14 of 14 Permanent Threat Modelling Jobs in Scotland

detection, response, and automation. This pivotal role requires deep expertise in IBM QRadar, with a strong focus on playbook development, analytical rule creation, and threat modelling. The Senior SOC Engineer will play a key role in building and optimising detection and response strategies, ensuring robust protection against evolving threats. … configure, and maintain the QRadar SIEM platform. Onboard and normalise log sources across on-premises and cloud environments. Develop and optimise analytical rules for threat detection, anomaly detection, and behavioural analysis. Playbook Development & Automation Design and implement incident response playbooks for scenarios such as phishing, lateral movement, and data ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through … SAST/DAST tooling, API security, and container security in agile delivery contexts.Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance ...

with software engineering teams to identify vulnerabilities, improve security throughout the SDLC and build secure-by-design solutions. What you'll be doing Conduct threat modelling, risk assessments and security architecture reviews Assess security across cloud and Kubernetes/container environments Embed SAST, DAST, SCA, SBOM and secret … Strong Kubernetes and Docker/container security knowledge Experience integrating SAST, DAST, SCA and security tooling into CI/CD Strong understanding of threat modelling, IAM, cryptography and application security Experience with Go and/or C# development Knowledge of HTTP, REST, TLS and TCP/IP Strong ...

skills, including Docker, Kubernetes, Linux, Terraform, CI/CD pipelines, and GitHub Actions. Strong understanding and practical application of secure software development principles, including threat modelling and vulnerability remediation. Experience designing, deploying, and maintaining scalable, reliable, and secure cloud-native applications Desirable Skills Experience with geospatial technologies ...

adversarial assessments where needed, and translating findings into practical actions. Using your expertise, you’ll design and deploy AI-driven security capabilities such as threat detection, anomaly detection and incident response. You’ll also advise on risk, compliance and regulation, ensuring we continue to meet industry standards … capabilities.Experience with security frameworks and regulations, such as ISO 27001, NIST and UK GDPR. (5+ years exp)Demonstrated experience in conducting risk assessments, threat modelling, and security audits. (5+ years exp)Good communication, project management, and organisational skills, with a high level of attention to detail.Ability to collaborate ...

Consultant Shaping and reviewing security architecture for complex IT and digital platforms Assessing cyber risks and identifying weaknesses early in the design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR ...

architectures and solution designs (e.g. Privileged Access Management, SSO, IDAM, network security, encryption) Understanding of IT infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and/or cloud security experience preferred SABSA/ ...

standards and regulations, including the Cyber Resilience Act (CRA).**Your Responsibilities*** Specify, design, review, and evolve system software security architectures and implementations.* Conduct threat analysis, attack surface analysis, and security risk assessments for embedded systems and software platforms.* Define security requirements and establish traceability from security objectives … software development using C, Rust, and/or assembly language.* Strong understanding of SoC software stacks, middleware, firmware, operating systems, and applications.* Experience with threat modelling, security risk assessment, and secure system design.* Familiarity with security technologies such as: + Secure Boot + Cryptography and Key Management + ...

implementations to identify and remediate security vulnerabilities across the SDLC.Please note Visa sponsorship is not provided for this particular opportunity.ResponsibilitiesSecurity Design and ImplementationPerform threat modeling, risk assessments, audits, and architecture reviews, focusing on Cloud and container environments.Manage Key Management and IAM controls.Support engineering teams by defining security requirements … driving continuous improvement.Cloud & Container Security: Strong knowledge of orchestration (AWS, Azure, GCP, Docker, Kubernetes) and container image vulnerability lifecycles.AppSec & DevSecOps: Deep understanding of threat modeling (STRIDE, PASTA), IAM, cryptography, web/network protocols (HTTP, REST, TLS, TCP/IP), and integrating security tooling (SCA, SAST, DAST) into CI/ ...

cyber domain.Experience working with cyber and security requirements down to the system control level.Experience conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations.This is not an exhaustive list, and we are keen to hear from you even if you might ...

Semiconductors is seeking a Software Security Architect to drive secure product design across embedded platforms. You will architect and review security solutions, perform threat modelling, and ensure compliance with cyber resilience standards throughout the product lifecycle. Ideal candidates have strong background in cybersecurity and secure software architecture, with ...

supporting infrastructure for security risks and design weaknesses.Partner with engineering, cloud, application, and cybersecurity teams to develop secure blockchain architecture patterns and security controls.Conduct threat modeling and security assessments for blockchain platforms, smart contracts, digital asset custody solutions, and supporting services.Define security requirements for cryptographic key management, wallet security … technologies, cryptographic principles, and digital asset ecosystems.Experience assessing the security of smart contracts, blockchain platforms, APIs, and decentralized applications.Knowledge of application security, cloud security, threat modeling, and secure software development practices.Strong analytical, problem-solving, and risk assessment skills.Strong communication and stakeholder management skills with the ability to explain complex ...

practices that are a natural part of how engineers work. We’re creating AI-powered workflows that encode security guidelines, automate the groundwork for threat modeling, and replace manual triage with intelligent pipelines. If you think security policy should run in a pipeline rather than live in a document … encodes guidelines as automated workflows — replacing manual review steps with intelligent pipelines that run in CI/CDTest, assess, and design securelyLead and scale threat modeling across cloud, mobile, and embedded domains, including device-cloud-mobile trust boundariesEstablish repeatable security testing practices using automation and targeted manual assessmentScope ...

Application Security team partners with numerous development teams across the company to incorporate security practices throughout the software development lifecycle.We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define secure development standards and guidelines to safeguard our business … remediate.RESPONSIBILITIESTrack trends in the security community and stay abreast of emerging threats.Provide technical security guidance to developers, team leads and producers.Create and maintain threat models of applications and features to systematically understand how they can be attacked to prioritize control development.Conduct automated and manual security assessments of applications ...