1 to 25 of 32 Contract Threat Modelling Jobs in the UK

Umbrella) | Inside IR35 Remote with occasional client site visits Active SC Clearance Required Contract until March 2027 Security Operations Analyst | Cyber Threat Intelligence | Threat Modelling We are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing … environments. This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat ...

Senior Application Security Consultant (SAST/DAST/OWASP )/DevSecOps Security - Banking - London Secure SDLC | SAST | DAST | Threat Modelling | Cloud Security | CI/CD Location: London (Hybrid - 8 days onsite per month) Contract: 12 Months + extension Rate: £500-£550 per day (Umbrella) The Opportunity … across business-critical applications and cloud platforms. Conduct security architecture and secure design reviews. Perform application security risk assessments and define security requirements. Lead Threat Modelling workshops using STRIDE, MITRE ATT&CK or similar methodologies. Embed Secure SDLC principles into engineering teams. Integrate security tooling into CI/ ...

Threat Intelligence Analyst £594 per day (Umbrella) | Inside IR35 Remote with occasional client site visits Active SC Clearance Required Contract until March 2027 Threat Intelligence Analyst | Cyber Security | Enterprise Security We are currently recruiting for an experienced Threat Intelligence Analyst to join a major cybersecurity programme supporting … critical business and technology operations. This is an exciting opportunity for a security professional with strong experience in Threat Intelligence, Enterprise Security Architecture, Platform Security, and Security Architecture Design to help identify, analyse, and mitigate emerging cyber threats across complex environments. Working within a highly skilled cybersecurity team ...

Security design and assurance expertise Knowledge of security frameworks and standards Security Operations Analyst Key responsibilities include: Security operations monitoring and analysis Cyber threat intelligence assessment Threat modelling and risk identification Incident investigation and security event analysis Experience required: Security Operations Centre (SOC) or cyber defence experience … Hands-on threat intelligence and analysis capability Threat modelling expertise Strong understanding of cyber security technologies and processes Threat Intelligence Analyst Key responsibilities include: Production of threat intelligence reports and assessments Analysis of Indicators of Compromise (IOCs) and Tactics, Techniques & Procedures (TTPs) Tracking emerging cyber ...

security posture of mobile applications across Android and iOS platforms. The successful candidate will have strong hands-on experience in mobile application security, threat modelling, penetration testing, security assessments, and vulnerability mitigation . Key Responsibilities Conduct regular security reviews and assessments of mobile applications. Perform mobile application penetration … testing across Android and iOS platforms. Apply threat modelling techniques to identify security risks and recommend effective mitigations. Develop and maintain penetration-testing tools, scripts, policies, and security procedures . Assess mobile applications against recognised mobile security standards and best practices. Identify vulnerabilities and provide practical remediation recommendations. ...

controls. Identify security risks within cloud environments and recommend mitigation strategies. Conduct security assessments and architecture reviews to validate security and compliance requirements. Support threat modelling activities and risk assessments for new and existing services. Cloud Security Operations Support the transition of cloud solutions into operational security environments. … secure cloud design principles and architecture methodologies. Experience securing large-scale cloud environments. Strong knowledge of cloud-native security controls and services. Experience with threat modelling, risk assessments, and security architecture reviews. Ability to translate business requirements into secure technical solutions. Experience working within highly regulated environments. Strong ...

aligned to business requirements Translate security, compliance and regulatory requirements into practical security designs Develop and maintain security architecture patterns, standards and frameworks Conduct threat modelling, security assessments and risk reviews Advise clients on security governance, compliance and risk management strategies Support cloud security initiatives across AWS, Azure … governance, risk and compliance frameworks Experience designing and reviewing secure cloud architectures Knowledge of AWS, Azure and/or GCP security services Experience conducting threat modelling and risk assessments Strong stakeholder engagement and communication skills Experience working with enterprise security technologies and controls Ability to balance strategic architecture ...

providing mitigation recommendations. Support governance, risk, compliance, and assurance activities. Contribute to security roadmaps and continuous improvement initiatives. Provide guidance on cloud security monitoring, threat management, and incident response capabilities. Support managed cloud security service engagements where required. Essential Skills & Experience Proven experience working as a Security Architect within … secure cloud solutions within AWS, Azure, or multi-cloud environments. Deep understanding of security architecture principles, frameworks, and best practices. Experience conducting security reviews, threat modelling, and risk assessments. Strong knowledge of identity and access management, network security, encryption, and security monitoring. Experience integrating security into cloud transformation ...

assessments using recognised methodologies and industry frameworks. Evaluate risks related to infrastructure, software, cloud services, networks, third-party integrations, and information assets. Contribute to threat modelling and attack surface analysis activities. Support technology-focused assessments such as cloud, AI, and emerging technology evaluations. Stakeholder Engagement … understanding of cybersecurity principles, controls, and risk management practices. Knowledge of application security, cloud security, infrastructure security, and network security. Experience conducting security assessments, threat modelling, or risk analyses. Familiarity with industry frameworks and standards such as: NIST Cyber Security Framework ISO 27001 CIS Controls Secure Controls Framework ...

solution architectures and technical designs. Define and embed security requirements across applications, Azure and cloud services, infrastructure, SaaS, AI and third-party solutions. Conduct threat modelling, security risk assessments and design reviews, identifying risks and appropriate mitigations. Work with project teams, architects and suppliers to ensure security controls … Azure, Microsoft 365 and Microsoft Entra ID. Knowledge of IAM, network and endpoint security, cloud security, data protection and Zero Trust architecture. Experience conducting threat modelling, security risk assessments and technical design reviews. Ability to translate security requirements into practical technical solutions. Experience working with third-party suppliers ...

