1 to 25 of 171 Threat Modelling Jobs in the UK excluding London

onsite Contract Duration: 6 months Positions Available: 3 The Role We are looking for experienced SOC Detection Engineers to design, develop and continuously improve threat-led detection capabilities across an enterprise security environment. You will translate cyber threat intelligence, threat modelling outputs, threat hunting findings … continuous improvement. The role is not primarily focused on day-to-day SIEM administration or platform support. Key Responsibilities Design, develop and maintain threat-led detection rules aligned with MITRE ATT&CK and organisational threat models. Translate threat intelligence, threat hunting insights, red/purple team ...

play a critical role in designing, assuring, and delivering secure solutions across our client engagements. You will champion Secure by Design principles and lead threat modelling activities to ensure risks are identified and mitigated early in the lifecycle. Working closely with stakeholders, you will define security architectures, ensure … Design – Embed security into every stage of the solution lifecycle, ensuring systems are designed with security controls from the outset rather than retrofitted. Threat Modelling – Lead and facilitate threat modelling exercises (e.g. STRIDE), identifying vulnerabilities and defining mitigations early in delivery Risk Assessment – Identify, assess ...

embedded from the earliest stages of delivery. Working across both enterprise IT and Operational Technology (OT) environments, you'll provide expert guidance, lead threat modelling activities and define security standards that protect critical services relied upon by millions of customers. What you'll be doing As Security Architect … security architecture principles, standards, reference models and reusable design patterns. Review and approve solution architectures, high-level designs and significant design decisions. Facilitate threat modelling workshops using methodologies including STRIDE, attack trees and kill-chain analysis. Ensure threats, risks, abuse cases and security requirements are identified, documented ...

skilled Mobile Application Security Specialist with hands‐on experience in securing mobile platforms and applications. The ideal candidate will possess deep expertise in mobile threat modelling, vulnerability assessment, and penetration testing, with a strong understanding of Android and iOS security standards. This role is critical to ensuring … security testing tools, scripts, and frameworks to support penetration testing activities. Define and implement security policies, standards, and procedures for mobile platforms. Perform ongoing threat modelling and risk assessments to proactively address potential security gaps. Collaborate with development and DevSecOps teams to integrate security best practices throughout ...

Operations, owning the design, development and continuous improvement of our detection and response capabilities. You'll lead the response to major security incidents, drive threat-informed detection engineering, influence security architecture decisions, and work closely with colleagues across Security, Engineering and Platform teams to ensure ENSEK remains resilient against … development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness, and identifying gaps across ENSEK's security monitoring landscape. Drive Threat‐Informed Security Operations by partnering with Threat & Vulnerability teams to operationalise threat intelligence, support vulnerability management activities, and ensure security operations remain ...

Confidential Computing , and secure workload segmentation . Develop security design documentation, diagrams, and rationale aligned with business and compliance requirements. Apply risk‐based and threat‐based approaches to recommend secure and proportionate solutions. Agentic AI & LLM Security Architecture You will be responsible for shaping security controls around emerging … prompt defense, prompt isolation API & orchestration security, including secure agent tool use Data security for vector stores, embeddings, and retrieval services Performing AI‐specific threat modelling , including: Model extraction & poisoning Hallucination‐driven risk Sensitive data leakage Toxic output & jailbreak attempts Advising on secure integration of AI with cloud ...

engineers and business stakeholders to embed security throughout the delivery life cycle. You'll provide pragmatic, risk-based security guidance, conduct security reviews and threat modelling, coordinate assurance activities, and help ensure secure-by-design principles are applied across a diverse portfolio of business and technology initiatives. What … lead Information Security contact for change and transformation projects and programmes. Provide practical security consultancy to delivery teams and stakeholders. Facilitate threat modelling workshops and conduct security risk assessments. Perform security assurance activities, including architecture, design and configuration reviews. Coordinate penetration testing and support remediation of identified vulnerabilities. ...

that process. This role exists to embed security expertise directly into how our engineering teams build and ship software: setting the standards, running the threat modelling, and making the judgement calls that keep pace with delivery instead of slowing it down. About Redgate Redgate brings together people … scanner tells you. It's a role built on trust: teams will come to you for guidance, and the judgement you bring to triage, threat modelling, and governance decisions will shape how security actually gets done here. Partner directly with engineering and product teams to define and operationalise ...

