22 of 22 Permanent Threat Modelling Jobs in the City of London

/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services and architecture changes. Validate fixes and identify root causes to reduce recurring vulnerabilities. … prioritise and remediate security issues. Hands‐on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting knowledge to understand unfamiliar code and contribute to automation. The confidence to work independently ...

complex enterprise IT and operational technology environments. Work with technical and solution architects to embed security throughout the design and delivery lifecycle. Apply threat modelling techniques to identify threats and define appropriate security requirements. Provide specialist advice on security risks, threat-based mitigation and system design. Manage … premises architecture and virtualisation Cloud platforms and containerisation Databases and LLM technologies Mobile technologies and application security Security architecture and secure-by-design principles Threat modelling, risk assessment and security requirements Security controls, protective monitoring and IAM Previous experience working specifically as a Security Architect is desirable ...

Architect for remote UK work with Active SC clearance. You will guide security design across delivery and engineering, review designs for compliance, and lead threat modelling and risk assessments. The role focuses on Azure security services and cloud-native controls within regulated government contexts. The position requires strong ...

automation that prevent material weaknesses reaching production Secure the software supply chain through trusted dependencies, SBOMs, artefact signing, provenance and workload identity Lead threat modelling and security design reviews for complex products and platforms Diagnose vulnerabilities and misconfigurations, reduce false positives and work directly with engineers on prevention … application testing, dependency analysis, secrets detection, container and cloud posture tooling Ability to write maintainable code, scripts, integrations and policy-as-code Experience leading threat modelling and resolving complex security design trade-offs Ability to assess emerging AI and agentic engineering practices pragmatically and establish proportionate controls Ability ...

risk within technology projects by ensuring appropriate security requirements, controls, monitoring, and assurance activities are identified, specified, and evidenced throughout the project lifecycle. Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls. Define monitoring … Skills and Experience Strong technical knowledge in at least one of the following areas: Public cloud, Application security, Networking, On-premises infrastructure. Understanding of threat modelling, security controls, and risk analysis principles. Ability to assess risks and recommend proportionate security controls and monitoring measures, rather than relying solely ...

help reduce cyber risk across client technology projects within the UK health, public sector, Defence and Central Government. You will define security requirements, perform threat modelling, and ensure effective controls and monitoring throughout the project lifecycle. You will work on cutting‐edge security challenges and collaborate with ...

continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

both technical and non-technical stakeholders. Develop security principles, controls and approaches aligned to client requirements, industry standards and regulatory frameworks. Conduct security assessments, threat and risk assessments, vulnerability assessments and security audits. Advise clients on security controls, emerging technologies and appropriate technical solutions. Work with technology vendors … systems integrator or professional services environment . Strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS . Experience with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM ...

into actionable design controls and implementation guidance. Evaluate emerging technologies, products, and platforms for alignment with enterprise security strategy. Conduct architecture risk assessments and threat modelling to identify potential exposures. Collaborate with infrastructure, application, and data teams to ensure secure solution design and integration. Document and maintain security … across workforce, privileged, service, application and machine identities; identity governance, modern authentication, access lifecycle management, conditional access, PAM/PIM, federation, SSO, MFA, identity threat detection, and zero trust identity control design. AI & Blockchain Architecture: Secure architecture and governance for AI, machine learning, generative AI, agentic solutions, distributed ledger ...

Doing Lead the design and assurance of secure architectures across complex Defence, Government, CNI and mission-critical environments. Define security requirements, threat models, architectural principles and proportionate security controls across the system lifecycle. Identify and manage security risks across high-level and detailed solution designs, providing practical mitigation strategies … Framework (CAF), NIST and ISO 27001 . Experience applying risk-driven security architecture methodologies to complex systems and environments. Strong understanding of security requirements, threat modelling, risk assessment and security controls. The ability to communicate complex technical risks and recommendations to both technical and C-level audiences. Experience ...

