101 to 125 of 133 Threat Modelling Jobs in the UK

Quality Engineering & Secure Development: Create automated tests, including unit, integration, and functional tests. Apply secure-by-design principles in all coding activities, participating in threat modelling where appropriate. Contribute to code reviews and continuously improve code quality within the squad. Maintain documentation for services, features, and reusable components. ...

impact. Act as a trusted escalation point for security consultants, projects and delivery teams. Lead secure design activity across systems and services, including STRIDE threat modelling and design-level risk assessments. Ensure security controls are proportionate and aligned to Secure by Design, government security standards and defence ...

ownership (trunk-based development or GitFlow), code review culture, and release management. Working knowledge of OAuth2/OpenID Connect, JWT, secure API design, and threat-modelling basics. Experience owning CI/CD pipelines (Azure DevOps, GitHub Actions, or equivalent) and driving deployment automation and quality gates. Demonstrated production ...

role where you sit at the end of the process flagging issues. You'll be embedded in the development lifecycle from the start - running threat models, helping developers ship securely, reviewing code, and making sure the right tooling is in place. The engineering teams are collaborative and they actually … application security, ideally in a SaaS or Fintech environment Experience with SAST, DAST, and SCA tooling - Snyk, Checkmarx, Semgrep, Burp Suite, or similar Threat modelling - comfortable running sessions with engineering and product teams Solid understanding of OWASP Top 10 and how to actually remediate real-world vulnerabilities ...

since 1909We now have an opportunity for a Senior Cyber Security Analyst (12 month contract) within Marshall.The focus of this technical role is on threat prevention, detection and response for Marshall, including the configuration and monitoring of a security information and event management (SIEM) system, operating next generation antivirus … relation to cyber securityAdministration, configuration and use of a Security Information and Event Management (SIEM) system, including creating alerts, reports, dashboards, handling IOCs and Threat FeedsAdministration of Firewalls, Web Proxies, Web Application Firewalls, Email Security and Endpoint Detection-Response softwareTechnical understanding of common cyber security threats, faced by individuals ...

Translate security priorities into actionable backlogs and phased releases. AI Cyber Use Cases Support security operations through alert triage, enrichment, and prioritisation. Enable advanced threat detection (e.g., anomaly detection, behavioural patterns, phishing/malware analysis). Enhance vulnerability and identity management using risk-based insights. Deliver GenAI-enabled capabilities … deployment practices. Experience working within regulated environments. Strong stakeholder engagement and influencing skills. Desirable Skills Familiarity with security platforms and telemetry data. Understanding of threat modelling and secure AI practices. Experience delivering enterprise GenAI solutions with controls. Exposure to cloud security and data governance. ...

Contract Cloud Security Consultant to support their Cyber Transformation Programme. The role involves ensuring security alignment with standards like NIST CSF 2.0, leading threat modelling and risk assessments, and promoting best security practices within a matrixed environment. Ideal candidates will have deep knowledge in DevSecOps, Azure ...

role You have a deep understanding of Windows Servers/Microsoft products You have a broad technical understanding of data security, risk analysis and threat modelling techniques used in the Information Security space You have a high level knowledge of Linux, networking, firewalls, VPN configuration, Docker, microservices, Cloud ...

comms with confidence : senior stakeholder updates, progress reviews, risk/issue forums, and go‐live checkpoints. 🧪 Drive technical readiness : coordinate pre‐live activities (e.g., threat modelling, integration validation, tabletop exercises), baseline runbooks and ensure a clean handover to TAMs/Operations. 📊 Track what matters : define entry/exit ...

initiative, and good written and verbal communication skills Additional desirable skills and experience Good understanding of distributed systems, including cloud platforms Security architecture and threat modelling from device level to large distributed systems, including supply chains and device lifecycle concepts Enterprise device and network management About ...

experience and expertise in programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object‐oriented language experience. Extensive experience and expertise in threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security. Experience using Large Language Models (LLM) in security engineering. ...

services that combine AI, retrieval, static analysis, automation, and human review to produce credible security findings. Partner across hardware engineering, software security, research, fuzzing, threat modelling, and platform teams to ensure the tooling is practical, technically grounded, and aligned with engineering workflows. Define evaluation approaches for AI‐assisted … firmware, SoC design, CPU/GPU systems, or hardware/software interfaces. Exposure to hardware security, platform security, vulnerability research, secure development, or threat modelling. Experience with static analysis, symbolic analysis, formal methods, or other automated techniques. Experience building datasets, benchmarks, evaluation harnesses, or test corpora for AI‐assisted ...

