51 to 75 of 133 Threat Modelling Jobs in the UK

Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models … tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics ...

ABOVE SECRET environments, ROSA, Garrison, Citadel, VCF, Cross-Domain Solutions Zero Trust, IDAM & PKI - conditional access, hybrid identity, cryptography, HSMs, IAM, RBAC, OIDC, federation Threat Modelling - STRIDE/STRIDE-LM, attack-surface analysis, trust boundary modelling, design reviews Network & Boundary Security - Checkpoint, Palo Alto, Fortinet, Cisco, Juniper ...

Threat Detection Engineer required for global legal firm. You will be responsible for advancing the maturity of the SIEM platform alongside other strategic security solutions, working closely with internal teams to improve the organisation's overall security posture. This position focuses on onboarding new log sources, optimising data pipelines … internal teams and vendors to ensure reliable, high-quality telemetry Detection Engineering Design and implement detection use cases aligned to MITRE ATT&CK and threat intelligence Build and tune correlation rules, anomaly detections, dashboards, and alerting workflows Continuously refine detections to reduce false positives and improve effectiveness SOC & Incident ...

expand coverage. Automation: Engineer automation for security operations at scale — scripting (Python, Bash, PowerShell) for response orchestration, access reviews, compliance checks, vulnerability reporting, threat intel enrichment. Integration & Evaluation: Ensure all security tooling integrates with existing infrastructure and identity platforms. Lead POCs, vendor evaluations and build-vs-buy decisions … Leadership: Own the full incident response lifecycle — detection, triage, containment, eradication, recovery, post-incident review. Author and maintain IR playbooks, runbooks and escalation procedures. Threat Intelligence: Investigate security events, perform root cause analysis, and apply threat intelligence to improve defensive posture. Understand attacker TTPs and operationalise frameworks like ...

DevOps, and operational teams, you will contribute to cloud architecture designs, automate security remediation processes, and provide proactive insights into cloud risks, vulnerabilities, and threat mitigation strategies. You will leverage your expertise in cloud security, infrastructure as code, CI/CD pipelines, containerisation, and governance frameworks to ensure that … software development lifecycle practices. Identify, assess, and mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while ...

privacy, retention, and compliance frameworks (GDPR, ISO 27001, NIST) Integrate security controls with data pipelines, cataloging, and governance tools Risk & Compliance Conduct risk assessments, threat modelling, and gap analysis for cloud/data platforms Align architecture with regulatory requirements and enterprise policies Lead security reviews, audits, and remediation ...

troubleshooting. Governance, Risk and Compliance Apply GRC principles across designs and deployments. Review and improve customer security policies and standards. Perform risk assessments, threat modelling, and compliance gap analysis. Advise on ISO 27001, NIST, PCI DSS, and GDPR. Threat and Vulnerability Management Interpret threat intelligence ...

/XDR, CSPM, SAST/DAST). Experience embedding security into CI/CD pipelines and DevSecOps practices. Proven capability in risk assessments, threat modeling, and control gap analysis. Experience collaborating with SOC and Incident Response teams during security events. Working knowledge of security frameworks and regulations (NIST ...

assurance across complex systems or major programmes. Ability to produce clear architecture documentation and security artefacts. Strong understanding of secure design principles, risk management, threat modelling and security controls. Knowledge of UK Government/Defence security standards, guidance and assurance processes. Experience working with senior stakeholders across security … technical and non-technical audiences. Desirable experience Army programme experience or strong MOD stakeholder exposure. Experience with Sparx Enterprise Architect, ArchiMate, NAFv4 or similar modelling approaches. Knowledge of Joint Service Publications, NCSC guidance, ISO27001, NIST, CIS or related security frameworks. Experience across IAM, PKI, secure integration, cloud security, data ...

assurance across complex systems or major programmes. Ability to produce clear architecture documentation and security artefacts. Strong understanding of secure design principles, risk management, threat modelling and security controls. Knowledge of UK Government/Defence security standards, guidance and assurance processes. Experience working with senior stakeholders across security … technical and non-technical audiences. Desirable experience Army programme experience or strong MOD stakeholder exposure. Experience with Sparx Enterprise Architect, ArchiMate, NAFv4 or similar modelling approaches. Knowledge of Joint Service Publications, NCSC guidance, ISO27001, NIST, CIS or related security frameworks. Experience across IAM, PKI, secure integration, cloud security, data ...

assurance across complex systems or major programmes. Ability to produce clear architecture documentation and security artefacts. Strong understanding of secure design principles, risk management, threat modelling and security controls. Knowledge of UK Government/Defence security standards, guidance and assurance processes. Experience working with senior stakeholders across security … technical and non-technical audiences. Desirable experience Army programme experience or strong MOD stakeholder exposure. Experience with Sparx Enterprise Architect, ArchiMate, NAFv4 or similar modelling approaches. Knowledge of Joint Service Publications, NCSC guidance, ISO27001, NIST, CIS or related security frameworks. Experience across IAM, PKI, secure integration, cloud security, data ...

