19 of 19 Contract Threat Modelling Jobs in the UK

play a critical role in designing, assuring, and delivering secure solutions across our client engagements. You will champion Secure by Design principles and lead threat modelling activities to ensure risks are identified and mitigated early in the lifecycle. Working closely with stakeholders, you will define security architectures, ensure … Design - Embed security into every stage of the solution lifecycle, ensuring systems are designed with security controls from the outset rather than retrofitted. Threat Modelling - Lead and facilitate threat modelling exercises (e.g. STRIDE), identifying vulnerabilities and defining mitigations early in delivery Risk Assessment - Identify, assess ...

Cyber Threat Intelligence Analyst Summer-Browning Associates is supporting our client in the Central Government, who is seeking a Cyber Threat Intelligence Analyst for an initial 12-month assignment, with the possibility of extension. Location: London | Hybrid The ideal candidates will hold an active Security clearance and have … proven background in Cyber Security Threat Intelligence, with the following skills and experience: Experience in risk and threat modelling within high-threat government environments. Experience with cyber threat frameworks, such as MITRE ATT&CK, the Diamond Model, and the Intelligence Cycle. Proficiency in using open ...

strong technical depth. Key Responsibilities: Define and implement secure architecture patterns across engineering platforms (CI/CD, build systems, runtime environments) Conduct security assessments, threat modelling, and gap analysis across platforms and pipelines Develop and embed DevSecOps best practices, including secure pipeline design and automated controls Establish …/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience ...

activities, and ensuring secure-by-design principles are Embedded throughout the development life cycle. Key Skills & Experience Security Architecture and Secure-by-Design Principles Threat Modelling, Risk Assessment and Security Assurance DevSecOps and Secure CI/CD Pipelines Cloud Security (AWS, Azure or Hybrid Environments) Identity & Access Management … working within Defence, National Security or Highly Secure Environments Responsibilities Define and govern security architecture across cloud, DevSecOps, and AI/ML platforms. Conduct threat modelling, security risk assessments, and architecture reviews. Develop security patterns, standards, and controls for secure solution delivery. Support accreditation, assurance, and compliance activities. ...

covering DevSecOps, policy-as-code and secure CI/CD pipelines. Leading software supply chain security, including SBOMs, artefact signing and software provenance. Conducting threat modelling and security risk assessments. Chairing security working groups and collaborating with multinational stakeholders. Engaging with senior leadership to communicate security risks, assurance … environments. Strong background in cloud security architecture across multi-cloud and edge platforms. Experience implementing Secure by Design principles and DevSecOps practices. Expertise in: Threat modelling and risk management Policy-as-Code CI/CD security controls Software Supply Chain Security SBOMs, artefact signing and software provenance Excellent ...

with infrastructure engineering teams to securely deliver cloud solutions. Acting as a Subject Matter Expert (SME) for cloud security services and best practices. Conducting threat modelling, security reviews, and security testing activities. Supporting the adoption and optimisation of CSPM/SSPM tooling and policy-as-code security controls. … Bicep. Experience with CSPM/SSPM solutions, cloud security tooling, and cloud governance. Knowledge of Kubernetes and modern cloud security architectures. Experience with threat modelling, security testing, and cloud security standards. Understanding of authentication, cryptography, networking, and enterprise security principles. Familiarity with policy-as-code security tools such ...

evolve the mobile security framework across the organisation's mobile platforms. Conduct and oversee mobile application penetration testing, vulnerability assessments and remediation activities. Perform threat modelling, security analysis and risk assessments for mobile applications and supporting services. Define and promote secure development standards, application hardening techniques and mobile … experience in mobile application security, with approximately 10+ years in cyber security, application security or a related field. Deep expertise in mobile penetration testing, threat modelling, vulnerability management and security assurance. Strong knowledge of OWASP MASVS, MASTG and industry-recognised mobile security standards and testing methodologies. Proven experience ...

highly secure infrastructure and network environments within a classified defence programme. Working within a multi-disciplinary engineering team, you will define security architectures, conduct threat modelling and risk assessments, and ensure compliance with stringent security and accreditation requirements across complex IT and networked systems. Key Skills & Experience Proven … zoning Firewalls, IDS/IPS and boundary security controls PKI, encryption and key management Identity & Access Management (IAM/PAM) Secure-by-Design principles Threat modelling and security risk assessment Experience producing security architecture artefacts and supporting accreditation activities. Knowledge of NCSC guidance, JSP 440, Secure by Design ...

defence to deliver agentic infosec solutions aligned to our target operating model Key Responsibilities * Design security solutions for AI-driven and agentic systems * Conduct threat modelling (AI-specific and traditional) and risk reviews * Support the embedding security across the end-to-end agentic SDLC (design, test, release, governance … information security, ideally with a hands-on background in application or infrastructure security * Solid understanding of core security principles and architectures Experience with: o Threat modelling o Secure system design o Embedding security within the SDLC * Exposure to AI and agentic systems (practical or conceptual), including: o Security ...

