151 to 175 of 508 Threat Modelling Jobs in the UK

/CD pipelines. Partner directly with Engineering and Product teams on architectural decisions, technical trade‐offs and secure‐by‐design development. Run threat‐modelling exercises and support developers with secure coding practices across Node.js, React Native and C++ environments. Own vulnerability management, including triage, risk prioritisation, remediation tracking … Kubernetes security architecture Application and API security Secure software development and shift‐left security Vulnerability management and incident response AI‐related security and emerging threat management SOC 2 Type II and ISO 27001 maturity Security automation and CI/CD integration Enterprise customer security requirements Building the company ...

Infrastructure as Code and cloud-native engineering practices Drive cloud security governance, architecture assurance, security remediation and control optimisation initiatives Conduct security architecture reviews, threat modelling, risk assessments and cloud security maturity assessments Contribute to business development, thought leadership and the continued growth of the Cloud Security practice ...

redesign of Segregation of Duties (SoD) rule sets during business process transformation. Integrate legacy and modern SAP platforms with enterprise IAM solutions. Conduct threat modelling and security assessments throughout the migration lifecycle. Ensure secure transition from traditional ABAP security models to modern SAP HANA and cloud security frameworks. ...

depth, zero trust, least privilege, and secure by design approaches (A, I, P) Strong risk and assurance capability, including conducting risk assessments and threat modelling, developing risk management strategies, and leading internal and external security audits, assessments, and penetration testing aligned to frameworks such as CAF and NIST ...

measures and best practicesCoordinating incident response across the organisation to respond to threats and security breachesUpgrade security solutions, research new attack vectors and develop threat modelsPerforming security control audits and coordinating with other teams within the organisation to implement the outcomes of security controlsSkills:Cloud Security and Development ...

best practices Coordinating incident response across the organisation to respond to threats and security breaches Upgrade security solutions, research new attack vectors and develop threat models Performing security control audits and coordinating with other teams within the organisation to implement the outcomes of security controls Skills Cloud Security ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture … building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack ...

DevOps, and operational teams, you will contribute to cloud architecture designs, automate security remediation processes, and provide proactive insights into cloud risks, vulnerabilities, and threat mitigation strategies. Drive continuous improvements and enhancements to cloud infrastructure in alignment with business strategy, budget, and security objectives. Design, build, and maintain secure … software development lifecycle practices. Identify, assess, and mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while ...

security findings Improving secrets management and encryption practices Monitoring cloud activity and investigating suspicious behaviour Supporting incident response and documenting corrective actions Contributing to threat modelling for new services and architecture changes Maintaining evidence and technical controls required for audits and compliance reviews Where it gets technically interesting ...

Responsibilities of a Cloud Security Specialist Design secure AWS architectures, patterns and security controls Apply security, regulatory and compliance requirements to cloud environments Conduct threat modelling and risk assessments across AWS workloads Support large-scale cloud migration and transformation projects Collaborate with architects, engineers and cyber security teams ...

guidance, and where required production of an action plan for vulnerabilities identified with clear recommendations and outcomes to mitigate and address. Delivering risk, threat modelling and analysis for systems, applications and infrastructure. Designing proportional security controls to bring risk within appetite, leveraging native cloud technologies. Producing security architecture ...

guidance, and where required production of an action plan for vulnerabilities identified with clear recommendations and outcomes to mitigate and address. Delivering risk, threat modelling and analysis for systems, applications and infrastructure. Designing proportional security controls to bring risk within appetite, leveraging native cloud technologies. Producing security architecture ...

passionate and talented application security engineer with very deep understanding of OWASP, CWE 25, Data Protection, Access management, software vulnerabilities, best practices design and threat modelling skills, who can work in a dynamic environment. You must be dedicated to able to work with developers in producing secure code ...

cloud, network, infrastructure and application security controls. Review complex technical solutions and ensure they align with security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management activities, helping ...

requirements for shipboard and supporting systems. Build and structure the initial asset register for configuration control, capturing criticality, zone, ownership and dependency attributes. Support threat modelling and security risk assessment from an architecture perspective, and translate assessed risk into architectural controls. Define architecture‐level security requirements and maintain ...

prioritiesYou can review architectures at both high-level and detailed design, offering clear and actionable guidanceYou have a strong grasp of secure design principles, threat modelling, risk management, and zero trust conceptsYou communicate with clarity and empathy, making complex AI security topics easy to understand for non-technical ...

using tools such as Wiz, Microsoft Defender, and ArmorCode.Prioritise and coordinate remediation efforts based on business impact, exploitability, and risk exposure.Conduct security assessments and threat modelling exercises for new projects and technologies.Ensure security controls align with SOC2, ISO27001, CIS Controls, and organisational risk management requirements.Produce reports and metrics … support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling.Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities.Develop automated controls and workflows to enhance governance, compliance, and incident response processes.Skills and Experience: Essential Microsoft Entra ID/Identity Governance ...

/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates.Maintain security workflows and coach engineers on secure coding and threat‐driven design.Validation & Supplier EngagementSupport V&V, penetration testing, and remediation, and manage security alignment with suppliers.Compliance & DocumentationOwn the security compliance dossier, including Cybersecurity Plans …/hardware engineering with at least 5 years focused on cybersecurity for embedded systems, IoT, or cloud platforms.Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products.Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security ...

engineering and DevOps teams to embed security tools (e.g., SAST, DAST, SCA) into CI/CD pipelines.Help maintain and improve automated security testing workflows.Support threat modelling and secure design practices at the project level.Participate in security reviews of new features and applications.Security Testing and ToolingOversee the planning … DevSecOps environments.Hands-on experience with security testing tools (e.g., Veracode, SonarQube, Burp Suite, etc.).Familiarity with secure coding practices, OWASP Top 10, and threat modelling.Experience working in Agile or DevOps-driven environments.Strong verbal and written communication skills.Relevant security or DevSecOps certifications (e.g., CSSLP, CEH, GWEB) preferred.Eligible for SC clearance ...

Enterprise Security Architecture or Security Solutions Architecture to develop and own:Identify business objectives, user needs, risk appetite and cyber security obligationsIdentify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controlsVerify and evidence alignment to 'Secure by Design' principles, corporate security policy/standards … NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelinesIn-depth knowledge of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.Minimum of 10 years of experience in Cyber SecurityAny 2 of the following certifications CISSP, CISM, CCSP, CRISC or equivalent experience3+ years of experience ...

/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience ...

cybersecurity challenges that span multiple technology domains.Job responsibilitiesCultivate a security culture with your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your product across ...

challenges that span multiple technology domains. Job responsibilities Cultivate a security culturewith your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your productacross its breadth ...

into CI/CD pipelines , integrating SAST, DAST, SCA, and infrastructure-as-code scanning so vulnerabilities are caught before they ship, not after. Support threat modelling and design reviews with engineering teams, using structured methods (STRIDE, MITRE ATT&CK) to identify risks early and influence architecture decisions directly. ...

Identifying and validating technical, procedural, physical and personnel security controls, making recommendations to address security vulnerabilities and control weaknesses. Facilitating cyber risk workshops and threat modelling to identify and assess risks that arise from solution architectures. Supporting the scoping of IT Health Checks, which will identify principal security ...