26 to 50 of 60 Threat Modelling Jobs in the UK excluding London

DevOps, and operational teams, you will contribute to cloud architecture designs, automate security remediation processes, and provide proactive insights into cloud risks, vulnerabilities, and threat mitigation strategies. You will leverage your expertise in cloud security, infrastructure as code, CI/CD pipelines, containerisation, and governance frameworks to ensure that … software development lifecycle practices. Identify, assess, and mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while ...

/XDR, CSPM, SAST/DAST). Experience embedding security into CI/CD pipelines and DevSecOps practices. Proven capability in risk assessments, threat modeling, and control gap analysis. Experience collaborating with SOC and Incident Response teams during security events. Working knowledge of security frameworks and regulations (NIST ...

assurance across complex systems or major programmes. Ability to produce clear architecture documentation and security artefacts. Strong understanding of secure design principles, risk management, threat modelling and security controls. Knowledge of UK Government/Defence security standards, guidance and assurance processes. Experience working with senior stakeholders across security … technical and non-technical audiences. Desirable experience Army programme experience or strong MOD stakeholder exposure. Experience with Sparx Enterprise Architect, ArchiMate, NAFv4 or similar modelling approaches. Knowledge of Joint Service Publications, NCSC guidance, ISO27001, NIST, CIS or related security frameworks. Experience across IAM, PKI, secure integration, cloud security, data ...

cloud deployments (private/public). Design and scope IT Health Checks and interpret outcomes. Identify and mitigate security risks in solution architectures. Conduct threat modelling and risk analysis. Design proportional security controls using native cloud technologies. Produce security architecture artefacts including standards and blueprints. What ...

support CI/CD platforms, driving automation and efficiency in build, deployment, and monitoring processes. Cloud Security: Contribute to security assessments, audits, and threat modelling exercises for AWS & Azure environments, embedding security best practices into DevOps workflows and ensuring alignment with industry standards and regulatory requirements. Collaboration: Work ...

controls into engineering workflows. Collaborate with software development teams to improve secure coding practices. Develop and maintain monitoring, logging, and incident response automation. Support threat modelling and secure architecture reviews. Drive DevSecOps best practices across engineering teams. Contribute to platform engineering and cloud-native application delivery. Required Experience ...

security designing solutions that let customers move fast and stay secure. As a trusted technical advisor, you will guide customers through security architecture decisions, threat modelling, and the implementation of security controls across multi-account environments. You will lead by building producing working code, reusable patterns, and reference ...

applying a holistic approach to shape secure solutions that support strategic objectives. Key responsibilities Develop and manage the security vision, architecture specifications, architecture analysis, threat modelling, requirements, standards, design patterns, reference architectures, strategies and roadmaps Apply security design principles to produce practical security architectures Lead security engagement with ...

design and improve cybersecurity governance frameworks, providing strategic advice across areas including: Cyber governance, risk and compliance (GRC) Gap analysis against recognised security frameworks Threat modelling, risk assessments and mitigation planning Security policy development, review and compliance Third-party risk management and cyber resilience Cloud and network security ...

skills, including Docker, Kubernetes, Linux, Terraform, CI/CD pipelines, and GitHub Actions. Strong understanding and practical application of secure software development principles, including threat modelling and vulnerability remediation. Experience designing, deploying, and maintaining scalable, reliable, and secure cloud-native applications. Desirable Skills Experience with geospatial technologies ...

operations, incident response, and forensic analysis. Proficiency in Security Information and Event Management (SIEM), including tools such as Splunk, Defender, and Tenable Threat Modelling System solutions, as well as with IDS/IPS and vulnerability scanners. Ability to perform triage of security events to determine their scope, priority ...

Experience working in enterprise cloud environments (Azure, AWS, GCP). Experience building cloud infrastructure and using cloud IaC tooling (Terraform, Cloudformation, BICEP) Experience in threat modelling, security reviews and testing. Proficiency in scripting languages: PowerShell, Bash, Python and behaviour-driven design Strong familiarity with security standards, security controls ...

