11 of 11 Contract Threat Modelling Jobs in the UK excluding London

strong technical depth. Key Responsibilities: Define and implement secure architecture patterns across engineering platforms (CI/CD, build systems, runtime environments) Conduct security assessments, threat modelling, and gap analysis across platforms and pipelines Develop and embed DevSecOps best practices, including secure pipeline design and automated controls Establish …/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience ...

activities, and ensuring secure-by-design principles are Embedded throughout the development life cycle. Key Skills & Experience Security Architecture and Secure-by-Design Principles Threat Modelling, Risk Assessment and Security Assurance DevSecOps and Secure CI/CD Pipelines Cloud Security (AWS, Azure or Hybrid Environments) Identity & Access Management … working within Defence, National Security or Highly Secure Environments Responsibilities Define and govern security architecture across cloud, DevSecOps, and AI/ML platforms. Conduct threat modelling, security risk assessments, and architecture reviews. Develop security patterns, standards, and controls for secure solution delivery. Support accreditation, assurance, and compliance activities. ...

covering DevSecOps, policy-as-code and secure CI/CD pipelines. Leading software supply chain security, including SBOMs, artefact signing and software provenance. Conducting threat modelling and security risk assessments. Chairing security working groups and collaborating with multinational stakeholders. Engaging with senior leadership to communicate security risks, assurance … environments. Strong background in cloud security architecture across multi-cloud and edge platforms. Experience implementing Secure by Design principles and DevSecOps practices. Expertise in: Threat modelling and risk management Policy-as-Code CI/CD security controls Software Supply Chain Security SBOMs, artefact signing and software provenance Excellent ...

with infrastructure engineering teams to securely deliver cloud solutions. Acting as a Subject Matter Expert (SME) for cloud security services and best practices. Conducting threat modelling, security reviews, and security testing activities. Supporting the adoption and optimisation of CSPM/SSPM tooling and policy-as-code security controls. … Bicep. Experience with CSPM/SSPM solutions, cloud security tooling, and cloud governance. Knowledge of Kubernetes and modern cloud security architectures. Experience with threat modelling, security testing, and cloud security standards. Understanding of authentication, cryptography, networking, and enterprise security principles. Familiarity with policy-as-code security tools such ...

evolve the mobile security framework across the organisation's mobile platforms. Conduct and oversee mobile application penetration testing, vulnerability assessments and remediation activities. Perform threat modelling, security analysis and risk assessments for mobile applications and supporting services. Define and promote secure development standards, application hardening techniques and mobile … experience in mobile application security, with approximately 10+ years in cyber security, application security or a related field. Deep expertise in mobile penetration testing, threat modelling, vulnerability management and security assurance. Strong knowledge of OWASP MASVS, MASTG and industry-recognised mobile security standards and testing methodologies. Proven experience ...

highly secure infrastructure and network environments within a classified defence programme. Working within a multi-disciplinary engineering team, you will define security architectures, conduct threat modelling and risk assessments, and ensure compliance with stringent security and accreditation requirements across complex IT and networked systems. Key Skills & Experience Proven … zoning Firewalls, IDS/IPS and boundary security controls PKI, encryption and key management Identity & Access Management (IAM/PAM) Secure-by-Design principles Threat modelling and security risk assessment Experience producing security architecture artefacts and supporting accreditation activities. Knowledge of NCSC guidance, JSP 440, Secure by Design ...

ABOVE SECRET environments, ROSA, Garrison, Citadel, VCF, Cross-Domain Solutions Zero Trust, IDAM & PKI - conditional access, hybrid identity, cryptography, HSMs, IAM, RBAC, OIDC, federation Threat Modelling - STRIDE/STRIDE-LM, attack-surface analysis, trust boundary modelling, design reviews Network & Boundary Security - Checkpoint, Palo Alto, Fortinet, Cisco, Juniper ...

DevOps, and operational teams, you will contribute to cloud architecture designs, automate security remediation processes, and provide proactive insights into cloud risks, vulnerabilities, and threat mitigation strategies. You will leverage your expertise in cloud security, infrastructure as code, CI/CD pipelines, containerisation, and governance frameworks to ensure that … software development lifecycle practices. Identify, assess, and mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while ...

operations, incident response, and forensic analysis. Proficiency in Security Information and Event Management (SIEM), including tools such as Splunk, Defender, and Tenable Threat Modelling System solutions, as well as with IDS/IPS and vulnerability scanners. Ability to perform triage of security events to determine their scope, priority ...

Experience working in enterprise cloud environments (Azure, AWS, GCP). Experience building cloud infrastructure and using cloud IaC tooling (Terraform, Cloudformation, BICEP) Experience in threat modelling, security reviews and testing. Proficiency in scripting languages: PowerShell, Bash, Python and behaviour-driven design Strong familiarity with security standards, security controls ...

multi-agent systems to solve real business challenges. Whether you are unblocking Agile teams, presenting to the Architecture Review Board, or mapping out robust threat models, your expertise will directly shape our strategic target-state vision. What You Will Do Drive Solution Design: Produce … your designs at the Architecture Review Board. Champion Application Security: Define robust security requirements including OAuth 2.0, SSO, authentication, API security, and proactive threat modeling. Lead Agile Teams: Provide hands-on technical leadership throughout the sprint process. You will remove technical impediments, guide CI/CD maturity, conduct code ...