6 of 6 Contract Threat Modelling Jobs in the South East

covering DevSecOps, policy-as-code and secure CI/CD pipelines. Leading software supply chain security, including SBOMs, artefact signing and software provenance. Conducting threat modelling and security risk assessments. Chairing security working groups and collaborating with multinational stakeholders. Engaging with senior leadership to communicate security risks, assurance … environments. Strong background in cloud security architecture across multi-cloud and edge platforms. Experience implementing Secure by Design principles and DevSecOps practices. Expertise in: Threat modelling and risk management Policy-as-Code CI/CD security controls Software Supply Chain Security SBOMs, artefact signing and software provenance Excellent ...

project lifecycle. Responsibilities Design and develop security architectures for secure infrastructure and network environments. Produce high and low-level security architecture documentation. Conduct threat modelling, security risk assessments and vulnerability analysis. Define security controls aligned to Secure by Design principles. Support security assurance, accreditation and governance activities. Work …/IPS and boundary protection PKI, cryptography and key management Identity & Access Management (IAM) and Privileged Access Management (PAM) Secure by Design principles Threat modelling and security risk assessment Experience producing security architecture artefacts and supporting security accreditation activities. Good knowledge of: NCSC guidance JSP 440 MOD security ...

policies, network segmentation, and secrets management Configure and tune SIEM (or similar) for cloud-focused detection Establish logging, monitoring, and alerting requirements based on threat modelling Investigate and respond to cloud security events Risk & Compliance Identify, articulate, and escalate security risks to senior leadership with mitigation plans Track ...

Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC) best practice Implement container and Kubernetes security across ...

continuity strategies aligned to business requirements. Work closely with infrastructure, cloud and cyber security teams to deliver resilient hybrid environments. Conduct cyber resilience assessments, threat modelling and recovery planning. Support cyber recovery testing and resilience exercises. Provide technical leadership and architectural guidance across multiple workstreams. Engage with senior ...

Project: Automotive cybersecurity engineering role supporting the development of next-generation vehicle control systems. Responsible for leading cybersecurity activities across the product lifecycle, including threat analysis, security requirements, risk assessment, compliance evidence and collaboration with engineering teams and external automotive partners. Essential Skills: Automotive cybersecurity engineering experience ISO/… lifecycle knowledge Threat Analysis & Risk Assessment (TARA) Cybersecurity concepts, goals and requirements definition Requirements management tools (Polarion/DOORS) Automotive SPICE (ASPICE) ISO 26262 and safety-security integration Automotive E/E architecture and communication protocols Cybersecurity case development and audit evidence Secure-by-design and threat modelling ...