1 to 25 of 28 Contract Threat Modelling Jobs in the UK

Security Engineer/Security Consultant (Application Security & Threat Modelling) Rate - £550 - £650 Outside IR35 Duration - 6 months initial Location - Bristol/London (once a week/remote) Role overview: A leading Financial Services is seeking an experienced Security Engineering Consultant on a contract basis. The successful candidate will … embedded within engineering tribes, providing security consultancy and guidance to development teams throughout the software development lifecycle. The primary focus of the role is threat modelling. The consultant will conduct threat models for new and existing products, identify risks at the design stage and work with developers ...

Month contract based in London with 3 days/week in office. Purpose of the role: We are looking for an experienced Threat Modelling Security Engineer to identify security threats, define effective mitigating controls and manage findings throughout their lifecycle. You will deliver threat models to agreed … timeframes, develop secure Python-based automation and help improve the existing threat modelling service. The role involves presenting technical work to senior and cross-functional stakeholders, while training and supervising junior team members. You will work with minimal supervision across cloud, DevOps and regulated security environments. What ...

business-critical platforms and services. Working closely with architecture, engineering, cloud and infrastructure teams, you will provide security leadership, conduct architecture reviews, perform threat modelling, and define security controls across complex enterprise environments. Key Responsibilities Define and maintain secure architecture principles, standards and reference architectures. Conduct security architecture … design reviews across cloud, infrastructure, applications and network environments. Perform threat modelling and security risk assessments. Design secure-by-design solutions across cloud, hybrid infrastructure, applications, identity and network environments. Support the implementation of Zero Trust security principles. Provide architectural guidance across AWS and Azure environments. Define security ...

expert security design guidance to delivery and engineering teams. Review solution and product designs to ensure compliance with security standards and best practice. Conduct threat modelling and security risk assessments. Design security controls aligned to organisational risk appetite. Support the deployment of cloud-based services, predominantly within Azure … Good knowledge of ISO 27001, NIST CSF and CIS Controls. Experience with Azure security services, identity management and cloud-native security controls. Exposure to threat modelling and risk assessment methodologies. Understanding of security assurance and controls testing activities. Excellent stakeholder engagement and communication skills. Desirable Skills & Certifications CISSP ...

stakeholders on Secure by Design principles and security best practices. Reviewing and assuring solution designs against established security standards, patterns and architectural frameworks. Leading threat modelling, risk assessments and security design reviews. Identifying security risks and recommending effective mitigation strategies. Supporting cloud-first solutions across Azure and wider … engineering, assurance and risk teams to validate security controls. Producing high-quality security architecture artefacts, standards and blueprints. Monitoring emerging cyber threats and incorporating threat intelligence into security decision-making. Experience Required Extensive experience in Security Architecture within Central Government or the wider Public Sector. Strong understanding ...

include: Provide security assurance and governance across enterprise AI and cloud initiatives, ensuring solutions are secure by design. Conduct security reviews, risk assessments, and threat modelling activities for AI platforms, applications, and services. Partner with architects, engineering teams, and business stakeholders to challenge designs and ensure appropriate security … related threats and controls. Excellent stakeholder management and communication skills, with the ability to influence senior leaders, architects, and delivery teams. Strong background in threat modelling, security governance, risk assessment, IAM, network security, cryptography, and security monitoring. Passion for technology and innovation, with an interest in AI, cloud ...

part of a bigger team, working with a group of a Senior Security Architects and Digital Engineering stakeholders to produce security architecture artifacts, threat modelling, design assurance, and reusable patterns that strengthen the programmes security posture. Key Responsibilities: You will lead and deliver core security architecture outputs including … Digital Engineering Security Artifacts and Engagement Report Security Requirements Specification Security Principles Framework Infrastructure Mapping Document & Security Architecture Design Pack Threat Modelling Report Reusable Security Pattern Library Knowledge Transfer Pack (training materials, handover content, recorded walkthroughs) We are looking for someone with: Extensive Security Architecture/Security Consulting ...

production deployment. Provide cyber security guidance and best practises for various AI initiatives, including Generative AI, Business Intelligence, and advanced analytics platforms. Conduct threat modelling activities using IriusRisk. Identify security risks, vulnerabilities, and devise mitigation strategies throughout the development lifecycle. Ensure solutions meet internal cyber security standards, governance … with stakeholders via Jira, Jira Align, and Confluence. Required Skills & Experience: A strong background in Cyber Security within complex enterprise environments. Experience in conducting threat modelling and security risk assessments. Familiarity with AI, Machine Learning, Data, or Advanced Analytics platforms. Knowledge of cloud security principles, especially within Google ...

Senior Security Engineer - AI, you will: Design and develop security solutions for AI-driven and agentic systems. Conduct both traditional and AI-specific threat modelling and risk assessments. Support the embedding of security controls throughout the end-to-end agentic SDLC, including design, testing, release and governance. Develop … ideally with a hands-on background in Application Security or Infrastructure Security. Strong understanding of core security principles, controls and architectures. Proven experience in: Threat modelling Secure system design Embedding security within the Software Development Lifecycle (SDLC) Exposure to AI and agentic systems, either through practical implementation ...

