16 of 16 Permanent Threat Modelling Jobs in Scotland

architectures across digital, cloud and data‐driven solutions, ensuring they follow best practice, comply with regulations and meet organisational security standards. Facilitate and guide threat‐modelling activities—such as identifying risks, attack paths and mitigations—so that security is embedded early in every solutionEnsure consistent and comprehensive application … SaaS, PaaS, IaaS (including AWS, Azure) etc], including IAM, network protection, encryption, monitoring, zero‐trust concepts and secure cloud‐native designHands‐on experience with threat‐modelling techniques and the ability to translate identified threats into meaningful, actionable technical controls. Practical knowledge of key regulatory and compliance frameworks including ...

platforms are effectively integrated and aligned with business risk. The role offers opportunities to broaden your experience, working across areas such as security architecture, threat modelling, development, continuous control validation and emerging technologies including AI.## Responsibilities* Design, build, configure and maintain security platforms and protective controls across … posture and the integration of security testing and controls into CI/CD and development workflows.* Contribute to security architecture, technical design reviews and threat modelling, providing practical security guidance that helps technology teams understand risk and implement proportionate solutions.* Develop and maintain security orchestration, platform integrations ...

performed by the IS Security team Supports IS Security achieve regulatory and statutory compliance requirements Complete cyber risk assessments, including third party suppliers Apply threat modelling principles to complex system and solution designs to identify security risks and appropriate mitigations Supports, monitors and recommends improvements to cyber incident … governance requirements and identifying suitable controls. (essential) Experience of delivering cloud focused security solutions with a solid understanding of modern cyber threats and threat modelling techniques (preferred) Good understanding of security frameworks (NIST CSF, Mitre ATT & CK) (essential) At Sword, our core values and culture are based ...

lifecycles. Support the Information Security Manager and collaborate with technical teams across the organisation. Provide technical security guidance for AI initiatives. Conduct security assessments, threat modelling and architecture reviews for AI and technology solutions. Monitor threat intelligence, emerging vulnerabilities and developments within the AI threat landscape ...

SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/ ...

other languages as required. Cross-Functional Collaboration: Work collaboratively with engineers and architects in Infrastructure Platform teams, engage with Runtime Compute Product Security for threat modelling, and partner with Commercial & Investment Bank SRE, Architecture, and application teams for investigations and solution design. Teamwork and Support: Actively participate ...

other languages as required. Cross-Functional Collaboration: Work collaboratively with engineers and architects in Infrastructure Platform teams, engage with Runtime Compute Product Security for threat modelling, and partner with Commercial & Investment Bank SRE, Architecture, and application teams for investigations and solution design. Teamwork and Support: Actively participate ...

design practices, and lead security improvements for the SDLC.Please note Visa sponsorship is not provided for this particular opportunity. ResponsibilitiesSecurity Design and ImplementationPerform threat modeling, risk assessments, audits, and architecture reviews, focusing on Cloud and container environments. Manage Key Management and IAM controls. Partner with engineering teams by defining … continuous improvement. Cloud & Container Security: Strong knowledge of orchestration (AWS, Azure, GCP, Docker, Kubernetes) and container image vulnerability lifecycles. AppSec & DevSecOps: Deep understanding of threat modeling (STRIDE, PASTA), IAM, cryptography, web/network protocols ( REST, TLS, TCP/IP), and integrating security tooling (SCA, SAST, DAST) into CI/ ...

capture and reconciliation. Strong API design and integration with legacy and third-party systems that you do not control and cannot change. Data architecture: modelling, entity correlation and matching across systems without shared identifiers, data quality, migration and seeding, retention and deletion. Cloud architecture on Azure — networking, identity, data …/CD; ability to size and cost a workload. Security and privacy by design: authentication and identity (OIDC/OAuth2, federated identity), threat modelling, data protection and information governance for sensitive personal data. Written argument. Options papers, ADRs and design documents that a sceptical technical reviewer can follow ...

Experience working with cyber and security requirements down to the system control level. + Experience conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations.This is not an exhaustive list, and we are keen to hear from you even ...

specialists, penetration testers and subject matter experts where required.Evaluate encryption, key management and authentication technologies.Assess risks across hardware, software, firmware, electronic and mechanical systems.Support threat modelling, vulnerability assessments and risk analysis activities.Ensure security considerations are incorporated into product development activities.Collaboration & Industry EngagementWork closely with product management, engineering teams ...

Europe. Beneficial Qualifications: Familiarity with healthcare/MedTech software regulatory standards (IEC 62304, ISO 13485, ISO 14971, IEC 81001-5-1). Experience with threat modeling, secure data handling, design controls, and regulatory submission documentation. What we offer The opportunity to build software that supports medical diagnostics and contributes ...

access and secrets management while maturing our security posture. You will collaborate with Infrastructure, DevOps and security teams to embed security by default, implement threat modelling, and contribute to secure adoption of AI and new technologies across the #J-18808-Ljbffr ...

partner for engineering, quality services, and digital transformation. We collaborate with world-leading aerospace manufacturers, delivering cutting-edge solutions in structural analysis, finite element modelling, numerical simulation, and certification support. At Expleo, we foster innovation, technical excellence, and professional growth, empowering our teams to shape the future of aerospace … collaborative engineering environment, you will contribute to the delivery of next-generation survivability solutions that enable combat aircraft to operate effectively within increasingly complex threat environments. You will support the development and integration of electronic warfare, self-protection and survivability capabilities that enhance mission success and operational effectiveness. Responsibilities ...

Project Specialist to join our Security Solutions team. We are championing being Secure by Design across all our change and delivery programmes, embarking on threat modelling and giving straight up advice for colleagues on security best practice and our regulatory requirements. If you like a fast-paced ...

Cyber Project Specialist to join its Security Solutions team in the UK. The role supports Secure by Design across change and delivery programmes, offering threat modelling and guidance on security best practices and regulatory requirements. This is a 6 month secondment with hybrid working and a Glasgow-based ...