion-row-scale, AI-enabled data platforms. You'll lead threat modelling and design review with product teams, build the tooling and patterns that make secure codet, and find and fix the vulnerabilities that … steered by your own expert judgement and intuition, to keep Genomics secure against state-of-the-art threats. A Day in the Life Leading threat modelling and design reviews for new products and infrastructure, and defining the security invariants every team builds against: tenant isolation, authentication and authorisation ...

edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security is engineered into everyday work - from threat modelling and architecture at design time to hardened, monitored systems in production. You'll build trusted relationships with client engineering leads, platform teams, and senior stakeholders … Report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal engineering rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles — building the tooling and automation that make ...

that process. This role exists to embed security expertise directly into how our engineering teams build and ship software: setting the standards, running the threat modelling, and making the judgement calls that keep pace with delivery instead of slowing it down. About Redgate Redgate brings together people … scanner tells you. It's a role built on trust: teams will come to you for guidance, and the judgement you bring to triage, threat modelling, and governance decisions will shape how security actually gets done here. Partner directly with engineering and product teams to define and operationalise ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

Access Management (IAM)—directly into emerging engineering streams. Guide technical squads on implementing secure contemporary architectures, safely handling RESTful APIs and containerized microservices. 2. Threat Modelling & Proactive Risk Management Maintain an up-to-date stance on the evolving financial service threat landscape. Lead collaborative Threat Modelling … GitHub Actions, or GitLab CI integrated with logging clusters like Splunk, Datadog, or ELK Stack. Secondary Roles & Responsibilities 1. Operational Research & Incident Advisory Evaluate threat intelligence data and primary risk trends to continuously recommend security enhancements to the platform's security stack. Support incident readiness functions by acting ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through …/DAST tooling, API security, and container security in agile delivery contexts. Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through …/DAST tooling, API security, and container security in agile delivery contexts. Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector ...

architectures across digital, cloud and data‐driven solutions, ensuring they follow best practice, comply with regulations and meet organisational security standards. Facilitate and guide threat‐modelling activities—such as identifying risks, attack paths and mitigations—so that security is embedded early in every solutionEnsure consistent and comprehensive application … SaaS, PaaS, IaaS (including AWS, Azure) etc], including IAM, network protection, encryption, monitoring, zero‐trust concepts and secure cloud‐native designHands‐on experience with threat‐modelling techniques and the ability to translate identified threats into meaningful, actionable technical controls. Practical knowledge of key regulatory and compliance frameworks including ...

architectures across digital, cloud and data‐driven solutions, ensuring they follow best practice, comply with regulations and meet organisational security standards. Facilitate and guide threat‐modelling activities—such as identifying risks, attack paths and mitigations—so that security is embedded early in every solutionEnsure consistent and comprehensive application … SaaS, PaaS, IaaS (including AWS, Azure) etc], including IAM, network protection, encryption, monitoring, zero‐trust concepts and secure cloud‐native designHands‐on experience with threat‐modelling techniques and the ability to translate identified threats into meaningful, actionable technical controls. Practical knowledge of key regulatory and compliance frameworks including ...

platforms are effectively integrated and aligned with business risk. The role offers opportunities to broaden your experience, working across areas such as security architecture, threat modelling, development, continuous control validation and emerging technologies including AI.## Responsibilities* Design, build, configure and maintain security platforms and protective controls across … posture and the integration of security testing and controls into CI/CD and development workflows.* Contribute to security architecture, technical design reviews and threat modelling, providing practical security guidance that helps technology teams understand risk and implement proportionate solutions.* Develop and maintain security orchestration, platform integrations ...

governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps … Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications ...

software and product development lifecycle. Key Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation activities. Advise on secure design, cloud security, mobile security, authentication, encryption … Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience supporting audits, regulatory reviews or compliance ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

programmes Producing technical security evidence including risk assessments and vulnerability analysis Supporting programme teams, architects, and engineers to embed cyber security best practice Conducting threat modelling and cyber risk assessments using recognised frameworks Developing risk treatment plans and implementing mitigation strategies This role is full time, standard … Royal Dockyard. Essential experience of the Cyber Security Lead Strong experience delivering secure by design or cyber security assurance activities Proven ability to conduct threat modelling and risk assessments In-depth knowledge of cyber security frameworks such as NIST, ISO 27001, and ISO 27005 Experience influencing multidisciplinary teams ...