151 to 175 of 534 Threat Modelling Jobs in the UK

Doing Lead the design and assurance of secure architectures across complex Defence, Government, CNI and mission-critical environments. Define security requirements, threat models, architectural principles and proportionate security controls across the system lifecycle. Identify and manage security risks across high-level and detailed solution designs, providing practical mitigation strategies … Framework (CAF), NIST and ISO 27001 . Experience applying risk-driven security architecture methodologies to complex systems and environments. Strong understanding of security requirements, threat modelling, risk assessment and security controls. The ability to communicate complex technical risks and recommendations to both technical and C-level audiences. Experience ...

deployment controls. Champion automated testing across unit, integration, contract, UI, performance and security testing, with measurable quality gates. Embed secure‐by‐design practices including threat modelling, dependency and secret scanning, secure coding, vulnerability remediation and software supply‐chain controls. Establish application telemetry, logging, tracing, alerting and operational dashboards … modular monolith patterns, with the judgement to select an appropriate approach. Practical experience with SQL Server/Azure SQL, Entity Framework Core, data modelling and query/performance optimisation. Strong Git and GitHub engineering practices, including pull requests, branch protection, code ownership, GitHub Actions and repository governance. Experience implementing ...

Assess and advise on cloud, network, infrastructure and application security controls. Review complex technical solutions against security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments . Provide technical oversight of security testing and penetration testing activities. Support vulnerability management and help teams ...

guidance, and where required production of an action plan for vulnerabilities identified with clear recommendations and outcomes to mitigate and address. Delivering risk, threat modelling and analysis for systems, applications and infrastructure. Designing proportional security controls to bring risk within appetite, leveraging native cloud technologies. Producing security architecture ...

patterns Integrate security tooling and automated controls intoCI/CD pipelines, including SAST/DAST tooling, secrets scanning, and policy-as-code enforcement Conduct threat modelling exercises, cloud security posture reviews, and risk assessments for cloud platforms and workloads Work within scaled agile delivery teams, contributing security requirements ...

passionate and talented application security engineer with very deep understanding of OWASP, CWE 25, Data Protection, Access management, software vulnerabilities, best practices design and threat modelling skills, who can work in a dynamic environment. You must be dedicated to able to work with developers in producing secure code ...

cloud, network, infrastructure and application security controls. Review complex technical solutions and ensure they align with security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management activities, helping ...

executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security ...

network, application, data and endpoint layers Lead security architecture reviews and technical security assessments Design zero-trust security models and continuous verification frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations Design security solutions supporting Information Security Management System (ISMS) compliance Architect compliance and audit ...

network, application, data and endpoint layers Lead security architecture reviews and technical security assessments Design zero-trust security models and continuous verification frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations Design security solutions supporting Information Security Management System (ISMS) compliance Architect compliance and audit ...

pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier Engagement Support V&V, penetration testing, and remediation, and manage security alignment with suppliers. Compliance & Documentation Own the security compliance dossier … hardware engineering with at least 5 years focused on cybersecurity for embedded systems, IoT, or cloud platforms. Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products. Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security ...

security solutions across network, application, data and endpoint layersLead security architecture reviews and technical security assessmentsDesign zero-trust security models and continuous verification frameworksCyber Threat & Risk ManagementAssess cyber threat landscape and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat … complianceArchitect compliance and audit capabilities for regulatory reportingLead security standards implementation and controls frameworksSecurity Solutions & IntegrationArchitect endpoint protection, data loss prevention (DLP) and advanced threat protection solutionsDesign cloud security architectures supporting hybrid and multi-cloud environmentsArchitect application security, API security and secure SDLC integrationDesign security operations centre (SOC) capabilities ...

deployment controls. Champion automated testing across unit, integration, contract, UI, performance and security testing, with measurable quality gates. Embed secure-by-design practices including threat modelling, dependency and secret scanning, secure coding, vulnerability remediation and software supply-chain controls. Establish application telemetry, logging, tracing, alerting and operational dashboards … modular monolith patterns, with the judgement to select an appropriate approach. Practical experience with SQL Server/Azure SQL, Entity Framework Core, data modelling and query/performance optimisation. Strong Git and GitHub engineering practices, including pull requests, branch protection, code ownership, GitHub Actions and repository governance. Experience implementing ...

/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience ...

code best practices. Automating remediation, compliance checks and policy enforcement through cloud-native tooling and policy-as-code approaches. Supporting secure solution design and threat modelling across engineering teams. Owning and improving vulnerability management processes, ensuring remediation targets are achieved. Configuring and maintaining cloud security controls, including ...

need to hold, or be eligible for, SC Clearance. What You'll Be Doing: Leading security architecture engagements across large and complex programmes. Driving threat modelling, secure design, and cyber resilience throughout the delivery lifecycle. Defining and assuring security controls that meet regulatory and business requirements. Identifying ...

challenges that span multiple technology domains. Job responsibilities Cultivate a security culturewith your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your productacross its breadth ...

that span multiple technology domains. Job responsibilities Cultivate a security culture with your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your product across ...

Essential A career in security. You have worked hands-on in technical security roles before leading them and are fluent in the concepts: threat modelling, vulnerability management, cloud security architecture, identity and access, secure software development, detection and response. Experience leading a security team, including line management, development ...

critical role in strengthening and maturing Reapit’s cloud security posture. Your work will span hands on security engineering, deep incident response, proactive threat detection, and collaboration with global teams. Security Engineering & Cloud Security Design, implement, and enhance secure Cloud infrastructure, services, and applications in collaboration with DevOps teams. … outsourced SOC Lead and participate in global incident response activities, including investigation, containment, eradication, and recovery. Perform advanced log analysis, digital forensics, and threat validation using AWS native and third party tooling. Monitor AWS/Azure and application security alerts, responding quickly and decisively. Participate ...

effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data. Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices. Consults on security direction, maintaining a vigil over prudent assurance ...

effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data. Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices. Consults on security direction, maintaining a vigil over prudent assurance ...

effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data. Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices. Consults on security direction, maintaining a vigil over prudent assurance ...

cyber risk register, ensuring risks are clearly documented, appropriately owned and kept audit ready. Develop and maintain the cyber risk taxonomy, including risk categories, threat sources and impact domains aligned to critical business functions. Define and maintain risk scoring methodologies, appetite thresholds and escalation criteria in collaboration with senior … risk management across the organisation. Collaborate with Security Operations, Digital and wider business teams to understand emerging threats and assess their potential impact. Support threat modelling, business impact assessments and wider cyber resilience activities. Promote a proactive and risk-informed culture across the organisation. Knowledge & Skills: Thorough understanding ...

define risk appetite and make informed decisions about whether an initiative is ready to progress. Alongside engineers, you'll get into the technical detail - threat-modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes. From POC to production, you'll bring the two sides … implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review AI architectures, guardrails, evaluations ...