Join Police Digital Service as NMC Senior Cyber Threat Intelligence Specialist Find out exactly what skills, experience, and qualifications you will need to succeed in this role before applying below. Salary £60,000 - £65,000 This is an opportunity to play your part and protect our company, our customers … Management Centre will provide visibility and control of information risks for Policing. It will support the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber attacks, enabling stakeholders to understand and proactively manage risk across the technology ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

What you’ll be doing: Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments. Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift. … expertise and a passion for security! Here’s what we need: Governance, Risk & Compliance: Risk-based decisions, adherence to regulatory and internal security standards. Threat Modelling and Risk Management: Identify threats and mitigations for complex cloud systems. Cloud Security Expertise: broad knowledge across the following Security Domains ...

platforms are effectively integrated and aligned with business risk. The role offers opportunities to broaden your experience, working across areas such as security architecture, threat modelling, development, continuous control validation and emerging technologies including AI.## Responsibilities* Design, build, configure and maintain security platforms and protective controls across … posture and the integration of security testing and controls into CI/CD and development workflows.* Contribute to security architecture, technical design reviews and threat modelling, providing practical security guidance that helps technology teams understand risk and implement proportionate solutions.* Develop and maintain security orchestration, platform integrations ...

software and product development lifecycle. Key Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation activities. Advise on secure design, cloud security, mobile security, authentication, encryption … Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience supporting audits, regulatory reviews or compliance ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

from you. Key Responsibilities As our Lead AI & Data Security Architect, you'll: Define secure AI adoption patterns and security standards across Bupa. Lead threat modelling and security reviews for AI-enabled solutions, including large language models (LLMs), generative AI tools and autonomous agents. Develop governance frameworks, security … experience securing AI, machine learning and cloud-based services. Expert knowledge of Microsoft Azure, Azure OpenAI, AI Foundry and cloud security principles. Experience leading threat modelling, security architecture reviews and control design activities. Strong knowledge of security frameworks including NIST CSF, NIST ...

Lead the adoption of reusable global components and shared platforms where they meet UK product and regulatory needs Security, compliance and operational integrity Ensure threat modelling, secure design, privacy by design, vulnerability management and data protection controls are integrated into engineering ways of working. Work with security, risk … automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

What You'll Be Doing Owning the software security strategy and roadmap across the product line Defining security architecture, standards and best practices Embedding threat modelling and security requirements into product development Working closely with software and product teams to drive secure-by-design principles Leading architecture reviews … maturity across the organisation What We're Looking For You'll likely bring experience in: Security Architecture Product Security Secure Software Development Lifecycle (SDLC) Threat Modelling Vulnerability Management Security Testing & Assurance Secure CI/CD Pipelines Risk Assessment & Security Governance Software Architecture and Engineering Leadership Desirable Experience Embedded ...

implementation designs. Embedding Secure by Design principles into technology solutions, ensuring security is considered from the outset. Conducting security architecture reviews, risk assessments and threat modelling to identify vulnerabilities and recommend appropriate mitigations. Applying recognised security frameworks and standards, including NIST and ISO 27001, to inform security designs … architecture, design reviews or security solutions across at least one of the following: cloud, network or infrastructure. Experience applying Secure by Design principles, conducting threat modelling and carrying out security risk assessments. Knowledge of recognised security frameworks and standards, such as NIST and ISO 27001. Experience supporting large ...