ABOVE SECRET environments, ROSA, Garrison, Citadel, VCF, Cross-Domain Solutions Zero Trust, IDAM & PKI - conditional access, hybrid identity, cryptography, HSMs, IAM, RBAC, OIDC, federation Threat Modelling - STRIDE/STRIDE-LM, attack-surface analysis, trust boundary modelling, design reviews Network & Boundary Security - Checkpoint, Palo Alto, Fortinet, Cisco, Juniper ...

DevOps, and operational teams, you will contribute to cloud architecture designs, automate security remediation processes, and provide proactive insights into cloud risks, vulnerabilities, and threat mitigation strategies. You will leverage your expertise in cloud security, infrastructure as code, CI/CD pipelines, containerisation, and governance frameworks to ensure that … software development lifecycle practices. Identify, assess, and mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while ...

business, regulatory and operational requirements Apply TOGAF, SABSA and ArchiMate across architecture artefacts and governance Design secure AWS, hybrid and cloud-native architectures Conduct threat modelling, risk assessments and security design reviews Define security patterns, standards and reference architectures Support assurance, governance, audit and secure-by-design delivery ...

alignment between security architecture and enterprise architecture frameworks. Support architecture governance forums, design authorities, and risk review boards. Produce security architecture documentation, risk assessments, threat models, and assurance reports. Ensure compliance with relevant industry standards and regulatory frameworks. Engage with internal audit, risk, compliance, and external stakeholders where required. ...

GitHub Actions, GitLab CI, Jenkins), integrating security gates • Cloud & infra: on‑prem, cloud (AWS/Azure/GCP), hybrid architectures, SaaS evaluation • Security architecture: threat modelling, policy design, compliance (e.g. banking controls) • Programming ecosystem knowledge: Python/R packaging (pip, conda, CRAN), dependency management • Delivery: solution design, build ...

operations, incident response, and forensic analysis. Proficiency in Security Information and Event Management (SIEM), including tools such as Splunk, Defender, and Tenable Threat Modelling System solutions, as well as with IDS/IPS and vulnerability scanners. Ability to perform triage of security events to determine their scope, priority ...

Experience working in enterprise cloud environments (Azure, AWS, GCP). Experience building cloud infrastructure and using cloud IaC tooling (Terraform, Cloudformation, BICEP) Experience in threat modelling, security reviews and testing. Proficiency in scripting languages: PowerShell, Bash, Python and behaviour-driven design Strong familiarity with security standards, security controls ...

governance of AI, LLM, and Agentic systems Develop and embed AI security standards, policies, and best practices across the organisation Conduct and maintain threat models and risk assessments for AI systems, informing key business decisions Act as the Subject Matter Expert (SME) for AI Security , supporting architecture boards, risk … committees, and senior stakeholders Provide guidance on secure AI adoption , including threat mitigation, governance, and compliance Collaborate cross-functionally with engineering, security, and business teams to ensure secure, scalable delivery Evaluate and implement emerging AI security technologies to reduce enterprise risk Required Experience Minimum 7+ years' experience in Security ...

Agent (OPA). Strong understanding of OAuth2, OpenID Connect (OIDC), SAML and SCIM. Experience securing cloud-native, API-driven and distributed systems. Knowledge of threat modelling, security non-functional requirements and security assurance. Experience integrating with enterprise identity providers and IAM platforms. Ability to produce high-quality security ...

multi-agent systems to solve real business challenges. Whether you are unblocking Agile teams, presenting to the Architecture Review Board, or mapping out robust threat models, your expertise will directly shape our strategic target-state vision. What You Will Do Drive Solution Design: Produce … your designs at the Architecture Review Board. Champion Application Security: Define robust security requirements including OAuth 2.0, SSO, authentication, API security, and proactive threat modeling. Lead Agile Teams: Provide hands-on technical leadership throughout the sprint process. You will remove technical impediments, guide CI/CD maturity, conduct code ...