engineering, platform, and central architecture/governance teams, they run design and governance forums and influence without authority. They'll bring genuine cybersecurity expertise-threat modelling, security controls, identity and access, encryption, logging, and secure SDLC-so CSA's platforms and products can be trusted in production … premise hosting; hands-on experience with Azure, AWS and/or GCP is beneficial. You will also have proven security architecture expertise, including: Threat modelling and secure-by-design practices. IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication. Encryption in transit/at rest ...

project lifecycle. Responsibilities Design and develop security architectures for secure infrastructure and network environments. Produce high and low-level security architecture documentation. Conduct threat modelling, security risk assessments and vulnerability analysis. Define security controls aligned to Secure by Design principles. Support security assurance, accreditation and governance activities. Work …/IPS and boundary protection PKI, cryptography and key management Identity & Access Management (IAM) and Privileged Access Management (PAM) Secure by Design principles Threat modelling and security risk assessment Experience producing security architecture artefacts and supporting security accreditation activities. Good knowledge of: NCSC guidance JSP 440 MOD security ...

secure operating models that enable the safe deployment and use of AI solutions across complex business environments. This role focuses on AI security assessments, threat modelling, governance frameworks, security controls, secure integrations and identifying AI-specific security risks. Please only apply if you have the right to work … visa sponsorship is not available. You will be responsible for Conducting security assessments of AI solutions, including threat modelling. Developing governance frameworks, security standards and best practice for AI adoption. Designing controls for identity, access management, auditability and human oversight. Supporting the implementation of security guardrails for AI, generative ...

contract where you can lead the security workstream on a genuinely high-profile project? Do you enjoy working across the full lifecycle, from threat modelling and risk assessment through to customer-facing assurance documentation? My client is an established manufacturer of precision technology, delivering solutions used across … into the Embedded Software Engineering Manager. Your responsibilities: Your day-to-day work will involve identifying vulnerabilities and developing the project's risk assessment, threat model and security architecture, ensuring security risks are proportionately treated and clearly evidenced. You'll be advising engineering teams on security controls across ...

defence to deliver agentic infosec solutions aligned to our target operating model Key Responsibilities * Design security solutions for AI-driven and agentic systems * Conduct threat modelling (AI-specific and traditional) and risk reviews * Support the embedding security across the end-to-end agentic SDLC (design, test, release, governance … information security, ideally with a hands-on background in application or infrastructure security * Solid understanding of core security principles and architectures Experience with: o Threat modelling o Secure system design o Embedding security within the SDLC * Exposure to AI and agentic systems (practical or conceptual), including: o Security ...

DevOps, and operational teams, you will contribute to cloud architecture designs, automate security remediation processes, and provide proactive insights into cloud risks, vulnerabilities, and threat mitigation strategies. You will leverage your expertise in cloud security, infrastructure as code, CI/CD pipelines, containerisation, and governance frameworks to ensure that … software development lifecycle practices. Identify, assess, and mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while ...

security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills ...

Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC) best practice Implement container and Kubernetes security across ...

/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience ...

into CI/CD pipelines , integrating SAST, DAST, SCA, and infrastructure-as-code scanning so vulnerabilities are caught before they ship, not after. Support threat modelling and design reviews with engineering teams, using structured methods (STRIDE, MITRE ATT&CK) to identify risks early and influence architecture decisions directly. ...

Familiarity with the NIST Risk Management Framework (RMF). Experience with vulnerability management and security tooling. Exposure to security architecture, secure design reviews, or threat modelling. Understanding of AI governance and Responsible AI principles. Knowledge of Government Digital Service (GDS) delivery methodologies. Qualifications The following certifications would be advantageous ...

regulated environment. Key Responsibilities Review and refresh existing Cyber Security Impact Assessments (CSIAs) across a portfolio of live digital products and services. Assess existing threat models and security architectures to ensure they reflect current risks and technology changes. Provide security architecture guidance across projects from initial design through ...

governance of AI, LLM, and Agentic systems Develop and embed AI security standards, policies, and best practices across the organisation Conduct and maintain threat models and risk assessments for AI systems, informing key business decisions Act as the Subject Matter Expert (SME) for AI Security , supporting architecture boards, risk … committees, and senior stakeholders Provide guidance on secure AI adoption , including threat mitigation, governance, and compliance Collaborate cross-functionally with engineering, security, and business teams to ensure secure, scalable delivery Evaluate and implement emerging AI security technologies to reduce enterprise risk Required Experience Minimum 7+ years' experience in Security ...

environments. Produce and review high-level security designs covering network security, segmentation, multi-tenancy, virtualisation, containers, encryption, key and secrets management, AI runtime and threat modelling. Design IAM solutions, including identity providers, SSO, RBAC and MFA. Define SIEM/SOAR architecture and detailed designs for logging, correlation, playbooks … SIEM/SOAR Key Experience: Strong Security Architecture experience within complex enterprise environments Experience across network security, IAM, SIEM/SOAR and threat modelling Strong understanding of EPP, DLP, encryption, containers and cloud or infrastructure security Ability to produce high-level and detailed technical designs If this sounds ...

Agile delivery environments. Desirable Experience with Platform Engineering or Internal Developer Platforms (IDPs). Experience within a regulated industry. Knowledge of secure coding, threat modelling, and IT service management. Certifications such as CKA, AWS/Azure/GCP, Scrum, ITIL, or PMP. What's on Offer Competitive salary ...