16 of 16 Permanent Threat Modelling Jobs in Central London

everything they build. Key Responsibilities Define and evolve Product Security strategy across the Secure SDLC. Embed Secure-by-Design principles into software engineering. Lead threat modelling and security architecture reviews. Build scalable security tooling and automation that integrates into developer workflows. Partner with Engineering and Product teams … security controls. Built Secure SDLC frameworks developers genuinely adopted. Strong software engineering background with the technical credibility to influence engineers. Hands-on experience with threat modelling, Secure-by-Design, security architecture and developer enablement. Experience building security tooling, automation or integrating security into CI/CD pipelines. Remained ...

into complex IT and digital initiatives Advise clients on cyber risk, governance and regulatory compliance frameworks including: ISO 27001 NIST GDPR PCI-DSS Conduct threat modelling and identify security vulnerabilities within solution designs Recommend pragmatic risk mitigation strategies to technical and non-technical stakeholders Support the implementation … IDAM Privileged Access Management (PAM) Single Sign-On (SSO) Network Security Encryption technologies Understanding of infrastructure, architecture methodologies and secure design principles Experience with threat modelling and reference architecture development Excellent stakeholder engagement and communication skills Ability to learn quickly and adapt within fast-paced environments Desirable Experience ...

What You'll Be Doing Design secure architectures across AWS, Azure and hybrid cloud environments Develop cloud security strategies, governance and security standards Conduct threat modelling and security architecture reviews Embed security into cloud deployments through DevSecOps and automation Advise clients on best practice and modern cloud security … Looking For You'll have experience with several of the following: Cloud Security Architecture AWS, Azure and/or GCP Secure by Design & Threat Modelling Zero Trust principles DevSecOps & Infrastructure as Code Cloud Governance & IAM Relevant cloud security certifications (desirable) What's On Offer ...

structuring security engagements, including managing scope, stakeholders, and delivery risk. Communicates clearly with both technical architects and non‐technical executives, adjusting without losing accuracy. Threat modelling experience using structured methods such as STRIDE, applied to complex hybrid ecosystems before deployment. Experience working with legacy technical debt in practice ...

design. Identity & Access Management (IAM/IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO 27001, NIST or equivalent. Strong communication and stakeholder management skills. Professional certifications such as CISSP, SABSA or similar ...

influence secure solution design. Research emerging technologies and develop innovative approaches to challenging security problems. Contribute to the development of reference architectures and threat models. Support the delivery of secure technology solutions across major public sector and government programmes. Key Skills & Experience The organisation is looking for Security Consultants … Sign-On (SSO) and Identity and Access Management (IAM/IDAM). Network security and encryption. IT infrastructure, technical concepts and solution design methodologies. Threat modelling and security architecture development. Identifying security vulnerabilities and assessing their potential business and technical impact. Communicating security risks and recommendations ...

delivery (cloud‐native focus) • Provide hands‐on cyber consultancy across digital product lifecycles, championing Secure by Design and privacy‐by‐default. • Conduct and iterate threat models for new features and integrations; translate findings into actionable design and control decisions. • Advise on secure architecture for modern platforms (segmentation, identity/ ...

M365 Consultant/Senior Consultant, you will help transform clients’ cybersecurity posture by designing and implementing advanced Microsoft Threat Protection technologies. You will work directly with clients in a consulting capacity, supporting medium to large enterprise environments and contributing to robust Cyber Defence strategies across endpoints, identities, cloud … cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support ...

architectures and solution designs (e.g. Privileged Access Management, SSO, IDAM, network security, encryption) Understanding of IT infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and/or cloud security experience preferred SABSA/ ...

across our software development lifecyclehelping us embed security directly into our code and architecture while exploring next-generation defensive strategies like AI/LLM threat modeling. Unlike security roles where youre isolated or acting as a gatekeeper, here youll be a genuine security champion. Youll partner closely with engineering … DevSecOps practices, and mentor developers to build naturally resilient systems. As one of our Application Security Engineers, youll: Provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation. Promote a security-first mindset across development teams, acting as a supportive technical mentor. Integrate security assessments ...

financial services experience) Good deep understanding of Generative AI and Agentic security risks such as prompt injection, data poisoning etc. Experience working with either threat modeling, risk assessing or auditing cloud technologies (AWS, Google and Azure), Generative AI/agentic systems and tool integrations (A2A, MCP) Recognized cloud security ...

that integrate seamlessly into CI/CD pipelines. Analyse complex cloud and Kubernetes architectures to identify and document potential attack vectors, mapping them against threat models to prioritise security improvements. Support defensive hardening efforts by providing actionable insights and telemetry from security validation exercises, ensuring continuous improvement of detection ...

identification and analysis of web application security vulnerabilities - Oversee daily management of application security platforms to maintain coverage, compliance and remediation of findings - Conduct threat modelling and review application architectures - Implement application security controls and proactive measures to prevent security incidents - Implement and manage SAST/SCA tooling ...

functional engineering teams. This role emphasizes hands-on risk assessment, secure coding practices, and collaboration with developers across languages and tools. You’ll lead threat modelling, design reviews, and security consultations, while continually educating partners on secure #J-18808-Ljbffr ...

junior staff, and coordinate with clients and engineering teams to harden defenses. Based in London, the role requires deep expertise in enterprise security controls, threat modeling, AI/ML security considerations, and multi-cloud architectures, with proven project leadership and communication at #J-18808-Ljbffr ...

identity management frameworks. Preferred qualifications: Relevant industry certifications (e.g., CISSP, CCSP, Google Cloud Certified Professional Cloud Security Engineer, or equivalent). Experience with threat modeling methodologies (e.g., STRIDE, PASTA) and application security perimeters. Proven experience managing project life-cycles, establishing scope boundaries, tracking engineering milestones, and delivering complex client … this role, you will be a trusted delivery partner for organizations undergoing massive infrastructure shifts or looking to validate their structural defenses against sophisticated threat actors. You will be comfortable managing technical projects, leading architecture workstreams, and translating deep technical details into clear business terms for management and engineering ...