Assess and advise on cloud, network, infrastructure and application security controls. Review complex technical solutions against security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments . Provide technical oversight of security testing and penetration testing activities. Support vulnerability management and help teams ...

containerised environments, including network policies. Strong grasp of network security controls: firewalls, WAFs, segmentation, TLS termination and egress filtering. A structured approach to threat modelling and risk assessment, and the ability to explain risk clearly to any audience. Experience in financial services or another regulated environment. Inclusion, Work ...

financial services experience) Good deep understanding of Generative AI and Agentic security risks such as prompt injection, data poisoning etc. Experience working with either threat modeling, risk assessing or auditing cloud technologies (AWS, Google and Azure), Generative AI/agentic systems and tool integrations (A2A, MCP) Recognized cloud security ...

useful, not mandatory) Enterprise frameworks: TOGAF/Zachman/ArchiMate Integration architecture: APIs, events, microservices, messaging, security boundaries. Data architecture familiarity: Fabric, data governance, modelling, quality & lineage. Security‐by‐design: IAM, encryption, threat modelling, compliance. Cloud architecture familiarity: Azure, identity, security, cost optimisation. What Chanel can offer ...

reports against security risks to protect data, applications, and infrastructure using modern tools Uses enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, control review analysis, and security documentation, validating outputs and handling data according to sensitivity and security requirements. Conducts reviews on existing security controls ...

identification and analysis of web application security vulnerabilities - Oversee daily management of application security platforms to maintain coverage, compliance and remediation of findings - Conduct threat modelling and review application architectures - Implement application security controls and proactive measures to prevent security incidents - Implement and manage SAST/SCA tooling ...

other security and privacy subject matter experts, so a broad and deep understanding of security and privacy domains is essential - from secure architecture and threat modelling to data protection and regulatory compliance. If you thrive on autonomy, love solving complex problems, and want to see the real-world ...

carbon, sustainable future. This role is part of Inchcape's Global Cyber Security team, supporting our worldwide operations through advanced security monitoring, threat detection and incident response capabilities. You'll play a critical role in protecting our people, systems and data, working alongside highly skilled security professionals … operate in an L3 Security Operations Centre (SOC) capacity, serving as the senior technical escalation point for complex cyber security incidents and advanced threat investigations. You'll drive continuous improvement across detection engineering, threat hunting, automation and incident response capabilities, helping strengthen Inchcape's cyber resilience and security ...

automated response workflows, this role gives you real technical impact. What Youll Do: Build and optimise detections in Elastic and Azure Sentinel Develop threat models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with … external SOC to refine detection strategies Perform threat hunting and analysis across large-scale cloud environments Tune rules to reduce false positives Document detection logic and playbook procedures What You Bring: 5+ years in security operations, threat detection, or SOC roles Strong experience with Elastic Stack and/ ...

automated response workflows, this role gives you real technical impact. What You'll Do: Build and optimise detections in Elastic and Azure Sentinel Develop threat models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with … external SOC to refine detection strategies Perform threat hunting and analysis across large-scale cloud environments Tune rules to reduce false positives Document detection logic and playbook procedures What You Bring: 5+ years in security operations, threat detection, or SOC roles Strong experience with Elastic Stack and/ ...

with cross-functional architects to implement secure technology that aligns with business objectives. You will apply AI-assisted patterns within the SDLC to improve threat modeling, control reviews, and security documentation, while ensuring traceability and auditability #J-18808-Ljbffr ...

hundreds of millions of dollars in ad spend that would otherwise be lost to IVT. The Security Engineering team is responsible for: (a) Targeted threat hunting, including on the dark web, to consistently stay updated on modus operandi and risks associated with advertising fraud, (b) Building sophisticated mitigation techniques … Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language You have passion for reverse engineering, malware analysis, threat detection and risk hunting. PREFERRED QUALIFICATIONS Experience with AWS products and services Experience with any combination of the following: threat modeling, secure coding, identity ...