26 to 50 of 169 Threat Modelling Jobs in the UK excluding London

What youll be doing Define security architecture for complex technology solutions. Work across areas including cloud, networking, OT, virtualisation, applications, databases and containerisation. Use threat modelling to identify risks and define security requirements. Provide technical security advice across the design and delivery lifecycle. Apply frameworks including NIST … more of: Cloud and container security IP networking/OT On-premises architecture and virtualisation Application and mobile security Databases and LLMs Threat modelling and security requirements Security risk and control frameworks Protective monitoring, authentication and authorisation Whats in it for you? UK-wide opportunities Associate Manager level ...

What You'll Be Doing Owning the software security strategy and roadmap across the product line Defining security architecture, standards and best practices Embedding threat modelling and security requirements into product development Working closely with software and product teams to drive secure-by-design principles Leading architecture reviews … maturity across the organisation What We're Looking For You'll likely bring experience in: Security Architecture Product Security Secure Software Development Lifecycle (SDLC) Threat Modelling Vulnerability Management Security Testing & Assurance Secure CI/CD Pipelines Risk Assessment & Security Governance Software Architecture and Engineering Leadership Desirable Experience Embedded ...

clear options and recommendations. Define what good looks like through measurable controls, assurance evidence and acceptance criteria. Embed security into deliveryIntegrate security requirements and threat modelling into product planning, architecture, design and backlog refinement. Establish proportionate security gates across implementation, code review, build, test, release and maintenance activities. … platforms. Strong software architecture and engineering background, with practical experience delivering security controls in complex products. Deep understanding of secure development lifecycle practices, threat modelling, secure design, vulnerability management and security testing. Experience embedding automated security controls and evidence into build, test and CI/CD workflows. Ability ...

standards, reference architectures, control patterns and assessment methodologies for AI models, LLM and agentic AI systems and AI development platforms. Lead security architecture reviews, threat modelling and technical assurance for high-risk AI systems, products and material changes. Establish and improve model-assurance requirements for third-party … security initiatives from assessment and design through implementation, validation and operational handover, with measurable adoption and risk-reduction outcomes. Experience leading security architecture reviews, threat modelling and remediation through the software or product development lifecycle. Strong understanding of AI security threats and mitigations. Experience designing or assessing security ...

include: Provide security assurance and governance across enterprise AI and cloud initiatives, ensuring solutions are secure by design. Conduct security reviews, risk assessments, and threat modelling activities for AI platforms, applications, and services. Partner with architects, engineering teams, and business stakeholders to challenge designs and ensure appropriate security … related threats and controls. Excellent stakeholder management and communication skills, with the ability to influence senior leaders, architects, and delivery teams. Strong background in threat modelling, security governance, risk assessment, IAM, network security, cryptography, and security monitoring. Passion for technology and innovation, with an interest in AI, cloud ...

performed by the IS Security team Supports IS Security achieve regulatory and statutory compliance requirements Complete cyber risk assessments, including third party suppliers Apply threat modelling principles to complex system and solution designs to identify security risks and appropriate mitigations Supports, monitors and recommends improvements to cyber incident … governance requirements and identifying suitable controls. (essential) Experience of delivering cloud focused security solutions with a solid understanding of modern cyber threats and threat modelling techniques (preferred) Good understanding of security frameworks (NIST CSF, Mitre ATT & CK) (essential) At Sword, our core values and culture are based ...

part of a bigger team, working with a group of a Senior Security Architects and Digital Engineering stakeholders to produce security architecture artifacts, threat modelling, design assurance, and reusable patterns that strengthen the programmes security posture. Key Responsibilities: You will lead and deliver core security architecture outputs including … Digital Engineering Security Artifacts and Engagement Report Security Requirements Specification Security Principles Framework Infrastructure Mapping Document & Security Architecture Design Pack Threat Modelling Report Reusable Security Pattern Library Knowledge Transfer Pack (training materials, handover content, recorded walkthroughs) We are looking for someone with: Extensive Security Architecture/Security Consulting ...

production deployment. Provide cyber security guidance and best practises for various AI initiatives, including Generative AI, Business Intelligence, and advanced analytics platforms. Conduct threat modelling activities using IriusRisk. Identify security risks, vulnerabilities, and devise mitigation strategies throughout the development lifecycle. Ensure solutions meet internal cyber security standards, governance … with stakeholders via Jira, Jira Align, and Confluence. Required Skills & Experience: A strong background in Cyber Security within complex enterprise environments. Experience in conducting threat modelling and security risk assessments. Familiarity with AI, Machine Learning, Data, or Advanced Analytics platforms. Knowledge of cloud security principles, especially within Google ...

architectures and control patterns for AI agents, including identity, permissions, tool use, data access, memory, human oversight, logging and containment. Lead security risk assessments, threat modelling and assurance reviews for high-risk agentic AI use cases, platforms and material design changes. Develop and apply test scenarios for agentic … meetings and collaboration. Qualifications: Demonstrated experience delivering security controls from design through implementation, validation and operational handover across cross-functional engineering teams. Experience with threat modelling, security assessment and remediation for applications, cloud services, APIs or AI-enabled systems. Strong understanding of agentic AI security risks and controls ...

