101 to 125 of 532 Threat Modelling Jobs in the UK

safety-critical airborne mission systems. In this role you will: Develop and maintain security requirements for complex airborne electronic and mission-computing systems Undertake threat modelling, vulnerability analysis and security risk assessments throughout the engineering lifecycle Support the development of security architectures and secure-by-design solutions Produce … Secure by Design principles and relevant product and systems security standards, with experience embedding security throughout an engineering lifecycle Experience undertaking security risk assessments, threat modelling, vulnerability analysis or security requirements development Ability to interpret technical designs and communicate security risks and mitigations to multidisciplinary engineering teams Experience ...

product-security architecture for complex airborne mission systems Define the security strategy, requirements and secure-by-design approach across the programme lifecycle Lead threat modelling, vulnerability analysis, security risk assessment and accreditation activities Provide technical authority and informed security advice across systems, software and hardware engineering Make … aerospace or another safety-critical engineering environment Strong experience defining security requirements and secure-by-design approaches at system or product level Experience leading threat modelling, security risk assessment and vulnerability-analysis activities Experience providing technical leadership and making security architecture decisions across multidisciplinary engineering teams Knowledge ...

Performance: Design solution‐wide UI resilience (graceful degradation, back‐pressure, retry strategies) and own performance standards across web and mobile. Quality, Security & Compliance: Own threat modelling and security hardening for tribe front‐end products; maintain high standards through code review, secure coding practices, and risk management. External Representation … zero‐downtime deployments, observability, performance budgets). Experience with Azure development and cloud‐based infrastructure , including CI/CD and pipeline observability. Experience owning threat modelling and security hardening for front‐end products; strong grasp of OWASP and secure coding practices. Track record of originating and shepherding cross ...

client is a global investment management company. Job Title Cyber Threat Intelligence Analyst The Role The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business … leadership, and external organizations such industry peers and intelligence sharing partners. In this role you will Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sources Actively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholders Conduct tactical ...

help reduce cyber risk across client technology projects within the UK health, public sector, Defence and Central Government. You will define security requirements, perform threat modelling, and ensure effective controls and monitoring throughout the project lifecycle. You will work on cutting‐edge security challenges and collaborate with ...

London/GlasgowThe AI Security Engineer is responsible for securing AI platforms and systems against adversarial threats. The role focuses on technical security controls, threat modelling, red teaming, and continuous monitoring of AI systems. Responsibilities: Design and implement security controls for AI and LLM systemsPerform AI-specific threat modelling and risk analysisLead red team and blue team testing of AI platformsConduct prompt injection and adversarial testingImplement monitoring, logging, and alerting for AI behaviourSecure AI pipelines, APIs, and orchestration layersSupport secure deployment and CI/CD practicesSkills & Experience: Strong background in security engineering and cloud securityHands ...

. The mission is a scalable, proactive approach to securing the bank's mobile apps so engineers can operate with confidence in an evolving threat landscape. You will help build, deliver, and drive the security of the mobile platform, including the design and delivery of a world-class security … security framework for the mobile platform and associated services (penetration testing, research, consultancy) Conduct regular hands-on reviews of mobile application security posture Apply threat modelling and mitigation techniques across the mobile channel Develop and maintain pen-testing security tools, scripts, policies, and procedures Research emerging technologies ...

security within the product. Key Responsibilities and Technologies Championing security throughout the FortiDLP product. Help maintain up-to-date and vulnerability-free dependencies. Threat modelling, design and code review. Maintaining and tuning automatic vulnerability checks within Continuous Integration systems. Triage findings of scanning tools and ensure prompt remediations. … least 3-5 years of software engineering experience. Familiarity with computer science fundamentals and backend development concepts. Experience in Golang. Experience with threat modelling and security concepts. Some familiarity with Checkmarx/Trivy/Kics or similar tools, as well as DAST tooling in general. Communication and Collaboration ...

applied to architectures, technical decisions, and third-party integrations. Your work will involve maintaining and prioritizing the product's security backlog, coordinating risk assessments, threat modelling, and vulnerability assessments, and ensuring that required security controls (e.g., access control, encryption, secure configuration) are implemented and evidenced. You will monitor … ensure "security by design and by default" across architectures, user stories, technical decisions, and third-party integrationsProficiency in coordinating product-level security risk assessments, threat modelling, and vulnerability assessments, as well as maintaining a prioritized security backlogExperience interpreting and cascading central security policies, standards, and regulatory requirements into ...

applied to architectures, technical decisions, and third-party integrations. Your work will involve maintaining and prioritizing the product’s security backlog, coordinating risk assessments, threat modelling, and vulnerability assessments, and ensuring that required security controls (e.g., access control, encryption, secure configuration) are implemented and evidenced. You will monitor … security by design and by default” across architectures, user stories, technical decisions, and third-party integrations Proficiency in coordinating product-level security risk assessments, threat modelling, and vulnerability assessments, as well as maintaining a prioritized security backlog Experience interpreting and cascading central security policies, standards, and regulatory requirements ...

