201 to 225 of 534 Threat Modelling Jobs in the UK

enterprise and IT/OT converged security architectures, including secure network segmentation and access models. Help to produce HLD and LLD artefacts, dataflows and threat models for enterprise and IT/OT converged environments. Contribute to cloud security architecture designs, including secure landing zones, identity integration, connectivity patterns ...

authentication, authorization, or both Experience building and operating SaaS or cloud platforms at enterprise scale A background in security architecture, with working knowledge of threat modeling and secure design principles Experience leading platform engineering teams that serve other engineering teams as customers Familiarity with compliance frameworks relevant to enterprise ...

current and emerging technologies to select or recommend the best solutions for the future state architecture. Knowledge of application security, MITRE ATT&CK and Threat Modelling. Broad knowledge of controls in the industry (NIST, ISO, PCI, SOC, CSF, ISO27001, SABSA and TOGAF) Identity and Access Management (SAML, OAuth, certs … Identifying security flaws in solutions through threat modelling, architectural assessments and design reviews Identity and Access Management, Data Leakage Prevention, Network and Infrastructure Security Cryptography, Encryption and Key Management, Secrets Management, TLS, IPSec, Ciphers, X509 Application Security Design, DevSecOps, Agile practices, Shift Left concepts and automation You have ...

core insurance functions such as policy administration, claims, billing, and data analytics. Security Expertise Architecture Design secure, compliant architectures aligned with insurance regulations Lead threat modelling and security design reviews. Collaborate with cybersecurity experts Startup Execution Operate effectively in a lean, agile environment with evolving business needs … Detailed understanding of insurance workflows and systems Experience integrating with or building insurance platforms and data models. Exposure to US property catastrophe (cat) risk modelling platforms and data sources. Startup Experience Proven success in a fast-paced (or Insurtech) environment. Comfortable navigating ambiguity, adapting to rapid change, and collaborating ...

technology solutions, projects and material technology change. Ensure security requirements are embedded within project, change and delivery lifecycles through secure-by-design principles and threat-led risk assessments. Oversee penetration testing, technical security assessments and vulnerability assurance activities, ensuring identified risks are appropriately assessed and managed. Provide cyber security … security governance frameworks. Experience implementing secure-by-design and SSDLC practices. Experience with cloud security architecture within Azure and SaaS environments. Experience performing threat modelling and security design reviews. Experience supporting audit and regulatory assurance activities. Experience assessing technology risks in financial services environments. Qualifications: Minimum ...

technology solutions, projects and material technology change. Ensure security requirements are embedded within project, change and delivery lifecycles through secure-by-design principles and threat-led risk assessments. Oversee penetration testing, technical security assessments and vulnerability assurance activities, ensuring identified risks are appropriately assessed and managed. Provide cyber security … security governance frameworks. Experience implementing secure-by-design and SSDLC practices. Experience with cloud security architecture within Azure and SaaS environments. Experience performing threat modelling and security design reviews. Experience supporting audit and regulatory assurance activities. Experience assessing technology risks in financial services environments. Qualifications: Minimum ...

patterns. This will include areas such as LLMs, RAG, AI agents, vector databases, prompt injection, data leakage, identity, tool/API integration and AI threat modelling, alongside broader cloud and enterprise security architecture. The successful candidate will have a strong security architecture background combined with genuine AI/ ...

development of these, Contribution of security requirements to large programmes Lead the development and maintenance of security tooling roadmaps alongside cyber prevent stakeholders Conduct threat modelling to allow the pro‐active application of security controls to systems, Support RFI/RFP processes with architecture and security requirements ...

experience of CI/CD, ideally using GitHub Actions, together with Docker and containerised workloads - Sound understanding of monitoring, incident response, backup, disaster recovery, threat modelling and secure software delivery - Experience within fintech, banking, payments, accounting software, payroll or another regulated environment would be advantageous; exposure ...

Handle day-to-day vulnerability management, including pen test findings: prioritise what's genuinely exploitable, track fixes and check they've worked. Help run threat modelling sessions in IriusRisk and turn the results into backlog tickets. Look after secrets management, certificates and access reviews and keep security documentation ...

cyber security into OT system architecture and lifecycle. Develop and maintain the Information Assurance Framework tailored to OT environments. Conduct OT-specific risk assessments, threat modelling, and vulnerability analysis. Oversee cyber resilience testing and incident response planning for OT systems. Compliance & Standards Ensure alignment with nuclear ...

cloud platforms (Azure, AWS) and cloud‐native architectures Experience with containerisation (Docker, Kubernetes) and CI/CD pipelines Familiarity with security architecture principles and threat modelling Experience in the cybersecurity, forensics, or defence technology sectors Understanding of database design and data architecture patterns Experience with API design ...

traditional on-premise hosting; hands-on experience with Azure, AWS and/or GCP is beneficial. Proven security architecture expertise is beneficial, including: Threat modelling and secure-by-design practices IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication Encryption in transit/at rest ...

creating actionable alerts, defining SLOs and SLIs, and leading incident response and post‐incident improvement activities. Embed security by design through secure coding practices, threat modelling, role‐based access control and least privilege, secrets management including Key Vault integration, and modern identity patterns using OAuth2 and OIDC. Coach ...

applications, platforms, APIs, cloud solutions, and data services using the Shift left methodology Provide expert security guidance and assurance across the wider business Lead threat modelling activities and support informed decision-making around security risks, controls, and trade offs Define and maintain security patterns covering areas such ...

remediation), patch management, endpoint protection/anti-malware, and access control management (e.g., IAM/PAM), including driving findings to closure. Working knowledge of threat modelling and risk assessment, applied to cloud architectures and CI/CD pipelines to guide secure design and prioritised risk treatment. Experience with ...

containerised environments, including network policies. Strong grasp of network security controls: firewalls, WAFs, segmentation, TLS termination and egress filtering. A structured approach to threat modelling and risk assessment, and the ability to explain risk clearly to any audience. Experience in financial services or another regulated environment. Inclusion, Work ...

NSGs, and network segmentation. Maintain platform hardening standards, identity and access management controls, encryption standards, and privileged access models. Lead technical security reviews, infrastructure threat modelling, and remediation activities for cloud platform changes. Implement policy-based guardrails and preventative controls using native cloud governance capabilities. Infrastructure as Code ...

identified risks into organisational controls Ability to operate across accounts and teams, building test strategy and tooling recommendations that generalise beyond a single application Threat modelling and security review experience Strong communication skills, able to explain agentic AI risk clearly to technical and non‐technical stakeholders, including ...

remediation), patch management, endpoint protection/anti-malware, and access control management (e.g., IAM/PAM), including driving findings to closure.* Working knowledge of threat modelling and risk assessment, applied to cloud architectures and CI/CD pipelines to guide secure design and prioritised risk treatment.* Experience with ...

cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities and remedial action plans. Coordinating with product ...

cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities and remedial action plans. Coordinating with product ...

will maintain the documentation and the testing evidence. Secure development: you will help embed security requirements into the SDLC and support threat modelling sessions. Data protection: you will support RoPA maintenance, DPIA completion and DSAR handling alongside Legal. What success looks like: First 90 days: you know ...

effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data. Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices. Consults on security direction, maintaining a vigil over prudent assurance ...

cloud security standards including NIST, CIS, and ISO. Performed risk analysis and documented all risks and mitigating controls within cloud environments. Understanding of threat models and their application to aid in securing cloud environments. Act as a role model, engage with the promotion of a culture of good conduct ...