476 to 500 of 512 Threat Modelling Jobs in the UK

AI Security Engineer

Location
Melbourn, England, United Kingdom
becoming shelfware. Input to vendor risk assessments fits here too, particularly on how vendors handle your data in their own models. Understanding the AI threat landscape They need a working knowledge of AI-specific attack techniques and should be fluent in the reference frameworks, mainly the OWASP … understand how attackers use AI against the organisation (more convincing phishing, deepfake-enabled fraud, faster reconnaissance and exploit development) and how that changes your threat model. Shadow AI, meaning unsanctioned use of AI tools by staff, is a practical, near-term issue they should be able to discover ...

Senior CSIRT Analyst

Hiring Organisation
G Research
Location
London, UK
Employment Type
Full-time
supporting junior analysts through knowledge sharing and technical guidanceParticipating in the on-call escalation rota for out-of-hours incidentsImproving CSIRT processes, playbooks and threat modelsWho are we looking for? The ideal candidate will have the following skills and experience: Significant experience in cyber incident response, detection engineering … containerised environments and cloud-native infrastructure securityProgramming or scripting experience, preferably in Python, and exposure to automation platformsStrong understanding of modern attack techniques, threat actors and the MITRE ATT&CK frameworkExperience mentoring or leading within a security operations environmentStrong analytical skills with the ability to investigate complex threats, identify ...

Senior CSIRT Analyst

Location
Greater London, England, United Kingdom
analysts through knowledge sharing and technical guidance Participating in the on-call escalation rota for out-of-hours incidents Improving CSIRT processes, playbooks and threat models Who are we looking for? The ideal candidate will have the following skills and experience: Significant experience in cyber incident response, detection engineering … environments and cloud-native infrastructure security Programming or scripting experience, preferably in Python, and exposure to automation platforms Strong understanding of modern attack techniques, threat actors and the MITRE ATT&CK framework Experience mentoring or leading within a security operations environment Strong analytical skills with the ability to investigate ...

Senior Cyber Security Engineer – SIEM & Threat Detection

Location
Greater London, England, United Kingdom
Engineer to join our Proactive Security team, focusing on building security tech stacks to mitigate threats with offensive and preventive measures. You will develop threat models, manage SIEM systems, and implement detection use cases while collaborating with incident response to protect information assets in a hybrid UK workplace. ...

Cyber Security Specialist

Location
Stevenage, England, United Kingdom
solutions, and email sandboxing tools. You will support Sec Dev Ops and secure development automation initiatives. You will define and implement a company-wide threat modeling framework to ensure consistent risk assessment across all business units. You will lead the end-to-end Vulnerability Management lifecycle, including risk prioritization … rules, and access controls. About you Experience in security architecture, risk analysis, and security countermeasures. Experience managing advanced security solutions, including EDR and email threat protection tools. Proven expertise in performing threat modeling to identify and mitigate architectural security risks. Experience designing and overseeing an enterprise-wide Vulnerability ...

Security Engineer, Incident Response

Location
Greater London, England, United Kingdom
system and spend a career patching it. Here you own it end to end, bare metal to boardroom, as we scale across continents. Your threat surface is measured in gigawatts. The customers running on our infrastructure are building the most consequential technology in human history, and being responsible … containment through eradication and post-incident review. Build the detection logic, response playbooks, and forensic tooling for an environment where the assets under threat are the most targeted model weights in technology. Run investigations across a threat surface measured in gigawatts, correlating signals from cloud, endpoint, network ...

Application Security Engineer

Location
Greater London, England, United Kingdom
while ensuring our platform remains both powerful and trustworthy The opportunity is massive: you’ll help define how enterprise AI applications are secured, from threat modeling our LLM architectures to building automated security controls that scale across our growing platform This isn’t about saying “no”—it’s about … hybrid from our London office, reporting to the head of security engineering Build security into the DNA of our AI platform by conducting threat modeling sessions with product teams, designing secure architectures for new features, and ensuring security considerations shape product decisions from day one—not after the fact ...

AI Security Specialist

Hiring Organisation
Deel
Location
United Kingdom, UK
Employment Type
Full-time
within our security architecture. ResponsibilitiesDefine, implement, and maintain the AI security strategy across Deel's infrastructure and product ecosystemLead security assessments and threat modeling for AI/ML models, LLM integrations, and agentic AI systemsEvaluate and deploy AI Security Posture Management (AISPM) and AI Detection & Response (AIDR) solutionsSecure … structured approval pipelinesCollaborate with the SOC and incident response teams to build AI-specific detection rules, playbooks, and response proceduresContinuously monitor the evolving AI threat landscape, track emerging attack techniques, and translate new risks into actionable security controls and updated policiesContribute to compliance initiatives by ensuring AI deployments meet ...

