76 to 100 of 120 Threat Modelling Jobs in the UK

continuously improve security controls across endpoints, identity, networks, SaaS platforms, cloud services, and on-premise systems. Identify vulnerabilities and misconfigurations through scanning, logging, threat modelling, and configuration reviews, driving remediation with technical teams and service owners. Support secure delivery of web applications and APIs, working closely with … reduce organisational risk. Ensure security-related changes and risks are communicated clearly and promptly to the wider business. Stay up to date with threat intelligence and emerging risks, translating insights into actionable security improvements. Provide the Head of IT & Change with a weekly security report. Mentor ...

national security, or government. Proven experience leading cyber security architecture assurance for complex, high-assurance systems or programmes. Deep knowledge of secure system design, threat modelling, risk management, and architecture review. Experience working within defence or HMG security frameworks and formal assurance processes. Strong stakeholder skills, with ...

architecture across platforms, infrastructure, applications, networking, and IAM. Embed security principles into solution design across a multi-cloud environment. Conduct architecture and design reviews, threat modelling, and risk assessments. Partner with enterprise and solution architects to ensure security is considered from project inception. Drive adoption of secure design ...

tooling outputs to identify trends, gaps and opportunities. Continuous Improvement & Architecture Assist with mapping and reviewing customer network and security architectures. Contribute to threat modelling and detection use case development. Support change management processes to ensure controlled, auditable service delivery. Develop high-quality documentation, reports and supporting materials. ...

GIAC GICSP, 62443 and similar Have delivered OT projects within a critical national infrastructure client ideally in the transport subsector. Ability to combine MITRE Threat Modelling, OT & Enterprise, aligned to IEC/ISA 62443. Experience with TS 50701 (IEC63452) standard. Practical experience as controls systems engineer or industrial ...

integrations (OSS/BSS, core network-related systems). Review application and network architectures to identify security gaps, risks, and non-compliance. Conduct threat modeling, risk assessments, and security design reviews across on‐prem and cloud-hosted applications. Provide assessment outputs including risk ratings, mitigation recommendations, and security assurance ...

Security MDM (Profisee, Informatica) HADR, AI/ML Compute, network strategies (Private Endpoint, Vnet, ExpressRoute) Security frameworks, IAM, RBAC, firewall rules, Zero Trust architecture Threat modelling, risk assessments Monitoring, Logging Cost and performance management Preferred Skills MDM (Informatica) Data Governance (Collibra) Utilities experience Experience with SCADA, eSCADA, telemetry ...

Consultant Shaping and reviewing security architecture for complex IT and digital platforms Assessing cyber risks and identifying weaknesses early in the design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR ...

equivalent experience Experience applying cyber security principles across the systems or product engineering lifecycle Knowledge of cyber risk management and vulnerability management Experience with threat modelling frameworks such as MITRE ATT and CK, DEF3ND, or EMB3D Awareness of industrial control systems or operational technology environments Working knowledge ...

equivalent experience Experience applying cyber security principles across the systems or product engineering lifecycle Knowledge of cyber risk management and vulnerability management Experience with threat modelling frameworks such as MITRE ATT and CK, DEF3ND, or EMB3D Awareness of industrial control systems or operational technology environments Working knowledge ...

security patterns. Inputting into High-Level Designs (HLDs) and Low-Level Designs (LLDs) with explicit security controls. Conducting threat modelling (STRIDE, attack trees, kill chain analysis). Identifying and documenting security requirements for systems, networks, and cloud services. Ensuring designs meet classification requirements Security Controls & Patterns Advising ...

security patterns. Inputting into High-Level Designs (HLDs) and Low-Level Designs (LLDs) with explicit security controls. Conducting threat modelling (STRIDE, attack trees, kill chain analysis). Identifying and documenting security requirements for systems, networks, and cloud services. Ensuring designs meet classification requirements Security Controls & Patterns Advising ...