implementation designs. Embedding Secure by Design principles into technology solutions, ensuring security is considered from the outset. Conducting security architecture reviews, risk assessments and threat modelling to identify vulnerabilities and recommend appropriate mitigations. Applying recognised security frameworks and standards, including NIST and ISO 27001, to inform security designs … architecture, design reviews or security solutions across at least one of the following: cloud, network or infrastructure. Experience applying Secure by Design principles, conducting threat modelling and carrying out security risk assessments. Knowledge of recognised security frameworks and standards, such as NIST and ISO 27001. Experience supporting large ...

standards, reference architectures, control patterns and assessment methodologies for AI models, LLM and agentic AI systems and AI development platforms. Lead security architecture reviews, threat modelling and technical assurance for high-risk AI systems, products and material changes. Establish and improve model-assurance requirements for third-party … security initiatives from assessment and design through implementation, validation and operational handover, with measurable adoption and risk-reduction outcomes. Experience leading security architecture reviews, threat modelling and remediation through the software or product development lifecycle. Strong understanding of AI security threats and mitigations. Experience designing or assessing security ...

production deployment. Provide cyber security guidance and best practises for various AI initiatives, including Generative AI, Business Intelligence, and advanced analytics platforms. Conduct threat modelling activities using IriusRisk. Identify security risks, vulnerabilities, and devise mitigation strategies throughout the development lifecycle. Ensure solutions meet internal cyber security standards, governance … with stakeholders via Jira, Jira Align, and Confluence. Required Skills & Experience: A strong background in Cyber Security within complex enterprise environments. Experience in conducting threat modelling and security risk assessments. Familiarity with AI, Machine Learning, Data, or Advanced Analytics platforms. Knowledge of cloud security principles, especially within Google ...

architectures and control patterns for AI agents, including identity, permissions, tool use, data access, memory, human oversight, logging and containment. Lead security risk assessments, threat modelling and assurance reviews for high-risk agentic AI use cases, platforms and material design changes. Develop and apply test scenarios for agentic … meetings and collaboration. Qualifications: Demonstrated experience delivering security controls from design through implementation, validation and operational handover across cross-functional engineering teams. Experience with threat modelling, security assessment and remediation for applications, cloud services, APIs or AI-enabled systems. Strong understanding of agentic AI security risks and controls ...

performed by the IS Security team Supports IS Security achieve regulatory and statutory compliance requirements Complete cyber risk assessments, including third party suppliers Apply threat modelling principles to complex system and solution designs to identify security risks and appropriate mitigations Supports, monitors and recommends improvements to cyber incident … governance requirements and identifying suitable controls. (essential) Experience of delivering cloud focused security solutions with a solid understanding of modern cyber threats and threat modelling techniques (preferred) Good understanding of security frameworks (NIST CSF, Mitre ATT & CK) (essential) At Sword, our core values and culture are based ...

Establish approaches for triaging findings, managing false positives, tracking remediation, and measuring security improvement. Promote security-by-design and secure-by-default principles through threat modelling, design reviews, architectural guidance, and secure coding practices. Improve the identification, assessment, documentation, and remediation of vulnerabilities throughout the software development lifecycle. … drive improvements to software quality, reliability, and security. The following skills and attributes are a plus: Experience applying secure software development lifecycle practices, including threat modelling, secure design, vulnerability management, and release governance. Experience with vulnerability disclosure, severity assessment, remediation planning, and security updates. Experience leading technical initiatives ...

guardrails, and governance. You’ll work closely with development teams, architects, product owners, and third‐party suppliers to implement secure‐by‐design principles, conduct threat modelling and security reviews, and ensure appropriate controls are built into delivery processes. This role combines technical application security expertise with strong stakeholder … responsibilities Own and develop the organisation's application security practice, embedding secure‐by‐design principles and security controls throughout the software development lifecycle Lead threat modelling exercises and security design reviews for new applications, APIs, integrations, and significant technology changes Select, implement, and manage application security tooling including ...