22 of 22 Contract Threat Modelling Jobs in England

Cyber Threat Intelligence Analyst Summer-Browning Associates is supporting our client in the Central Government, who is seeking a Cyber Threat Intelligence Analyst for an initial 12-month assignment, with the possibility of extension. Location: London | Hybrid The ideal candidates will hold an active Security clearance and have … proven background in Cyber Security Threat Intelligence, with the following skills and experience: Experience in risk and threat modelling within high-threat government environments. Experience with cyber threat frameworks, such as MITRE ATT&CK, the Diamond Model, and the Intelligence Cycle. Proficiency in using open ...

role, between 8:30am-5:30pm Monday to Friday. Shifts: Monday - Friday (37.5 hours per week) The must haves: Extensive hands-on experience with Threat Modelling, SAST, DAST, and web application security, including OWASP Top 10, CWE Top 25, and SANS 25. Hands-on experience with GCP security … solution architectures to ensure appropriate security controls, data protection measures, identity controls, network security, and compliance requirements are incorporated before deployment. Perform AI-focused threat modelling and security assessments, identifying risks such as sensitive data exposure, prompt injection, indirect prompt attacks, model misuse, insecure plugins, excessive permissions ...

covering DevSecOps, policy-as-code and secure CI/CD pipelines. Leading software supply chain security, including SBOMs, artefact signing and software provenance. Conducting threat modelling and security risk assessments. Chairing security working groups and collaborating with multinational stakeholders. Engaging with senior leadership to communicate security risks, assurance … environments. Strong background in cloud security architecture across multi-cloud and edge platforms. Experience implementing Secure by Design principles and DevSecOps practices. Expertise in: Threat modelling and risk management Policy-as-Code CI/CD security controls Software Supply Chain Security SBOMs, artefact signing and software provenance Excellent ...

certificate lifecycle services. Support cryptographic key management and certificate rotation processes. Perform security reviews of solution designs, infrastructure and application code. Conduct threat modelling and security risk assessments. Identify, assess and remediate security vulnerabilities. Support vulnerability management and security patching activities. Develop and maintain security baselines, standards … Management Secrets Management Cryptography Cloud Security (GCP) Kubernetes Security Service Mesh Security API Security Policy-as-Code (OPA) DevSecOps Secure Software Development Lifecycle (SSDLC) Threat Modelling Vulnerability Management Security Monitoring and SIEM Security Compliance and Governance Incident Response ...

secure-by-design role spanning embedded, connected, cloud and software products, not tied to any single sector or regulatory framework. If you thrive on threat modelling, secure architecture and translating standards into practical controls, this one's for you. What you'll be doing: Designing, reviewing and documenting … product, system, application, cloud and infrastructure architectures, advising on IAM, authentication, cryptography, key management, network security, logging, monitoring and data protection. Leading and supporting threat modelling, attack surface analysis and risk assessments, including TARA to ISO/SAE 21434 , from item definition through to attack feasibility rating ...

with infrastructure engineering teams to securely deliver cloud solutions. Acting as a Subject Matter Expert (SME) for cloud security services and best practices. Conducting threat modelling, security reviews, and security testing activities. Supporting the adoption and optimisation of CSPM/SSPM tooling and policy-as-code security controls. … Bicep. Experience with CSPM/SSPM solutions, cloud security tooling, and cloud governance. Knowledge of Kubernetes and modern cloud security architectures. Experience with threat modelling, security testing, and cloud security standards. Understanding of authentication, cryptography, networking, and enterprise security principles. Familiarity with policy-as-code security tools such ...

requirements. Provide hands-on technical guidance throughout implementation, contributing to design reviews, governance forums, and coding where required. Champion secure-by-design principles, incorporating threat modelling, identity and access management, encryption, secure logging, and Secure SDLC best practices into solution designs. Required Skills/Experience The ideal candidate … hands-on experience with open-source data technologies such as Apache Spark, Trino, Airflow, Apache Superset , or similar platforms. Demonstrable security architecture expertise, including threat modelling, IAM (RBAC/ABAC), encryption, secrets management, secure logging, Secure SDLC, and vulnerability management. Experience producing architecture documentation including HLDs, LLDs, reference ...

evolve the mobile security framework across the organisation's mobile platforms. Conduct and oversee mobile application penetration testing, vulnerability assessments and remediation activities. Perform threat modelling, security analysis and risk assessments for mobile applications and supporting services. Define and promote secure development standards, application hardening techniques and mobile … experience in mobile application security, with approximately 10+ years in cyber security, application security or a related field. Deep expertise in mobile penetration testing, threat modelling, vulnerability management and security assurance. Strong knowledge of OWASP MASVS, MASTG and industry-recognised mobile security standards and testing methodologies. Proven experience ...

project lifecycle. Responsibilities Design and develop security architectures for secure infrastructure and network environments. Produce high and low-level security architecture documentation. Conduct threat modelling, security risk assessments and vulnerability analysis. Define security controls aligned to Secure by Design principles. Support security assurance, accreditation and governance activities. Work …/IPS and boundary protection PKI, cryptography and key management Identity & Access Management (IAM) and Privileged Access Management (PAM) Secure by Design principles Threat modelling and security risk assessment Experience producing security architecture artefacts and supporting security accreditation activities. Good knowledge of: NCSC guidance JSP 440 MOD security ...