Quality Engineering & Secure Development: Create automated tests, including unit, integration, and functional tests. Apply secure-by-design principles in all coding activities, participating in threat modelling where appropriate. Contribute to code reviews and continuously improve code quality within the squad. Maintain documentation for services, features, and reusable components. ...

oversees the company's security program, ensuring S&P Global is protected from existing and emerging threats. In close partnership with Security Operations and Threat Intelligence, you will detect, analyze, and decisively respond to security incidents, enrich investigations with timely intelligence, and help drive proactive defences. While based … . This role requires a detail-oriented, critical thinker who understands how adversaries exploit systems, networks, and people-and how to respond. Experience applying threat intelligence to investigations and to improve detections is highly desirable. Primary Responsibilities Coordinate and triage response to cybersecurity events and conduct forensic analysis across ...

from malicious attacks. What you’ll need Applying Agile methodologies to support engineers and deliver on multiple challenging product initiatives simultaneously, driving engineering excellence. Threat model by deconstructing technical solutions, identifying threats and vulnerabilities and assessing risks. Use experience to analyse the risks and benefits of design options … technologies including Cloud and AI Exposure to contemporary architectures eg. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks eg. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments eg. ...

from malicious attacks. What you’ll need Applying Agile methodologies to support engineers and deliver on multiple challenging product initiatives simultaneously, driving engineering excellence. Threat model by deconstructing technical solutions, identifying threats and vulnerabilities and assessing risks. Use experience to analyse the risks and benefits of design options … technologies including Cloud and AI Exposure to contemporary architectures eg. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks eg. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments eg. ...

IR35 Active SC Clearance Required Core Responsibilities Design and maintain secure architecture frameworks for enterprise systems across cloud, on-premises, and hybrid environments Conduct threat modelling, risk assessments, and se click apply for full job details ...

assessment, remediation) Implement risk-based security solutions aligned to enterprise standards Work closely with infrastructure, application and OT teams to embed security controls Support threat modelling, secure design, and Zero Trust frameworks Key Skills & Experience: Strong experience as a Security Architect/Cybersecurity Architect Proven expertise in vulnerability ...

doing Lead OT/ICS security assessments across industrial environments Design and implement secure network architectures for OT systems Conduct risk assessments, threat modelling, and vulnerability analysis Support incident response and remediation within OT environments Work closely with clients to define and improve their OT security posture Contribute ...

monitoring. Experience leading data security roadmaps from current to target state, identifying required capabilities, technology changes, dependencies, risks, and timelines. Expertise performing data-focused threat modelling (e.g. STRIDE, MITRE ATT&CK, DREAD) to identify risks and recommend architectural mitigations. Excellent advisory skills with the ability to provide architectural ...

monitoring. Experience leading data security roadmaps from current to target state, identifying required capabilities, technology changes, dependencies, risks, and timelines. Expertise performing data-focused threat modelling (e.g. STRIDE, MITRE ATT&CK, DREAD) to identify risks and recommend architectural mitigations. Excellent advisory skills with the ability to provide architectural ...

reports with clear remediation guidance • Knowledge of OWASP and application security principles • Experience with automated, dynamic, and static security testing tools • Ability to perform threat modelling and attack surface analysis • Experience working with or managing third-party security providers • Relevant certifications such as OSCP, CREST, SANS, CRTO ...

comms with confidence : senior stakeholder updates, progress reviews, risk/issue forums, and go‐live checkpoints. 🧪 Drive technical readiness : coordinate pre‐live activities (e.g., threat modelling, integration validation, tabletop exercises), baseline runbooks and ensure a clean handover to TAMs/Operations. 📊 Track what matters : define entry/exit ...

based access, multi-tenant boundaries. You understand what breaks when these are wrong Security mindset in practice, not theory. You think about attack surface, threat models, and access control as a matter of course, with working knowledge of cryptography and data protection fundamentals Code quality and observability as habits. ...

Design, build, and ship reliable backend services and APIs in Python (Flask) that power core product functionality. Own features end-to-end: data modelling (Postgres), API design, testing, production rollout and ongoing improvements. Help uphold strong engineering standards through thoughtful code reviews, testing discipline, clean architecture, and pragmatic decision … Payments/fintech knowledge (reconciliation, idempotency, auditability, ledger concepts). Experience with distributed systems patterns (queues, background jobs, retries, rate limiting). Security experience (threat modelling, OWASP-style concerns, secure API design). Familiarity with Terraform. Why join us? £60k salary + equity 40 days holiday (incl. bank ...