51 to 75 of 532 Threat Modelling Jobs in the UK

team to take it even further. About the Role We are seeking a Principal Product Cybersecurity Assurance Engineer with deep expertise in product security, threat modelling, and risk assurance for highly regulated electromechanical systems. In this role, you will lead the delivery of product cybersecurity across Humanoid … inference pipeline and cloud-to-robot communication architecture. Own and maintain key security artefacts for audit-ready cybersecurity documentation including Security Management Plans, Threat Analysis and Risk Assessment (TARA) reports, Risk Assessments, and Remediation Action Plans across both platforms. Security Assurance & Certification Drive security assurance through the full product ...

software and product development lifecycle. Key Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation activities. Advise on secure design, cloud security, mobile security, authentication, encryption … Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience supporting audits, regulatory reviews or compliance ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

services and integrations, including authentication, authorisation, session management and firm-level data separation AWS security , covering IAM, network controls, secrets, encryption and workload isolation Threat modelling and security review for new systems, financial workflows, external integrations and AI capabilities, joining projects early enough to change their design Vulnerability … security. Hands-on experience securing AWS or another major cloud platform, including IAM, network security and cloud-native controls Secure design. You have run threat modelling and architecture reviews, and you recommend proportionate controls that fit the system and its stage rather than the textbook answer You build ...

help teams understand and remediate their exposure. You will collaborate closely with platform engineers, product squads, and risk and governance teams. Job responsibilities Perform threat modelling of platform services and cloud infrastructure, translating findings into clear, actionable remediation guidance for engineering teams Design and implement cloud security guardrails … concepts and proficient applied experience Hands‐on experience in a DevSecOps, cloud security, or compliance platform engineering role operating in AWS Practical experience with threat modelling methodologies (e.g., STRIDE or equivalent) applied to cloud services or distributed systems Good working knowledge of AWS cloud security services including Identity ...

design options, manage risk-based trade-offs and produce clear architecture decision records. Review and assure solution designs, integrations and third-party components. Conduct threat modelling and identify proportionate remediation where designs do not meet required standards. Represent Littlefish Group at CAB and design authority forums, assessing changes … implementing controls for external customers. Strong knowledge of Zero Trust, identity and access management, Entra ID, Azure and Microsoft 365 security. Experience of threat modelling and using MITRE ATT&CK to inform detection and control design. Working knowledge of recognised frameworks and guidance, including NCSC CAF, NIST ...

Java, C, C++ and other relevant languages. Integrate security controls and automated testing into CI/CD pipelines , including SAST, DAST and SCA. Support threat modelling and vulnerability management across products and services. Work closely with developers, architects, DevOps teams and product owners to embed security into their … major language such as Java, C, C++, C#, Python or similar. Knowledge of secure software development lifecycles and shift-left security practices. Experience with threat modelling , such as STRIDE or similar approaches. Understanding of application, API and web security. Experience interpreting security findings, identifying false positives and prioritising ...

/SAE 21434, ISO 24882, IEC 62443, and the Cyber Resilience Act (CRA) Review the adequacy of key cybersecurity work products such as threat modelling/TARA outputs, requirements, architecture evidence, verification and validation strategies, and residual risk statements Drive closure of findings with stakeholders across systems, embedded … Excellent technical writing, communication, and stakeholder management skills, with the ability to present risk clearly and pragmatically Knowledge or experience of TARA and threat modelling approaches, including review of threat artefacts such as attack trees, is a plus Background in vulnerability management and post‐production monitoring/ ...

technical designs. Working across areas such as cloud, infrastructure, networks, integration, applications and enterprise security. Producing and reviewing security architecture and design documentation. Conducting threat modelling and identifying security risks within proposed solutions. Applying Secure by Design principles throughout the technology lifecycle. Working closely with Solution Architects, Engineers … architecture or solution-design experience. Relevant experience could include: Security Architecture or security solution design. Designing or reviewing HLDs/LLDs and technical architectures. Threat modelling and Secure by Design. Cloud security across AWS, Azure and/or GCP. Security architecture across infrastructure, networks, applications or integration environments. ...

secure‐by‐design culture across the business. Key responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers … software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility Please note ...

secure‐by‐design culture across the business. Key responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers … software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility Please note ...

help teams understand and remediate their exposure. You will collaborate closely with platform engineers, product squads, and risk and governance teams. Job responsibilitiesPerform threat modelling of platform services and cloud infrastructure, translating findings into clear, actionable remediation guidance for engineering teamsDesign and implement cloud security guardrails and policy … software engineering concepts and proficient applied experienceHands-on experience in a DevSecOps, cloud security, or compliance platform engineering role operating in AWSPractical experience with threat modelling methodologies (e.g., STRIDE or equivalent) applied to cloud services or distributed systemsGood working knowledge of AWS cloud security services including Identity ...

bank of the future from the ground up, offering you the chance to join us and make a significant impact. Job Responsibilities Perform threat modelling of platform services and cloud infrastructure, translating findings into clear, actionable remediation guidance for engineering teams Design and implement cloud security guardrails … concepts and proficient applied experience Hands-on experience in a DevSecOps, cloud security, or compliance platform engineering role operating in AWS Practical experience with threat modelling methodologies (e.g., STRIDE or equivalent) applied to cloud services or distributed systems Good working knowledge of AWS cloud security services including Identity ...