Here are some of the areas you could work in: Application Security: Learn how we build security into applications, including vulnerability management, penetration testing, threat modelling and security reviews. Cloud Security: Gain experience of how we protect cloud environments, identify security weaknesses and help teams apply appropriate security … recover. Vulnerability Management: Help identify and track security vulnerabilities, understand the risks they present and work with teams as they are addressed. Threat Modelling & Security Testing: Support security specialists in understanding what could go wrong with new systems and services and how those risks can be reduced. Risk ...

guardrails, and governance. You’ll work closely with development teams, architects, product owners, and third‐party suppliers to implement secure‐by‐design principles, conduct threat modelling and security reviews, and ensure appropriate controls are built into delivery processes. This role combines technical application security expertise with strong stakeholder … responsibilities Own and develop the organisation's application security practice, embedding secure‐by‐design principles and security controls throughout the software development lifecycle Lead threat modelling exercises and security design reviews for new applications, APIs, integrations, and significant technology changes Select, implement, and manage application security tooling including ...

safety-critical airborne mission systems. In this role you will: Develop and maintain security requirements for complex airborne electronic and mission-computing systems Undertake threat modelling, vulnerability analysis and security risk assessments throughout the engineering lifecycle Support the development of security architectures and secure-by-design solutions Produce … Secure by Design principles and relevant product and systems security standards, with experience embedding security throughout an engineering lifecycle Experience undertaking security risk assessments, threat modelling, vulnerability analysis or security requirements development Ability to interpret technical designs and communicate security risks and mitigations to multidisciplinary engineering teams Experience ...

product-security architecture for complex airborne mission systems Define the security strategy, requirements and secure-by-design approach across the programme lifecycle Lead threat modelling, vulnerability analysis, security risk assessment and accreditation activities Provide technical authority and informed security advice across systems, software and hardware engineering Make … aerospace or another safety-critical engineering environment Strong experience defining security requirements and secure-by-design approaches at system or product level Experience leading threat modelling, security risk assessment and vulnerability-analysis activities Experience providing technical leadership and making security architecture decisions across multidisciplinary engineering teams Knowledge ...

client is a global investment management company. Job Title Cyber Threat Intelligence Analyst The Role The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business … leadership, and external organizations such industry peers and intelligence sharing partners. In this role you will Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sources Actively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholders Conduct tactical ...

security requirements and features within embedded software and firmware Develop secure embedded software using C/C++ and contribute to secure product architecture Perform threat modelling, security risk assessments, vulnerability assessments and design reviews Support compliance with relevant product security standards including IEC 62443 and emerging cybersecurity requirements … architectures, RTOS environments and bootloaders Hands‐on experience implementing cybersecurity controls within embedded products, devices or firmware Good understanding of secure software development, threat modelling, vulnerability assessment and security testing Experience working within a product development environment and translating security requirements into practical engineering solutions Particularly Relevant Experience ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement Design and maintain AI‐assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, networking access, observability, workload isolation, and third‐party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer‐facing guidance for safe use of AI coding assistants, AI APIs ...

native security controls. Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation. Knowledge of SSDLC practices and threat modelling. Ability to review cloud architectures and technical designs from a security perspective. Understanding of authentication and authorization patterns. Strong communication and collaboration skills ...

Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance. Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security. Design secure architectures across Azure, AWS, Google Cloud, SaaS, and on-premises environments. Lead integration of identity, security … consultancy and managed service opportunities. Qualification & Experience Experience in Security Architecture, Enterprise Architecture, or Cyber Security Consulting. Strong expertise in Zero Trust, security governance, threat modelling, risk management, and cloud security. Advanced Microsoft security experience across Entra ID, Defender, Sentinel, Purview, Intune, Azure Security, and Microsoft 365 Security. ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

business and security requirements, and translate them into practical architectural solutions. Working knowledge of architectural frameworks such as SABSA and TOGAF. Strong understanding of threat modelling, risk assessment, and secure-by-design principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards ...

business and security requirements, and translate them into practical architectural solutions. Working knowledge of architectural frameworks such as SABSA and TOGAF. Strong understanding of threat modelling, risk assessment, and secure-by-design principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards ...

such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews. Strong troubleshooting, documentation, and cross-functional communication skills. Personal Team player with strong communication skills Competent ...

network, application, data and endpoint layers Lead security architecture reviews and technical security assessments Design zero-trust security models and continuous verification frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations Design security solutions supporting Information Security Management System (ISMS) compliance Architect compliance and audit ...

network, application, data and endpoint layers Lead security architecture reviews and technical security assessments Design zero-trust security models and continuous verification frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations Design security solutions supporting Information Security Management System (ISMS) compliance Architect compliance and audit ...

pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier Engagement Support V&V, penetration testing, and remediation, and manage security alignment with suppliers. Compliance & Documentation Own the security compliance dossier … hardware engineering with at least 5 years focused on cybersecurity for embedded systems, IoT, or cloud platforms. Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products. Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security ...