1 to 25 of 30 Threat Modelling Jobs in the South West

edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security assurance is woven into everyday engineering work - from threat modelling at design time to control testing in production. You'll build trusted relationships with client security teams, senior stakeholders, and government security communities … report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles - making security a shared engineering responsibility rather than ...

roadmap, backlog and design decisions. Work with colleagues across product, development, and networks & infrastructure to embed security across the product lifecycle. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities. Assign pragmatic risk levels and support sensible prioritisation of remediation … software-led environment. Good understanding of how product and development teams operate, including how security considerations are balanced alongside product delivery. Strong experience of threat modelling, secure design review, vulnerability assessment and remediation prioritisation. The judgement to assess exploitability and business impact pragmatically Practical experience applying security across ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

Regulations - feeding posture data into governance and risk reporting rather than treating it as a point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme … structuring reports around the decisions people need to make, not just the controls you've tested. Embed security as a continuous engineering concern , supporting threat modelling and security reviews throughout delivery, challenging designs that create unnecessary risk, and mentoring colleagues on secure-by-default practices. Support and assess ...

Regulations - feeding posture data into governance and risk reporting rather than treating it as a point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme … structuring reports around the decisions people need to make, not just the controls you've tested. Embed security as a continuous engineering concern , supporting threat modelling and security reviews throughout delivery, challenging designs that create unnecessary risk, and mentoring colleagues on secure-by-default practices. Support and assess ...

cloud infrastructures. Contribute to blogs and research within the Cyberfort community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling – Kill Chain – Attack tree analysis. Certifications: AWS/Azure Security Professional, CCSP, CISSP, CISM, CIISEC, UK Cyber Security Council registration (Chartered ...

networks, communications and mission-supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network … assurance or risk management frameworks. Experience supporting security accreditation, assurance, compliance or certification activities in a UK defence or similarly regulated environment. Experience conducting threat modelling, security risk assessment and security requirements definition. Experience supporting FAT, integration testing, harbour trials, sea trials, or equivalent technical acceptance activities from ...

stage of the lifecycle while advancing your own career in a highly complex and rewarding environment.Leading secure by design assurance activities across complex programmesConducting threat modelling and cyber risk assessments using recognised frameworksDeveloping risk treatment plans and implementing mitigation strategiesProducing technical security evidence including risk assessments and vulnerability … within defence, government, or highly regulated environmentsIn-depth knowledge of cyber security frameworks such as NIST, ISO 27001, and ISO 27005Proven ability to conduct threat modelling and risk assessmentsExperience influencing multidisciplinary teams including engineering and DevOps functionsQualifications for the Cyber Security LeadRelevant professional experience in cyber security, information ...

stage of the lifecycle while advancing your own career in a highly complex and rewarding environment.Leading secure by design assurance activities across complex programmesConducting threat modelling and cyber risk assessments using recognised frameworksDeveloping risk treatment plans and implementing mitigation strategiesProducing technical security evidence including risk assessments and vulnerability … within defence, government, or highly regulated environmentsIn-depth knowledge of cyber security frameworks such as NIST, ISO 27001, and ISO 27005Proven ability to conduct threat modelling and risk assessmentsExperience influencing multidisciplinary teams including engineering and DevOps functionsQualifications for the Cyber Security LeadRelevant professional experience in cyber security, information ...

across Lloyds Bank, Halifax, Bank of Scotland and Scottish Widows. You’ll help design, build and enhance a world-class mobile security framework, leading threat modelling, security assessments, penetration testing capabilities and security tooling across Android and iOS platforms. Working within agile teams, you’ll drive continuous improvements … impact and do the best work of your career, you’ve just found itWhat we’re looking for Experience of mobile platform security, threat modelling and mitigation techniquesStrong hands-on experience conducting reviews of mobile application security postureExperience developing and maintaining penetration testing tools, scripts, policies and proceduresIn ...

innovation, improve resilience and support secure, regulated and operationally critical environments. As part of the Expleo UK Cybersecurity Practice, you will deliver the discovery, threat, risk and requirements activity that underpins the security case for a major UK defence maritime programme, supporting an autonomous surface vessel capability being matured … focused consultancy role for someone methodical and evidence-driven. You will establish the asset baseline that everything else traces back to, contribute to the threat and risk picture, and capture the security requirements that the design team will build to. You will work within a small, security-cleared team ...

Responsibilities of a Cloud Security Specialist Design secure AWS architectures, patterns and security controls Apply security, regulatory and compliance requirements to cloud environments Conduct threat modelling and risk assessments across AWS workloads Support large-scale cloud migration and transformation projects Collaborate with architects, engineers and cyber security teams ...

into CI/CD pipelines , integrating SAST, DAST, SCA, and infrastructure-as-code scanning so vulnerabilities are caught before they ship, not after. Support threat modelling and design reviews with engineering teams, using structured methods (STRIDE, MITRE ATT&CK) to identify risks early and influence architecture decisions directly. ...

architectures and solution designs (e.g. Privileged Access Management, SSO, IDAM, network security, encryption) Understanding of IT infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and/or cloud security experience preferred SABSA/ ...

requirements for shipboard and supporting systems. Build and structure the initial asset register for configuration control, capturing criticality, zone, ownership and dependency attributes. Support threat modelling and security risk assessment from an architecture perspective, and translate assessed risk into architectural controls. Define architecture-level security requirements and maintain ...

SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance outcomes Lead threat modelling, risk identification, and mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance ...

SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance outcomes Lead threat modelling, risk identification, and mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance ...

Consultant Shaping and reviewing security architecture for complex IT and digital platforms Assessing cyber risks and identifying weaknesses early in the design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR ...

they pertain to the cyber domain.Decomposing cyber and security requirements down to the system control level.Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding.Scoping and managing security verification and validation activities and remedial action plans.Coordinating with product ...

they pertain to the cyber domain.Decomposing cyber and security requirements down to the system control level.Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding.Scoping and managing security verification and validation activities and remedial action plans.Coordinating with product ...

will deliver expert consultancy to programmes and services, ensuring solutions are secure by design and resilient to evolving cyber threats. You will conduct threat modelling, security assessments and risk analysis, clearly articulating risks and recommending proportionate controls to reduce likelihood and impact. You will provide authoritative guidance ...

cloud security and network segmentation. Work with technologies including Entra ID, Okta, MFA, SSO, SIEM/SOAR and endpoint security. Support security assessments, threat modelling, technical testing and client projects. Assist with modernising legacy VPN, proxy and firewall environments. Work alongside experienced consultants while developing your technical ...

Security Engineers Location: Bristol/London (Hybrid- 2 days in office) This is Fixed term contract role Role Overview Experience of Mobile platform security, threat modelling and mitigation techniques Capable of conducting regular reviews of our mobile application security posture using your hands-on experience. Develop and maintain ...

C++.Awareness of key architectural patterns/approaches, algorithms, data structures, cryptography, security protocols (e.g., TLS and OAuth/OIDC), secure system design and Threat Modelling.Certified Kubernetes and public cloud knowledge (e.g. CKAD and AWS certifications).J.P. Morgan is a global leader in financial services, providing strategic advice and products ...

cybersecurity principles and risk management Experience applying security technologies to architectures and solution designs Understanding of IT infrastructure, technical concepts, and design methodologies Understand threat modelling and development of reference architecture Preferred hands-on experience in Network and/or Cloud security Reasonable Adjustments: Respect and equality ...