London or Bristol two days a week, with a competitive rate of £550 - £600 inside IR35. The successful candidate will define security architectures, conduct threat modelling and assist in governance across projects for telecom systems. Active SC Clearance is required for this role. #J-18808-Ljbffr ...

branching strategy ownership (trunk-based development), code review culture, and release management. Working knowledge of OAuth2/OpenID Connect, JWT, secure API design, and threat-modelling basics. Experience owning CI/CD pipelines (Azure DevOps) and driving deployment automation and quality gates. Demonstrated production (or near-production) experience ...

tokenisation lifecycles (minting, burning, transfer), and blockchain node and cryptographic key management. Proven experience assessing cybersecurity and technical risk within a DLT environment, including threat modelling across complex platform architectures, vulnerability and privileged access management (PAM), and the evaluation of security operations capabilities such as SIEM, intrusion detection ...

OPPORTUNITY We are building Watcher, a coding agent security product. We are looking for a security & control expert to help us design better threat models and control protocols against AI adversaries, and improve the effectiveness and security of Watcher. A security & control expert embedded in the product team with … three functions: Research : Supporting Apollo's monitoring research with threat modeling, attack design, red‐team and trajectory analysis (~50%) Expert view : Bring a security expert’s view of what security buyers need to make Watcher a better product (~25%) Product security : Improve the security posture of Watcher and Apollo ...

patch management Identify root causes of vulnerabilities and support long-term solutions Support compliance with frameworks such as NIST and Cyber Essentials Assist with threat modelling and risk assessments Maintain documentation, procedures, and security best practices Proactively identify opportunities to strengthen the organisation’s overall security posture This ...

practices across applications and CI/CD pipelines Support triage and remediation of application security findings through practical guidance and secure refactoring recommendations Facilitate threat modelling activities and translate outcomes into actionable improvements and risk reduction measures Design and maintain secure-by-default delivery patterns, reusable templates ...

lifecycle workflows (procure > deploy > retire) Normalization and reconciliation rules Asset‐to‐CI relationships Develop to support compliance, optimization, and governance initiatives. Manage and support Threat Modelling and Technical Reviews. Integration Development Design and oversee integrations using REST APIs and IntegrationHub. Ensure integrations with discovery tools, endpoint management platforms ...

conducting security reviews, driving vulnerability management, and utilizing AI tools effectively. Applicants should have 5+ years in application or product security, with experience in threat modeling and security practices. Life360 offers a remote-first culture alongside competitive salary and benefits. #J-18808-Ljbffr ...

A global financial services leader is seeking a Lead Security Engineer to join their Bournemouth team. In this crucial role, you will develop secure software solutions while ensuring compliance with industry regulations. Key responsibilities include ...

risk appetite and actual posture relative to that appetite, using a blend of appropriate industry-standard techniques to describe appetite, inherent risk and threat vectors, control strength, residual risk, specific risks and issues As such, the role translates the technical outcomes of the wider security team into consumable … board, customers, and regulators of our posture and residual risks – in many fora this role is the “face of security” Mature our nascent threat modelling and residual‐risk quantification techniques Design & deliver regular reports to the board, the Executive Committee, customers, often with in‐person presentations including ...

risk appetite and actual posture relative to that appetite, using a blend of appropriate industry-standard techniques to describe appetite, inherent risk and threat vectors, control strength, residual risk, specific risks and issues. As such, the role translates the technical outcomes of the wider security team into consumable … board, customers, and regulators of our posture and residual risks – in many forums this role is the “face of security” Mature our nascent threat modelling and residual-risk quantification techniques Design & deliver regular reports to the board, the Executive Committee, customers, often with in-person presentations including ...

Agent (OPA). Strong understanding of OAuth2, OpenID Connect (OIDC), SAML and SCIM. Experience securing cloud-native, API-driven and distributed systems. Knowledge of threat modelling, security non-functional requirements and security assurance. Experience integrating with enterprise identity providers and IAM platforms. Ability to produce high-quality security ...

role Sharp troubleshooting and problem-solving skills Strong and up to date technical understanding of Microsoft technologies Expertise in data security, risk analysis and threat models in the information security space Experience with installation and configuration of a variety of security products Experience with virtual desktop environments, preferably ...