20 of 20 Permanent Threat Modelling Jobs in the East of England

that process. This role exists to embed security expertise directly into how our engineering teams build and ship software: setting the standards, running the threat modelling, and making the judgement calls that keep pace with delivery instead of slowing it down. About Redgate Redgate brings together people … scanner tells you. It's a role built on trust: teams will come to you for guidance, and the judgement you bring to triage, threat modelling, and governance decisions will shape how security actually gets done here. Partner directly with engineering and product teams to define and operationalise ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

software and product development lifecycle. Key Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation activities. Advise on secure design, cloud security, mobile security, authentication, encryption … Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience supporting audits, regulatory reviews or compliance ...

What You'll Be Doing Owning the software security strategy and roadmap across the product line Defining security architecture, standards and best practices Embedding threat modelling and security requirements into product development Working closely with software and product teams to drive secure-by-design principles Leading architecture reviews … maturity across the organisation What We're Looking For You'll likely bring experience in: Security Architecture Product Security Secure Software Development Lifecycle (SDLC) Threat Modelling Vulnerability Management Security Testing & Assurance Secure CI/CD Pipelines Risk Assessment & Security Governance Software Architecture and Engineering Leadership Desirable Experience Embedded ...

pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier Engagement Support V&V, penetration testing, and remediation, and manage security alignment with suppliers. Compliance & Documentation Own the security compliance dossier … hardware engineering with at least 5 years focused on cybersecurity for embedded systems, IoT, or cloud platforms. Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products. Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security ...

code best practices. Automating remediation, compliance checks and policy enforcement through cloud-native tooling and policy-as-code approaches. Supporting secure solution design and threat modelling across engineering teams. Owning and improving vulnerability management processes, ensuring remediation targets are achieved. Configuring and maintaining cloud security controls, including ...

Design & Regulated Environments:** Proven experience delivering solutions within highly regulated, security-sensitive or compliance-driven environments. Strong understanding of secure-by-design principles, OWASP, threat modelling, identity and access management, least-privilege principles and non-functional requirements.* **Software Engineering Authority:** Extensive software engineering background with mastery of modern ...

Management Provide proactive security architecture assurance to Data & AI initiatives, ensuring early engagement and secure-by-design outcomes. Produce and maintain security artefacts including threat models, architectural risk assessments, solution security designs, and control definitions. Identify, articulate, and manage security risks arising from data usage, analytics, and AI adoption ...

engineering teams follow across the organisation. What You'll Do Define end-to-end system architectures aligned to business goals, run architecture reviews and threat modelling sessions, and own the technical roadmap across multiple product domains. Lead service decomposition using Domain-Driven Design - defining bounded contexts, inter-service ...

Experience working with cyber and security requirements down to the system control level. + Experience conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations.This is not an exhaustive list, and we are keen to hear from you even ...

Cloud Platform, helping shape the security foundations from day one and working closely with architects and engineers to build security into the platform. Lead threat modelling across the platform, identifying realistic attack paths and turning them into practical security requirements, controls and actions that engineering teams can implement. ...

ENISA, UK PSTI, BSI, NIS2 and OpenSSF. We're looking for experience with Security Development Lifecycles and product security assurance, including requirements management, threat modelling, security testing and incident response. The ability to interpret legal and regulatory text and translate it into actionable technical and engineering requirements ...

UK. You will shape security foundations from day one and work closely with architects and engineers to embed security into the platform. Lead threat modelling across the platform, translating attack paths into practical security requirements and controls for engineering teams to implement. #J-18808-Ljbffr ...

Redgate is seeking a security professional to embed security expertise across its product teams, guiding threat modelling, governance, and secure SDLC practices. You will define security requirements, lead governance, and drive SAST/DAST adoption while supporting AI-related security initiatives and cloud-native security across the engineering ...

Redgate is seeking a senior security engineer to embed security deeply into our product teams, defining requirements across the SDLC and leading threat modelling for new features. You’ll influence architecture, guardrails, and secure-by-default patterns, balancing risk with delivery velocity. Work across engineering and product squads ...

supply-chain considerations and contributions to, or practical use of, open-source software projects and ecosystems. Knowledge of cryptographic principles, secure software development, or threat modelling. Exposure to Agile development methodologies and scaled product-development environments. Here is what you can expect when you join our team Career Growth ...

becoming shelfware. Input to vendor risk assessments fits here too, particularly on how vendors handle your data in their own models. Understanding the AI threat landscape They need a working knowledge of AI-specific attack techniques and should be fluent in the reference frameworks, mainly the OWASP … understand how attackers use AI against the organisation (more convincing phishing, deepfake-enabled fraud, faster reconnaissance and exploit development) and how that changes your threat model. Shadow AI, meaning unsanctioned use of AI tools by staff, is a practical, near-term issue they should be able to discover ...

solutions, and email sandboxing tools. You will support Sec Dev Ops and secure development automation initiatives. You will define and implement a company-wide threat modeling framework to ensure consistent risk assessment across all business units. You will lead the end-to-end Vulnerability Management lifecycle, including risk prioritization … rules, and access controls. About you Experience in security architecture, risk analysis, and security countermeasures. Experience managing advanced security solutions, including EDR and email threat protection tools. Proven expertise in performing threat modeling to identify and mitigate architectural security risks. Experience designing and overseeing an enterprise-wide Vulnerability ...

technologies and procedures that mitigate short and long‐term threats within our dynamic, international environment. You will maintain security products (EDR, multi‐antivirus, email threat protection), support Sec DevOps, implement a company‐wide threat modeling framework and lead the Vulnerability Management lifecycle using Tenable. #J-18808-Ljbffr ...

solutions! In this role, you’ll evaluate system security architectures, dive into firmware code for review, contribute to ROM assessments, and perform hands‐on threat modeling and lightweight testing. This is a fantastic opportunity for someone who loves solving complex security challenges, enjoys collaborating with brilliant minds across domains … empowering others to do the same, we’d love to hear from you! Responsibilities: Review firmware and SoC architecture for security risks and threat models. Evaluate critical security features like secure boot, rollback protection, memory isolation, and TEE. Perform C/C++ security code reviews to spot implementation‐level ...