18 of 18 Contract Threat Modelling Jobs in England

Security Engineer/Security Consultant (Application Security & Threat Modelling) Rate - £550 - £650 Outside IR35 Duration - 6 months initial Location - Bristol/London (once a week/remote) Role overview: A leading Financial Services is seeking an experienced Security Engineering Consultant on a contract basis. The successful candidate will … embedded within engineering tribes, providing security consultancy and guidance to development teams throughout the software development lifecycle. The primary focus of the role is threat modelling. The consultant will conduct threat models for new and existing products, identify risks at the design stage and work with developers ...

team's work to group standards and frameworks and building on recent improvements to ways of working Providing technical leadership on design reviews, threat modelling and security assurance across applications, cloud, identity, data and third-party services Acting as the senior escalation point for complex security challenges Building … infrastructure, applications and identity and the credibility to challenge solution designs Practical experience of AI security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO/IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy ...

Copilot CLI. Evaluate, test and govern MCP servers, including GitHub, Jira and Confluence integrations. Implement AI security controls, access policies and approval processes. Conduct threat modelling and AI risk assessments in partnership with Cyber Security teams. Define governance processes for onboarding and approving AI tooling. Produce SOPs, technical … GitHub Enterprise administration. Experience with GitHub Copilot, AI developer tooling or AI platform enablement. Understanding of MCP (Model Context Protocol) or AI tool integrations. Threat modelling, security governance and risk management. Strong technical documentation and stakeholder engagement skills. Desirable AI governance or responsible AI frameworks. DevSecOps or Platform ...

Grafana, Datadog or CloudWatch . Relevant Google Cloud certifications , such as Developer, Solutions Architect or Security. Experience implementing cloud security practices including secure coding, threat modelling, compliance and incident response. Open-source contributions or a strong track record of technical knowledge sharing. Experience leading multi-team initiatives spanning ...

engineering teams. Candidates should understand: The Software Development Lifecycle (SDLC) Secure-by-design principles Application Security API security Microservices security CI/CD pipelines Threat modelling SAST/DAST/SCA Authentication and authorisation PKI/certificate management Secrets management The individual does not need ...

Lead Security Integration Specialist (Contract) We are looking for an experienced Lead Security Integration Specialist to drive the integration of security governance, threat intelligence, and risk management across complex engineering environments. Working autonomously, you'll bridge the gap between engineering, security, digital teams, and senior stakeholders, ensuring security … security integration policies, processes, and engineering deliverables. Support the creation of: Product Security Integration Policy Security Risk Management Integration Process Risk Assessment Integration Frameworks Threat Integration Plans Drive alignment between engineering risk management, product security, and wider business functions. Review current threat modelling approaches and support DevSecOps ...

Handle day-to-day vulnerability management, including pen test findings: prioritise what's genuinely exploitable, track fixes and check they've worked. Help run threat modelling sessions in IriusRisk and turn the results into backlog tickets. Look after secrets management, certificates and access reviews and keep security documentation ...

logging solutions. Identity and access management concepts including OIDC and SAML . JSON Schema development and validation. Technical writing and creation of integration documentation. Threat modelling and security-focused development practices. Additional Desirable Attributes Experience running technical workshops and presenting to mixed technical audiences. Ability to negotiate priorities ...

implementing enterprise security architecture and controls. Strong knowledge of information security frameworks, standards, and best practices. Experience conducting security risk assessments, vulnerability analysis, and threat modelling. Experience working with cloud platforms and supporting cloud transformation programmes. Ability to engage effectively with both technical and non-technical stakeholders. Strong documentation ...

implementing enterprise security architecture and controls. Strong knowledge of information security frameworks, standards, and best practices. Experience conducting security risk assessments, vulnerability analysis, and threat modelling. Experience working with cloud platforms and supporting cloud transformation programmes. Ability to engage effectively with both technical and non-technical stakeholders. Strong documentation ...

security expertise Understanding of IAM, network security, logging and monitoring Ability to work collaboratively with DevOps, engineering and platform teams Experience conducting security assessments, threat modelling and risk remediation Desirable: Cloudflare, Akamai, Imperva or similar WAF technologies DevSecOps and secure-by-design practices Automation and scripting experience Security ...

roles. Proven experience delivering security assurance within Operational Technology (OT) environments. Strong understanding and practical application of the IEC 62443 standards framework. Experience undertaking threat analysis, risk assessments, and security control definition. Knowledge of security architecture principles, including network segmentation, zones, and conduits. Experience defining and managing security requirements … Security Management Plans, ensuring delivery against agreed timescales, budgets, and quality expectations. Develop secure architectures using zoning, segmentation, and defence-in-depth principles. Conduct threat modelling, security risk assessments, and define effective mitigation strategies. Assess third-party products and components against security requirements and standards. Review engineering ...

Implement and optimise CI/CD security tooling. Manage vulnerabilities and support remediation activities. Review infrastructure, code and configuration changes for security risks. Support threat modelling and security assurance activities. Maintain secrets management, certificates and access controls. Develop reusable security controls and best practices. Produce security documentation ...

customer data sources, APIs and systems • Own test strategy, acceptance and the technical documentation customers and accreditors need • Lead technical assurance, including architecture reviews, threat modelling and accreditation support • Write production code where delivery needs it and feed field insight back to engineering Essential Requirements • Active DV clearance ...

technologies including Cloud and AI. Exposure to contemporary architectures e.g. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments e.g. ...

technologies including Cloud and AI. Exposure to contemporary architectures e.g. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments e.g. ...

Experience working with cyber and security requirements down to the system control level. o Experience conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations. ...

Security Engineer/Security Consultant (Application Security & Threat Modelling) Rate - £550 - £650 Outside IR35 Duration - 6 months initial Location - Bristol/London (once a week/remote) Role overview: A leading Financial Services is seeking an experienced Security Engineering Consultant on a contract basis click apply for full ...