influencing projects from inception through to deployment while providing practical, pragmatic security guidance. Key Experience Secure by Design & Security Assurance Security Architecture & Design Reviews Threat Modelling & Risk Identification Microsoft Security Stack (Identity, Endpoint, Cloud & Monitoring) Security Platform Configuration & Support Security Standards, Controls & Governance Vendor & Security Tool Management Stakeholder … Across Engineering & Delivery Teams What You'll Be Doing Embed security into projects and programmes from day one Conduct security design reviews and lightweight threat modelling Drive security assurance throughout the delivery lifecycle Enhance configuration, adoption and effectiveness of security platforms Support onboarding and implementation of new security ...

security requirements and features within embedded software and firmware Develop secure embedded software using C/C++ and contribute to secure product architecture Perform threat modelling, security risk assessments, vulnerability assessments and design reviews Support compliance with relevant product security standards including IEC 62443 and emerging cybersecurity requirements … architectures, RTOS environments and bootloaders Hands‐on experience implementing cybersecurity controls within embedded products, devices or firmware Good understanding of secure software development, threat modelling, vulnerability assessment and security testing Experience working within a product development environment and translating security requirements into practical engineering solutions Particularly Relevant Experience ...

continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

demonstrate continuous compliance with stringent standards such as PCI DSS and 3DSDrive security infrastructure deployments across our growing environmentsPerform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actionsLead … implementation (CKA, CKS qualifications are a plus)Experience with Infrastructure as Code and infrastructure provisioning tools, particularly TerraformExperience configuring GCP-native security posture and threat management with Security Command CenterExperience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact AnalysisExperience with key and secret management ...

continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

financial services organisation is seeking a Cyber Security Engineer to join its Proactive Security function. This role will focus on strengthening security capabilities through threat detection, security engineering, automation, and proactive defence initiatives across a complex enterprise environment. Permanent (£70k - £80k) London/Hybrid Must have UK citizenship/… Visa/EU settled status Key Responsibilities Threat Modelling & Security Engineering Develop and maintain threat models for business-critical systems and services. Assess security risks and recommend controls during project design and implementation. Build and maintain capabilities for proactive detection, configuration monitoring, and automated remediation. Lead security ...

Help reduce cyber risk across technology programmes by identifying, defining, and assuring appropriate security requirements, controls, and risk treatments throughout the project lifecycle. Conduct threat modelling exercises using industry frameworks such as MITRE ATT&CK to identify credible threats and recommend proportionate security controls. Design and advise … following domains: Cloud security (Azure, AWS, GCP) Network security Identity and Access Management (IAM) Application security/DevSecOps Infrastructure and platform security Continuous Threat Exposure Management Ability to analyse technical risks and communicate recommendations to both technical and non-technical stakeholders. Strong written, verbal, and presentation skills. Demonstrated ability ...

both technical and non-technical stakeholders. Develop security principles, controls and approaches aligned to client requirements, industry standards and regulatory frameworks. Conduct security assessments, threat and risk assessments, vulnerability assessments and security audits. Advise clients on security controls, emerging technologies and appropriate technical solutions. Work with technology vendors … systems integrator or professional services environment . Strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS . Experience with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to: Identify business objectives, user needs, risk appetite and cyber security obligations Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to:- Identify business objectives, user needs, risk appetite and cyber security obligations- Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls- Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...

architectures and reusable solution patterns Define and author enterprise‐level security policies, controls frameworks, and governance documentation aligned to industry standards Lead risk assessments, threat modelling exercises, and security posture evaluations for cloud platforms and SaaS products, utilising methodologies such as FAIR Drive compliance programmes covering ...

design decisions and raising overall DevSecOps maturity across the organization Lead vulnerability management and remediation across application, pipeline, and cloud environments while participating in threat modeling and architecture reviews to ensure security is embedded at the design level What We're Looking For: Basic Required Qualifications: 8+ years ...

Recruitment seeks an experienced Threat Intelligence and Vulnerability Manager for a 6-month contract in London. This hands-on leadership role coordinates Threat Intelligence, Vulnerability Management, Threat Modelling, Security Testing and External Threat Hunting within a complex, high-profile environment. You will identify emerging threats ...

this role leads the tech refresh and evergreening of security toolsets - ensuring the security technology estate remains current, supported, effective, and aligned with evolving threat landscapes, client policies, and cross-domain architectural patterns. This is a hands-on architecture role, not a governance-only position. The Technical Security Architect … make clear, evidence-based recommendations. Design and review cloud, identity, network, perimeter and platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement Design and maintain AI‐assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, networking access, observability, workload isolation, and third‐party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer‐facing guidance for safe use of AI coding assistants, AI APIs ...