15 of 15 Contract Threat Modelling Jobs in London

Security Engineer/Security Consultant (Application Security & Threat Modelling) Rate - £550 - £650 Outside IR35 Duration - 6 months initial Location - Bristol/London (once a week/remote) Role overview: A leading Financial Services is seeking an experienced Security Engineering Consultant on a contract basis. The successful candidate will … embedded within engineering tribes, providing security consultancy and guidance to development teams throughout the software development lifecycle. The primary focus of the role is threat modelling. The consultant will conduct threat models for new and existing products, identify risks at the design stage and work with developers ...

Month contract based in London with 3 days/week in office. Purpose of the role: We are looking for an experienced Threat Modelling Security Engineer to identify security threats, define effective mitigating controls and manage findings throughout their lifecycle. You will deliver threat models to agreed … timeframes, develop secure Python-based automation and help improve the existing threat modelling service. The role involves presenting technical work to senior and cross-functional stakeholders, while training and supervising junior team members. You will work with minimal supervision across cloud, DevOps and regulated security environments. What ...

expert security design guidance to delivery and engineering teams. Review solution and product designs to ensure compliance with security standards and best practice. Conduct threat modelling and security risk assessments. Design security controls aligned to organisational risk appetite. Support the deployment of cloud-based services, predominantly within Azure … Good knowledge of ISO 27001, NIST CSF and CIS Controls. Experience with Azure security services, identity management and cloud-native security controls. Exposure to threat modelling and risk assessment methodologies. Understanding of security assurance and controls testing activities. Excellent stakeholder engagement and communication skills. Desirable Skills & Certifications CISSP ...

stakeholders on Secure by Design principles and security best practices. Reviewing and assuring solution designs against established security standards, patterns and architectural frameworks. Leading threat modelling, risk assessments and security design reviews. Identifying security risks and recommending effective mitigation strategies. Supporting cloud-first solutions across Azure and wider … engineering, assurance and risk teams to validate security controls. Producing high-quality security architecture artefacts, standards and blueprints. Monitoring emerging cyber threats and incorporating threat intelligence into security decision-making. Experience Required Extensive experience in Security Architecture within Central Government or the wider Public Sector. Strong understanding ...

Senior Security Engineer - AI, you will: Design and develop security solutions for AI-driven and agentic systems. Conduct both traditional and AI-specific threat modelling and risk assessments. Support the embedding of security controls throughout the end-to-end agentic SDLC, including design, testing, release and governance. Develop … ideally with a hands-on background in Application Security or Infrastructure Security. Strong understanding of core security principles, controls and architectures. Proven experience in: Threat modelling Secure system design Embedding security within the Software Development Lifecycle (SDLC) Exposure to AI and agentic systems, either through practical implementation ...

. The mission is a scalable, proactive approach to securing the bank's mobile apps so engineers can operate with confidence in an evolving threat landscape. You will help build, deliver, and drive the security of the mobile platform, including the design and delivery of a world-class security … security framework for the mobile platform and associated services (penetration testing, research, consultancy) Conduct regular hands-on reviews of mobile application security posture Apply threat modelling and mitigation techniques across the mobile channel Develop and maintain pen-testing security tools, scripts, policies, and procedures Research emerging technologies ...

Grafana, Datadog or CloudWatch . Relevant Google Cloud certifications , such as Developer, Solutions Architect or Security. Experience implementing cloud security practices including secure coding, threat modelling, compliance and incident response. Open-source contributions or a strong track record of technical knowledge sharing. Experience leading multi-team initiatives spanning ...

capability. Essential Skills & Experience Strong experience delivering cyber security risk assessments and assurance within large, complex digital environments. Excellent knowledge of cyber risk management, threat modelling and security architecture . Strong cloud security experience, ideally including AWS, SaaS environments and cloud governance. Experience applying cyber security standards, regulatory ...

Handle day-to-day vulnerability management, including pen test findings: prioritise what's genuinely exploitable, track fixes and check they've worked. Help run threat modelling sessions in IriusRisk and turn the results into backlog tickets. Look after secrets management, certificates and access reviews and keep security documentation ...

implementing enterprise security architecture and controls. Strong knowledge of information security frameworks, standards, and best practices. Experience conducting security risk assessments, vulnerability analysis, and threat modelling. Experience working with cloud platforms and supporting cloud transformation programmes. Ability to engage effectively with both technical and non-technical stakeholders. Strong documentation ...

enterprise-wide technical strategies Strong knowledge of: Cloud technologies Serverless architectures DevOps practices CI/CD pipelines Test-driven development (TDD) Security architecture and threat modelling Experience working within Agile, multidisciplinary environments Excellent stakeholder engagement and influencing skills Ability to translate complex technical concepts into clear business-focused ...

across defensive security, security engineering and offensive testing. The roles cover different areas of the security lifecycle: * Security Engineer: SIEM, detection and response engineering, threat hunting, security telemetry, SOAR automation and secure CI/CD pipelines. * Cyber Security Specialist: enterprise security across cloud, AI, endpoint, network, IAM and cryptography … with experience across threat modelling, MITRE ATT&CK, STRIDE and recognised security standards. * Offensive Security & Advanced Testing Specialist: red teaming, offensive security testing, threat emulation, AI security testing and purple team activity. The wider environment includes contemporary cloud architectures, RESTful APIs and containerised microservices, with a focus ...

technologies including Cloud and AI. Exposure to contemporary architectures e.g. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments e.g. ...

security risk assessments and assurance in large, fast moving, complex digital environments, ideally government or critical infrastructure. In-depth understanding of cyber risk management, threat modelling, security architectural advice, and formal IT Health Checks, including experience with SaaS environments and cloud security principles. Experience interpreting and applying relevant ...

early to identify and address security requirements, risks and dependencies. Review solution designs, architecture documentation and technical proposals from a security perspective. Carry out threat modelling and identify risks around data flows, integrations, trust boundaries and third-party services. Translate security requirements into practical controls, actions and delivery … identity, endpoint, cloud, monitoring and data security. Experience supporting or configuring enterprise security platforms and tooling. Practical experience with security assurance, risk assessment and threat modelling. Strong stakeholder management skills, with the ability to work effectively with architects, engineers and delivery teams. Experience managing security-related tickets, service requests ...