CASB, FWaaS, segmentation, and secure web access • Integrate Zero Trust solutions with identity providers, SIEM/SOAR platforms, and endpoint security tooling • Conduct threat modelling, risk assessments, and security architecture reviews • Troubleshoot complex deployment and access issues across enterprise environments • Provide technical leadership and guidance across security ...

CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability management using a range of contemporary tools. Drive AI and automation to enhance security operations and threat detection. Oversee ...

cloud deployments (private/public). Design and scope IT Health Checks and interpret outcomes. Identify and mitigate security risks in solution architectures. Conduct threat modelling and risk analysis. Design proportional security controls using native cloud technologies. Produce security architecture artefacts including standards and blueprints. What ...

cloud deployments (private/public). Design and scope IT Health Checks and interpret outcomes. Identify and mitigate security risks in solution architectures. Conduct threat modelling and risk analysis. Design proportional security controls using native cloud technologies. Produce security architecture artefacts including standards and blueprints. What ...

support CI/CD platforms, driving automation and efficiency in build, deployment, and monitoring processes. Cloud Security: Contribute to security assessments, audits, and threat modelling exercises for AWS & Azure environments, embedding security best practices into DevOps workflows and ensuring alignment with industry standards and regulatory requirements. Collaboration: Work ...

controls into engineering workflows. Collaborate with software development teams to improve secure coding practices. Develop and maintain monitoring, logging, and incident response automation. Support threat modelling and secure architecture reviews. Drive DevSecOps best practices across engineering teams. Contribute to platform engineering and cloud-native application delivery. Required Experience ...

business, regulatory and operational requirements Apply TOGAF, SABSA and ArchiMate across architecture artefacts and governance Design secure AWS, hybrid and cloud-native architectures Conduct threat modelling, risk assessments and security design reviews Define security patterns, standards and reference architectures Support assurance, governance, audit and secure-by-design delivery ...

operational requirements App ly TOGAF, SABSA and ArchiM ate across architecture artefacts and governance Design secure AWS, hybrid and cloud-native architectures Conduct threat modelling, risk assessments and security design reviews Define security patterns, standards and reference architectures Support assurance, governance, audit and secure-by-design delivery Collaborate ...

similar platforms • Oversee integration of Zero Trust solutions with identity providers, SIEM/SOAR tooling, endpoint security, and cloud environments • Conduct architecture reviews, threat modelling exercises, gap assessments, and security strategy workshops • Lead proof-of-concept exercises, vendor evaluations, and technical validation sessions • Provide senior technical leadership ...

security designing solutions that let customers move fast and stay secure. As a trusted technical advisor, you will guide customers through security architecture decisions, threat modelling, and the implementation of security controls across multi-account environments. You will lead by building producing working code, reusable patterns, and reference ...

applying a holistic approach to shape secure solutions that support strategic objectives. Key responsibilities Develop and manage the security vision, architecture specifications, architecture analysis, threat modelling, requirements, standards, design patterns, reference architectures, strategies and roadmaps Apply security design principles to produce practical security architectures Lead security engagement with ...

/config audit into continual improvement cycles* Conducting end point, server and device config reviews* Be a SME resource for operational security control advice & threat modelling for the businessEssential knowledge:* Solid understanding of cybersecurity concepts, including threats, vulnerabilities, security operations, encryption, boundary defence, authentication and risk management. ...

alignment between security architecture and enterprise architecture frameworks. Support architecture governance forums, design authorities, and risk review boards. Produce security architecture documentation, risk assessments, threat models, and assurance reports. Ensure compliance with relevant industry standards and regulatory frameworks. Engage with internal audit, risk, compliance, and external stakeholders where required. ...

delivery (cloud‐native focus) - Provide hands‐on cyber consultancy across digital product lifecycles, championing Secure by Design and privacy‐by‐default. - Conduct and iterate threat models for new features and integrations; translate findings intoactionable design and control decisions. - Advise on secure architecture for modern platforms (segmentation, identity/access ...