126 to 150 of 508 Threat Modelling Jobs in the UK

design decisions and raising overall DevSecOps maturity across the organization Lead vulnerability management and remediation across application, pipeline, and cloud environments while participating in threat modeling and architecture reviews to ensure security is embedded at the design level What We're Looking For: Basic Required Qualifications: 8+ years ...

build tools is also expected as part of the development toolkit.Experience with RESTful web services and frameworks to build APIs is important. Architecture & Modelling Tools: Use of modelling tools to create architecture diagrams and documentation – e.g. Microsoft Visio, Draw.io, Lucidchart or UML design tools.Architecture & Design Knowledge: Strong grasp … architecture. This means following principles like least privilege, defense in depth, and secure coding practices. Incorporating security reviews in the design phase, using threat modelling for new systems, and ensuring compliance with relevant standards (such as ISO 27001and other internal security policies). For cloud deployments, adhering ...

scalable solutions.What you’ll be doing: Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments.Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift.Partner … expertise and a passion for security! Here’s what we need:Governance, Risk & Compliance: Risk-based decisions, adherence to regulatory and internal security standards.Threat Modelling and Risk Management: Identify threats and mitigations for complex cloud systems.Cloud Security Expertise: broad knowledge across the following Security Domains and their capabilities within ...

scalable solutions.What you’ll be doing: Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments.Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift.Partner … expertise and a passion for security! Here’s what we need:Governance, Risk & Compliance: Risk-based decisions, adherence to regulatory and internal security standards.Threat Modelling and Risk Management: Identify threats and mitigations for complex cloud systems.Cloud Security Expertise: broad knowledge across the following Security Domains and their capabilities within ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to:- Identify business objectives, user needs, risk appetite and cyber security obligations- Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls- Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure)Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE)Some experience working with security standards such ...

structuring security engagements, including managing scope, stakeholders, and delivery risk. Communicates clearly with both technical architects and non‐technical executives, adjusting without losing accuracy. Threat modelling experience using structured methods such as STRIDE, applied to complex hybrid ecosystems before deployment. Experience working with legacy technical debt in practice ...

/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience collaborating with SOC and Incident Response teams during security events.* Working knowledge of security frameworks and regulations (NIST ...

structuring security engagements, including managing scope, stakeholders, and delivery risk.Communicates clearly with both technical architects and non-technical executives, adjusting without losing accuracy.Threat modelling experience using structured methods such as STRIDE, applied to complex hybrid ecosystems before deployment.Experience working with legacy technical debt in practice: modernising authentication protocols, managing ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills ...

Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC) best practice Implement container and Kubernetes security across ...

SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).Experience embedding security into CI/CD pipelines and DevSecOps practices.Proven capability in risk assessments, threat modeling, and control gap analysis.Experience collaborating with SOC and Incident Response teams during security events.Working knowledge of security frameworks and regulations (NIST ...

/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience collaborating with SOC and Incident Response teams during security events.* Working knowledge of security frameworks and regulations (NIST ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise to guide … oversee cyber security policies aligned with defence and wider government standards.Act as the Saab UK representative on the Global Cyber Council.Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process.Manage incident response and coordinate with other company parties.Lead on the compliance of Cyber controls including DefStan ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise to guide … cyber security policies aligned with defence and wider government standards. Act as the Saab UK representative on the Global Cyber Council. Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process. Manage incident response and coordinate with other company parties. Lead on the compliance of Cyber ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise to guide … cyber security policies aligned with defence and wider government standards. Act as the Saab UK representative on the Global Cyber Council. Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process. Manage incident response and coordinate with other company parties. Lead on the compliance of Cyber ...

develop and lead the Saab UK Cyber Security Strategy. As part of the Saab UK Cyber defence cell the role will be responsible for threat intelligence identification. Working closely with Security and IT develop resilience in the Saab UK Supply chain and provide the necessary GRC expertise to guide … cyber security policies aligned with defence and wider government standards. Act as the Saab UK representative on the Global Cyber Council. Lead risk assessments, threat modelling, and vulnerability management within Saab Uk process. Manage incident response and coordinate with other company parties. Lead on the compliance of Cyber ...

control gaps, providing mitigation recommendations.Support governance, risk, compliance, and assurance activities.Contribute to security roadmaps and continuous improvement initiatives.Provide guidance on cloud security monitoring, threat management, and incident response capabilities.Support managed cloud security service engagements where required.Essential Skills & ExperienceProven experience working as a Security Architect within complex enterprise or government … ServicesExperience designing secure cloud solutions within AWS, Azure, or multi-cloud environments.Deep understanding of security architecture principles, frameworks, and best practices.Experience conducting security reviews, threat modelling, and risk assessments.Strong knowledge of identity and access management, network security, encryption, and security monitoring.Experience integrating security into cloud transformation and migration ...

reference patternsIntegrate security tooling and automated controls into CI/CD pipelines, including SAST/DAST tooling, secrets scanning, and policy-as-code enforcementConduct threat modelling exercises, cloud security posture reviews, and risk assessments for cloud platforms and workloadsWork within scaled agile delivery teams, contributing security requirements ...

Support the planning and scoping of IT Health Checks (ITHCs) and interpret assessment outcomes. Identify, assess and manage security risks within solution architectures. Conduct threat modelling, risk assessments and security impact analyses. Design proportionate security controls using cloud-native technologies and services. Produce architecture artefacts including security patterns ...

Infrastructure as Code, and cloud-native engineering practices. Drive cloud security governance, architecture assurance, security remediation, and control optimisation initiatives. Conduct security architecture reviews, threat modelling exercises, risk assessments, and cloud security maturity assessments. Contribute to business development activities, thought leadership, and the continued growth of our Cloud ...

technical validation sessions.Security Leadership & StrategyDriving the organization’s Zero Trust strategy and security roadmap.Providing architectural governance and ensuring security best practices across projects.Conducting threat modelling, gap assessments, and risk evaluations for critical applications and network paths.Advocate for the adoption of modern security frameworks and secure-by-design principles.Operations ...

governance, and IT operations sit at the heart of that ambition.What you will be doingSecurity architecture and engineering– Define security architecture standards and lead threat modelling across the organisation– Establish and maintain long-term security architecture aligned to business strategy and regulatory requirements– Guide technology decisions … enterprise level, including cloud strategy and zero trust adoption– Oversee penetration testing, DLP, and advanced threat detection programmes.– Own the vulnerability management programme– Implement enterprise frameworks including IAM, SIEM, and data classification.– Anticipate emerging threats, leverage AI/ML for predictive security, and set the technology vision– Lead Security ...

security engineering expertise throughout the system development and operational lifecycle, ensuring security requirements are identified and implemented from concept through disposal.Conduct security architecture reviews, threat assessments, and technical risk analysis for classified environments.Support the development and maintenance of system security documentation, security architectures, and security operating procedures.Lead and coordinate … SIEM, vulnerability management, encryption, and identity management solutionsDemonstrable experience applying Secure by Design principles in complex IT systems and programmes.Experience conducting security architecture reviews, threat modelling, and risk assessments.Strong understanding of system hardening, security controls implementation, and security testing methodologies.Experience supporting system engineering and security requirements management within ...