Experience working in enterprise cloud environments (Azure, AWS, GCP). Experience building cloud infrastructure and using cloud IaC tooling (Terraform, Cloudformation, BICEP) Experience in threat modelling, security reviews and testing. Proficiency in scripting languages: PowerShell, Bash, Python and behaviour-driven design Strong familiarity with security standards, security controls ...

safely migrating services away from Mainframe, Cobol, and older database environments to scalable, modern platforms. Security & Compliance: Champion secure-by-design principles, participating in threat modelling (eg, STRIDE) and collaborating closely with cyber security and information assurance teams on Data Protection Impact Assessments (DPIAs). Essential Skills & Experience ...

interested in candidates with experience in: Security Architecture or Solution Architecture Cloud Security (AWS, Azure or GCP) Infrastructure, Networks or Platform Security Product Security Threat Modelling (STRIDE, DREAD, MITRE ATT&CK) Identity & Access Management Security Governance, Risk or Secure Design SaaS, third-party integrations or enterprise platforms These ...

Consultant Shaping and reviewing security architecture for complex IT and digital platforms Assessing cyber risks and identifying weaknesses early in the design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR ...

Quality Engineering & Secure Development: Create automated tests, including unit, integration, and functional tests. Apply secure-by-design principles in all coding activities, participating in threat modelling where appropriate. Contribute to code reviews and continuously improve code quality within the squad. Maintain documentation for services, features, and reusable components. ...

delivery of expert consultancy to programmes and services, ensuring solutions are secure by design and resilient to evolving cyber threats. You will conduct threat modelling, security assessments and risk analysis, clearly articulating risks and recommending proportionate controls to reduce the likelihood and impact of attacks. You will provide ...

reviewing and identifying security control gaps in design documents, providing recommendations for amendments and mitigation. We are looking for: Strong experience of performing threat modelling exercises Experience of reviewing high/low level architecture definition documents for compliance against security policies and standards Knowledge of technology risk ...

Security Leadership & Strategy Driving the organization's Zero Trust strategy and security roadmap. Providing architectural governance and ensuring security best practices across projects. Conducting threat modelling, gap assessments, and risk evaluations for critical applications and network paths. Advocate for the adoption of modern security frameworks and secure ...

closely with software developers, infrastructure engineers, the Head of IT and CISO to improve security, resilience and release processes Contribute to Secure SDLC practices, threat modelling and security standards across build and deployment pipelines Skills & Experience Strong hands-on Linux experience, ideally across Red Hat/RHEL ...

around data protection and network modernisation. Ensure security best practices are followed across projects and tasks, including network and data security controls. Assisting with threat modelling, gap assessments, and risk evaluations for both data and network assets. Promoting the adoption of modern security frameworks and secure-by-design ...

Quality Engineering & Secure Development: Create automated tests, including unit, integration, and functional tests. Apply secure-by-design principles in all coding activities, participating in threat modelling where appropriate. Contribute to code reviews and continuously improve code quality within the squad. Maintain documentation for services, features, and reusable components. ...

impact. Act as a trusted escalation point for security consultants, projects and delivery teams. Lead secure design activity across systems and services, including STRIDE threat modelling and design-level risk assessments. Ensure security controls are proportionate and aligned to Secure by Design, government security standards and defence ...

role where you sit at the end of the process flagging issues. You'll be embedded in the development lifecycle from the start - running threat models, helping developers ship securely, reviewing code, and making sure the right tooling is in place. The engineering teams are collaborative and they actually … application security, ideally in a SaaS or Fintech environment Experience with SAST, DAST, and SCA tooling - Snyk, Checkmarx, Semgrep, Burp Suite, or similar Threat modelling - comfortable running sessions with engineering and product teams Solid understanding of OWASP Top 10 and how to actually remediate real-world vulnerabilities ...