trusted subject matter expert, collaborating closely across our product groups to foster a proactive, risk-conscious security culture. Through continuous mentorship and forward-thinking threat modelling, you’ll help us securely scale and drive a digital revolution in the global insurance market. What you will be doing: Provide … implementation advice and guidance on securing AI-powered applications, aligning with frameworks like OWASP ASVS and the OWASP Top 10 for LLM Applications. Lead threat modelling sessions for AI and agentic systems during the technical design phase using STRIDE and AI-specific frameworks. Establish secure guardrails, allowlists, telemetry ...

complex enterprise IT and operational technology environments. Work with technical and solution architects to embed security throughout the design and delivery lifecycle. Apply threat modelling techniques to identify threats and define appropriate security requirements. Provide specialist advice on security risks, threat-based mitigation and system design. Manage … premises architecture and virtualisation Cloud platforms and containerisation Databases and LLM technologies Mobile technologies and application security Security architecture and secure-by-design principles Threat modelling, risk assessment and security requirements Security controls, protective monitoring and IAM Previous experience working specifically as a Security Architect is desirable ...

programmes Producing technical security evidence including risk assessments and vulnerability analysis Supporting programme teams, architects, and engineers to embed cyber security best practice Conducting threat modelling and cyber risk assessments using recognised frameworks Developing risk treatment plans and implementing mitigation strategies This role is full time, standard … Royal Dockyard. Essential experience of the Cyber Security Lead Strong experience delivering secure by design or cyber security assurance activities Proven ability to conduct threat modelling and risk assessments In-depth knowledge of cyber security frameworks such as NIST, ISO 27001, and ISO 27005 Experience influencing multidisciplinary teams ...

lifetime. We need someone who can fix them and make sure they stay fixed. You’ll lead security across our client engagements, from threat modelling to cloud infrastructure hardening, application security, and compliance. No theatre, no ticking boxes. Real security that works. What you’ll do Conduct security … compliance frameworks (SOC2, ISO 27001, Cyber Essentials) Develop security policies, runbooks, and incident response plans Mentor the team on security best practices Lead threat modelling sessions with client engineering teams What we’re looking for 5+ years of security engineering or InfoSec experience Deep knowledge of AWS security ...

from unsupported assurance claims and identify the limitations of the evidence available. You will work alongside senior engineers and security specialists to develop the threat model, risk methodology, research measures, evaluation scenarios and interpretation of results. This is not a conventional compliance or governance-only position. We need someone … work across the wider programme, with greater involvement during early research design and later security evaluation. What you’ll do Develop and challenge the threat model for consequential AI-agent actions. Identify credible threat scenarios, security assumptions and important failure conditions. Define practical consequence and exposure categories relevant ...

Java, C, C++ and other relevant languages. Integrate security controls and automated testing into CI/CD pipelines , including SAST, DAST and SCA. Support threat modelling and vulnerability management across products and services. Work closely with developers, architects, DevOps teams and product owners to embed security into their … major language such as Java, C, C++, C#, Python or similar. Knowledge of secure software development lifecycles and shift-left security practices. Experience with threat modelling , such as STRIDE or similar approaches. Understanding of application, API and web security. Experience interpreting security findings, identifying false positives and prioritising ...

reviewing designs for technical soundness and integration before they reach the review board Produce designs and low-level detail sufficient to pass IT Security threat modelling and review Contribute to the technical design authority (TDA) process Own the cross-business-unit backlog of architecture work, resourcing, and demand … premises (VMware), and hybrid environments Exposure to enterprise SaaS platforms such as Workday, SAP, or equivalent Strong knowledge of solution design, architecture governance, threat modelling, and security-led design review Experience with modelling approaches such as ArchiMate or UML Commercial awareness - cost-benefit analysis, TCO, FinOps Interest ...

Tektora Limited is seeking a Cyber Security Consultant with active SC Clearance to deliver threat modelling and secure design across complex client environments. The role requires hybrid travel to Bristol, Manchester, the North West England and London as needed. You will engage stakeholders, run workshops, review architectures ...

expertise across a complex digital environment. Key responsibilities: Deliver detailed cyber security risk assessments and assurance across complex digital environments. Apply cyber risk management, threat modelling and secure-by-design principles. Provide security advice across cloud, SaaS and emerging technologies, including AI . Apply relevant security standards, regulatory … cyber security risk management and assurance . Experience working in large, complex and fast-moving digital environments. Deep understanding of secure by design, threat modelling and cyber risk . Experience with cloud and SaaS security . Strong stakeholder management and communication skills. CISP and CISM qualifications. Active ...

Lead the adoption of reusable global components and shared platforms where they meet UK product and regulatory needs Security, compliance and operational integrity Ensure threat modelling, secure design, privacy by design, vulnerability management and data protection controls are integrated into engineering ways of working. Work with security, risk … automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...