ABOVE SECRET environments, ROSA, Garrison, Citadel, VCF, Cross-Domain Solutions Zero Trust, IDAM & PKI - conditional access, hybrid identity, cryptography, HSMs, IAM, RBAC, OIDC, federation Threat Modelling - STRIDE/STRIDE-LM, attack-surface analysis, trust boundary modelling, design reviews Network & Boundary Security - Checkpoint, Palo Alto, Fortinet, Cisco, Juniper ...

policies, network segmentation, and secrets management Configure and tune SIEM (or similar) for cloud-focused detection Establish logging, monitoring, and alerting requirements based on threat modelling Investigate and respond to cloud security events Risk & Compliance Identify, articulate, and escalate security risks to senior leadership with mitigation plans Track ...

Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC) best practice Implement container and Kubernetes security across ...

continuity strategies aligned to business requirements. Work closely with infrastructure, cloud and cyber security teams to deliver resilient hybrid environments. Conduct cyber resilience assessments, threat modelling and recovery planning. Support cyber recovery testing and resilience exercises. Provide technical leadership and architectural guidance across multiple workstreams. Engage with senior ...

state security architectures. Apply frameworks such as TOGAF, SABSA and ArchiMate. Design secure hybrid and cloud-native architectures, with a focus on AWS. Conduct threat modelling, risk assessments and security design reviews. Define security standards, patterns and reference architectures. Provide architecture assurance across cloud, network, infrastructure and enterprise ...

encryption technologies. Knowledge of cloud security architecture and security best practices. Familiarity with Zero Trust principles and identity-centric security models. Experience undertaking threat modelling, security design reviews or abuse-case analysis. Ability to identify security vulnerabilities and recommend practical mitigations. Understanding of security architecture patterns, segmentation ...

cloud, and OT infrastructure. Act as the technical Security Design Authority for new capital projects, system changes, and third-party supplier solutions. Conduct threat modelling and architectural risk assessments to identify control gaps and drive resilience. Collaborate closely with 24/7 operations, network engineering, and OT teams ...

background. Hands-on experience securing LLMs, GenAI, RAG solutions and AI agents. Experience with Azure OpenAI, AI Foundry and ideally GCP Vertex AI. AI threat modelling, red teaming, prompt injection testing and security control design. Engineering-led mindset with a strong understanding of AI, machine learning and data ...

certificate lifecycle services. Support cryptographic key management and certificate rotation processes. Perform security reviews of solution designs, infrastructure and application code. Conduct threat modelling and security risk assessments. Develop and maintain security baselines, standards and hardening guides. Implement cloud security controls for GCP resources and Kubernetes platforms. Support ...

Agent (OPA). Strong understanding of OAuth2, OpenID Connect (OIDC), SAML and SCIM. Experience securing cloud-native, API-driven and distributed systems. Knowledge of threat modelling, security non-functional requirements and security assurance. Experience integrating with enterprise identity providers and IAM platforms. Ability to produce high-quality security ...

Project: Automotive cybersecurity engineering role supporting the development of next-generation vehicle control systems. Responsible for leading cybersecurity activities across the product lifecycle, including threat analysis, security requirements, risk assessment, compliance evidence and collaboration with engineering teams and external automotive partners. Essential Skills: Automotive cybersecurity engineering experience ISO/… lifecycle knowledge Threat Analysis & Risk Assessment (TARA) Cybersecurity concepts, goals and requirements definition Requirements management tools (Polarion/DOORS) Automotive SPICE (ASPICE) ISO 26262 and safety-security integration Automotive E/E architecture and communication protocols Cybersecurity case development and audit evidence Secure-by-design and threat modelling ...

Project: Automotive cybersecurity engineering role supporting the development of next-generation vehicle control systems. Responsible for leading cybersecurity activities across the product lifecycle, including threat analysis, security requirements, risk assessment, compliance evidence and collaboration with engineering teams and external automotive partners. Essential Skills: Automotive cybersecurity engineering experience ISO/… lifecycle knowledge Threat Analysis & Risk Assessment (TARA) Cybersecurity concepts, goals and requirements definition Requirements management tools (Polarion/DOORS) Automotive SPICE (ASPICE) ISO 26262 and safety-security integration Automotive E/E architecture and communication protocols Cybersecurity case development and audit evidence Secure-by-design and threat modelling ...

fibre, PoE, network segmentation, time sync, secure remote access patterns (as governed). Key responsibilities 1) Concept and requirements engineering - Translate security risk assessments, threat models and operational requirements into clear engineering requirements and performance specs. - Develop security design concepts (architecture options, resilience models, failure modes, coverage principles) aligned … cable schedules, device layouts, containment requirements, integration interface documents, network topologies (as required). - Select appropriate technologies and grades of equipment aligned with environment, threat, maintainability and lifecycle cost. - Engineer power budgets, UPS autonomy, segregation, EMC considerations, and environmental suitability (IP ratings, temperature, corrosion). - Ensure designs support safe ...