. The mission is a scalable, proactive approach to securing the bank's mobile apps so engineers can operate with confidence in an evolving threat landscape. You will help build, deliver, and drive the security of the mobile platform, including the design and delivery of a world-class security … security framework for the mobile platform and associated services (penetration testing, research, consultancy) Conduct regular hands-on reviews of mobile application security posture Apply threat modelling and mitigation techniques across the mobile channel Develop and maintain pen-testing security tools, scripts, policies, and procedures Research emerging technologies ...

/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience ...

Grafana, Datadog or CloudWatch . Relevant Google Cloud certifications , such as Developer, Solutions Architect or Security. Experience implementing cloud security practices including secure coding, threat modelling, compliance and incident response. Open-source contributions or a strong track record of technical knowledge sharing. Experience leading multi-team initiatives spanning ...

/CD pipelines, build tools, artifact repositories and developer platforms Expertise in secure software delivery, vulnerability management and platform security Experience with threat modelling, security frameworks and maturity assessments Strong knowledge of application security, network security and cloud security principles More details available on successful application. ...

capability. Essential Skills & Experience Strong experience delivering cyber security risk assessments and assurance within large, complex digital environments. Excellent knowledge of cyber risk management, threat modelling and security architecture . Strong cloud security experience, ideally including AWS, SaaS environments and cloud governance. Experience applying cyber security standards, regulatory ...

Handle day-to-day vulnerability management, including pen test findings: prioritise what's genuinely exploitable, track fixes and check they've worked. Help run threat modelling sessions in IriusRisk and turn the results into backlog tickets. Look after secrets management, certificates and access reviews and keep security documentation ...

traditional on-premise hosting; hands-on experience with Azure, AWS and/or GCP is beneficial. Proven security architecture expertise is beneficial, including: Threat modelling and secure-by-design practices IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication Encryption in transit/at rest ...

implementing enterprise security architecture and controls. Strong knowledge of information security frameworks, standards, and best practices. Experience conducting security risk assessments, vulnerability analysis, and threat modelling. Experience working with cloud platforms and supporting cloud transformation programmes. Ability to engage effectively with both technical and non-technical stakeholders. Strong documentation ...

implementing enterprise security architecture and controls. Strong knowledge of information security frameworks, standards, and best practices. Experience conducting security risk assessments, vulnerability analysis, and threat modelling. Experience working with cloud platforms and supporting cloud transformation programmes. Ability to engage effectively with both technical and non-technical stakeholders. Strong documentation ...

enterprise-wide technical strategies Strong knowledge of: Cloud technologies Serverless architectures DevOps practices CI/CD pipelines Test-driven development (TDD) Security architecture and threat modelling Experience working within Agile, multidisciplinary environments Excellent stakeholder engagement and influencing skills Ability to translate complex technical concepts into clear business-focused ...

roles. Proven experience delivering security assurance within Operational Technology (OT) environments. Strong understanding and practical application of the IEC 62443 standards framework. Experience undertaking threat analysis, risk assessments, and security control definition. Knowledge of security architecture principles, including network segmentation, zones, and conduits. Experience defining and managing security requirements … Security Management Plans, ensuring delivery against agreed timescales, budgets, and quality expectations. Develop secure architectures using zoning, segmentation, and defence-in-depth principles. Conduct threat modelling, security risk assessments, and define effective mitigation strategies. Assess third-party products and components against security requirements and standards. Review engineering ...

investigate security incidents, providing detailed reports and recommendations for remediation. Skills Previous experience shaping how security is engineered into everyday work - from threat modelling and architecture at design time to hardened, monitored systems in production. Proven experience with security frameworks, standards, and methodologies Strong Secure SDLC knowledge ...

investigate security incidents, providing detailed reports and recommendations for remediation. Skills *Previous experience shaping how security is engineered into everyday work - from threat modelling and architecture at design time to hardened, monitored systems in production. *Proven experience with security frameworks, standards, and methodologies *Strong Secure SDLC knowledge ...

across defensive security, security engineering and offensive testing. The roles cover different areas of the security lifecycle: * Security Engineer: SIEM, detection and response engineering, threat hunting, security telemetry, SOAR automation and secure CI/CD pipelines. * Cyber Security Specialist: enterprise security across cloud, AI, endpoint, network, IAM and cryptography … with experience across threat modelling, MITRE ATT&CK, STRIDE and recognised security standards. * Offensive Security & Advanced Testing Specialist: red teaming, offensive security testing, threat emulation, AI security testing and purple team activity. The wider environment includes contemporary cloud architectures, RESTful APIs and containerised microservices, with a focus ...

technologies including Cloud and AI. Exposure to contemporary architectures e.g. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments e.g. ...

technologies including Cloud and AI. Exposure to contemporary architectures e.g. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments e.g. ...