Senior Security Analyst (L3 SOC Analyst)

Location
City Of London, England, United Kingdom
carbon, sustainable future. This role is part of Inchcape's Global Cyber Security team, supporting our worldwide operations through advanced security monitoring, threat detection and incident response capabilities. You'll play a critical role in protecting our people, systems and data, working alongside highly skilled security professionals … operate in an L3 Security Operations Centre (SOC) capacity, serving as the senior technical escalation point for complex cyber security incidents and advanced threat investigations. You'll drive continuous improvement across detection engineering, threat hunting, automation and incident response capabilities, helping strengthen Inchcape's cyber resilience and security ...

Product Security Engineer

Location
Greater London, England, United Kingdom
Security Engineer, you will support security assessments and vulnerability operations for Cloudflare’s core software products. In this role, you will analyze system architecture, threat model new features, and ensure that product-related security findings are accurately triaged, routed to the correct engineering owners, and mitigated within our SLAs. … Identify process bottlenecks and build AI-driven tools or scripts to help automate code analysis, optimize triage, and streamline Product Security workflows. Security Reviews & Threat Modeling: Conduct structured security reviews and threat modeling sessions (e.g., STRIDE) across product features, defining security requirements early in the development lifecycle. Product ...

Senior Cloud Detection Engineer - Elastic Stack, Sentinel, KQL, EQL

Hiring Organisation
Smart Sourcer Limited
Location
City of London, London, United Kingdom
Employment Type
Permanent
automated response workflows, this role gives you real technical impact. What Youll Do: Build and optimise detections in Elastic and Azure Sentinel Develop threat models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with … external SOC to refine detection strategies Perform threat hunting and analysis across large-scale cloud environments Tune rules to reduce false positives Document detection logic and playbook procedures What You Bring: 5+ years in security operations, threat detection, or SOC roles Strong experience with Elastic Stack and/ ...

Senior Cloud Detection Engineer - Elastic Stack, Sentinel, KQL, EQL

Hiring Organisation
Smart Sourcer Limited
Location
City of London, Greater London, UK
automated response workflows, this role gives you real technical impact. What You'll Do: Build and optimise detections in Elastic and Azure Sentinel Develop threat models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with … external SOC to refine detection strategies Perform threat hunting and analysis across large-scale cloud environments Tune rules to reduce false positives Document detection logic and playbook procedures What You Bring: 5+ years in security operations, threat detection, or SOC roles Strong experience with Elastic Stack and/ ...

Content Security Engineer, GME Security

Hiring Organisation
Amazon
Location
London, UK
Employment Type
Full-time
years of scripting, programming, and security code review in a common programming language (non-internship) experience- 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience- Experience applying threat modeling or other … products and services- Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing- CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ ...

83zero

Location
Greater London, England, United Kingdom
hybrid environments for government and regulated clients.## Key Responsibilities* Lead the development of security strategy and implementation plans for cloud-based infrastructure* Conduct thorough threat modeling to identify and mitigate risks in cloud environments* Embed Secure by Design principles across the entire cloud lifecycle, from planning to deployment* Collaborate … consulting or advisory role* Strong technical expertise in cloud platforms (e.g., AWS, Azure, Google Cloud) and security tools/solutions* Proficiency in threat modeling, risk assessment, and the implementation of security controls* Excellent problem-solving and analytical skills, with the ability to think strategically* Effective communication and collaboration skills ...

Technology and Cyber Employee Platforms Risk – Executive Director

Location
Bournemouth, England, United Kingdom
premises and cloud environments. You report to the Employee Platforms Tech & Cyber Operational Risk Officer. Key activities include conducting technical risk assessments; reviewing threat models for critical systems and third‐party solutions; identifying and driving mitigation of control gaps; collaborating with stakeholders and technology teams to ensure compliance with … oversight and risk assessments of Employee Platforms. Monitor and assess significant events where technology is a factor, including external incidents driven by third parties, threat actors, and technology change failure. Understand and utilise trends and toolsets within AI/LLM platforms to assist and streamline assessments in order ...

Technology and Cyber Employee Platforms Risk - Executive Director

Location
Christchurch, England, United Kingdom
premises and cloud environments. You report to the Employee Platforms Tech & Cyber Operational Risk Officer. Key activities include conducting technical risk assessments; reviewing threat models for critical systems and third‐party solutions; identifying and driving mitigation of control gaps; collaborating with stakeholders and technology teams to ensure compliance with … oversight and risk assessments of Employee Platforms. Monitor and assess significant events where technology is a factor, including external incidents driven by third parties, threat actors, and technology change failure. Understand and utilise trends and toolsets within AI/LLM platforms to assist and streamline assessments in order ...

Security engineer, application security (UK)

Location
Greater London, England, United Kingdom
while ensuring our platform remains both powerful and trustworthy. The opportunity is massive: you'll help define how enterprise AI applications are secured, from threat modeling our LLM architectures to building automated security controls that scale across our growing platform. This isn't about saying "no"—it's about … London office, reporting to the head of security engineering. What you'll do Build security into the DNA of our AI platform by conducting threat modeling sessions with product teams, designing secure architectures for new features, and ensuring security considerations shape product decisions from day one—not after ...

Cyber Security Specialist - UK SC Clearance | Hybrid Role

Location
Stevenage, England, United Kingdom
technologies and procedures that mitigate short and long‐term threats within our dynamic, international environment. You will maintain security products (EDR, multi‐antivirus, email threat protection), support Sec DevOps, implement a company‐wide threat modeling framework and lead the Vulnerability Management lifecycle using Tenable. #J-18808-Ljbffr ...

Read more: Cyber Security Associate

Location
United Kingdom
Review technical documentation to determine whether sufficient evidence exists to demonstrate compliance with regulatory requirements. Evaluate cybersecurity architectures, risk assessments, software documentation, vulnerability and threat management processes, security test reports and supporting technical evidence. Interpret the requirements of product cybersecurity standards and apply them consistently across diverse technologies … practical engineering recommendations. Understanding of secure software development, security risk assessment and secure product lifecycle principles. Ability to analyse technical documentation including system architectures, threat models, software documentation and security test reports. Excellent written communication skills with experience producing technical reports for customers or regulatory purposes. Strong interpersonal skills ...

Senior Consultant | Cybersecurity - Incident Response

Location
Greater London, England, United Kingdom
knowledge of industry trends, threats, methodologies and core technologies in order to assimilate client needs and design appropriate technical solutions.* Lead assessment of current threat identification techniques and development of new methodologies and frameworks.* Incident analysis, combining sound analytical skills with advanced knowledge of cybersecurity, digital forensics and incident … tools such as SentinelOne, Carbon Black etc.* Knowledge of Chain of Custody procedures.* Understanding of data loss/data theft prevention concepts and technologies.* Threat modeling fundamentals.Preferred Qualifications* Certifications related to DIFR, i.e., GCFE, GCFA, GREM, GNFA, or a willingness to obtain them.* Experience in online learning such ...

Security Engineer

Location
City of Westminster, England, United Kingdom
help protect billions of users and Meta's global infrastructure from evolving threats. In this role, you will conduct security assessments, vulnerability research, and threat modeling across Meta's products and systems — spanning mobile applications, web platforms, backend services, and internal infrastructure. You will identify systemic security gaps, drive … Engineer Responsibilities:Conduct security assessments, penetration testing, and vulnerability research across Meta's web, mobile, and backend systems to identify and remediate security risksPerform threat modeling and security architecture reviews for new and existing products and infrastructureIdentify systemic security gaps and drive cross-functional mitigations that scale beyond individual ...

Application Security Engineer, Amazon Application Security

Hiring Organisation
Amazon
Location
London, UK
Employment Type
Full-time
computing is critical, as is a high level of ownership and accountability. Key job responsibilitiesYour work will include: - Application security reviews - Secure architecture design - Threat modeling - Projects and research work as needed - Security training and outreach to internal development teams - Security guidance documentation - Security metrics delivery and improvements - Assistance … Swift, Java, .Net, C++ or similar object oriented languagePreferred qualification - Experience with AWS products and services- Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security- Experience with programming languages such as Python, Java, C++ ...

Staff / Senior Staff Security Engineer, Vinted Pay

Location
Greater London, England, United Kingdom
will own the security of that whole estate. Vinted Security runs a federated model: the central team sets thresholds and provides core services (pentesting, threat intelligence, SSDLC tooling, compliance), while each business unit owns local execution. Vinted Pay already owns part of its local execution; your … About you Strong hands‐on security engineering experience on a real engineering foundation - you have built or run large production systems, and you can threat‐model a payment flow, find the attack path yourself, and drive or build the fix. Experience in regulated payments or fintech - you have worked ...

Staff / Senior Staff Security Engineer, Vinted Pay

Hiring Organisation
Vinted
Location
London, UK
Employment Type
Full-time
will own the security of that whole estate. Vinted Security runs a federated model: the central team sets thresholds and provides core services (pentesting, threat intelligence, SSDLC tooling, compliance), while each business unit owns local execution. Vinted Pay already owns part of its local execution; your … About you Strong hands-on security engineering experience on a real engineering foundation - you have built or run large production systems, and you can threat-model a payment flow, find the attack path yourself, and drive or build the fix. Experience in regulated payments or fintech - you have worked ...

Cybersecurity Architect III: AI-Driven Threat Modeling

Location
City Of London, England, United Kingdom
with cross-functional architects to implement secure technology that aligns with business objectives. You will apply AI-assisted patterns within the SDLC to improve threat modeling, control reviews, and security documentation, while ensuring traceability and auditability #J-18808-Ljbffr ...