1 to 25 of 42 Permanent Threat Modelling Jobs in the South East

Senior Threat Modelling & Application Security Engineer Day rate: Up to £450 - £500 (Inside IR35) Location: London/Hybrid - 4 days a week onsite Duration: 6 months (Initial) A major organsiation is seeking a Senior Threat Modelling & Application Security Engineer to help drive secure-by-design practices … across cloud and application environments. Key Responsibilities Conduct threat modelling using STRIDE, PASTA, ATT&CK and Attack Trees. Identify vulnerabilities and define mitigating security controls. Review technical architectures and support secure SDLC processes. Develop security automation tooling and Python-based applications. Partner with engineering teams to embed security ...

recruiting Threat Modelling Associates to join our client, one of the big four. You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences. Role: Threat Modeling Day rate: £450 – 500 per day (inside IR35) Pay framework: Umbrella Company Start date: ASAP Contract duration … months initially (with scope to extend) Location: Hybrid – 4 days a week in London office, 1 day working from home. Key Responsibilities Threat Modeling using a documented process. Development of automation tools as required. Maintain a high standard of work in identifying threats and specifying mitigating controls. Attending ...

credential rotation and secure Key Vault practices Strengthening software supply-chain security through SBOM generation, dependency scanning and artefact signing Supporting API security testing, threat modelling and third-party penetration tests Configuring Azure-native security tooling, including Defender for Cloud, Azure Policy, Sentinel and Azure Monitor Enforcing identity … remediation tooling The confidence to work independently, make risk-based decisions and support junior engineers Experience with Docker, Kubernetes/AKS, API security testing, threat modelling, SIEM tooling or software supply-chain security would be particularly useful. Relevant certifications such as AZ-500, AZ-400, Security+, CySA+ ...

engineering within a regulated environment, with expertise in enabling the secure adoption of emerging technologies, including AI. Deep understanding of AI security risks and threat patterns. In depth knowledge of security architecture and control design for cloud, data and AI-enabled platforms. Experience designing security framework and patterns … secure adoption of AI. Experience defining assurance evidence, go-live criteria and governance inputs for AI or high-risk technology initiatives, including threat modelling, secure design review and conversion of risk into actionable delivery requirements aligned to organisational risk appetite. Experience with relevant AI security, risk and governance ...

Develop security and policy-as-code capabilities using tools such as OPA. Help secure cloud and data platforms, including Databricks, Dagster and Snowflake. Support threat modelling and ISO 27001 activities. Operate and improve application security services and tooling. Work directly with developers to identify and remediate vulnerabilities. About … with KQL advantageous. Experience securing GitHub/GitHub Actions, Kubernetes and APIs. Strong knowledge of application security testing and vulnerability management. Experience with DevSecOps, threat modelling and security automation. Knowledge of ISO 27001. Strong cloud security knowledge Azure (Preferred) If you’re looking for a role where ...

Lead the design and implementation of advanced application security measures, including encryption, secure APIs, and identity management. Conduct in-depth threat modelling and risk assessments to identify and mitigate potential security risks. Performing manual security assessments including code reviews. Act as a Subject Matter Expert (SME) for security … best practices, ensuring that the team remains proactive in its approach to security. Extensive experience in application security, including expertise in secure coding practices, threat modelling, vulnerability assessments, and incident response. Hands‐on experience with security testing tools (SAST, DAST) and their integration into development pipelines. Strong understanding ...

operating models that enable the safe deployment and use of AI solutions across complex business environments. . This role focuses on AI security assessments, threat modelling, governance frameworks, security controls, secure integrations and identifying AI-specific security risks . Please only apply if you have the right … work in the UK, as visa sponsorship is not available. You will be responsible for Conducting security assessments of AI solutions, including threat modelling. Developing governance frameworks, security standards and best practice for AI adoption. Designing controls for identity, access management, auditability and human oversight. Supporting the implementation ...

standards, reference architectures, control patterns and assessment methodologies for AI models, LLM and agentic AI systems and AI development platforms. Lead security architecture reviews, threat modelling and technical assurance for high-risk AI systems, products and material changes. Establish and improve model-assurance requirements for third-party … security initiatives from assessment and design through implementation, validation and operational handover, with measurable adoption and risk-reduction outcomes. Experience leading security architecture reviews, threat modelling and remediation through the software or product development lifecycle. Strong understanding of AI security threats and mitigations. Experience designing or assessing security ...

architectures and control patterns for AI agents, including identity, permissions, tool use, data access, memory, human oversight, logging and containment. Lead security risk assessments, threat modelling and assurance reviews for high-risk agentic AI use cases, platforms and material design changes. Develop and apply test scenarios for agentic … meetings and collaboration. Qualifications: Demonstrated experience delivering security controls from design through implementation, validation and operational handover across cross-functional engineering teams. Experience with threat modelling, security assessment and remediation for applications, cloud services, APIs or AI-enabled systems. Strong understanding of agentic AI security risks and controls ...

experience in several of the following: Systems and operating systems: OS architecture, systems engineering and platform security, ideally with significant Linux experience. Security architecture: threat modelling, security boundaries, attack surfaces, hardening and secure-by-design principles. Networking: TCP/IP, DNS, routing, segmentation, firewalls, TLS, VPNs and secure … equally interested in exceptional architects from adjacent technical disciplines with the right systems and security expertise. Additional Responsibilities You'll lead or contribute to threat modelling and architectural risk assessments, promoting good practice around system hardening, trust, PKI, cryptography and network security. You'll contribute to secure development ...

looking for a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, helping protect the systems that deliver essential water services to millions of customers every day. You'll play a key role in identifying, assessing, and reducing cyber risk across a large and complex technology estate, making … closely with technical teams and business stakeholders to keep our services safe, resilient, and running smoothly. What you'll be doing as a Cyber Threat & Vulnerability Analyst: As a Cyber Threat & Vulnerability Analyst, you'll be responsible for supporting and improving how we identify, assess, and manage cyber ...

such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001 or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments and architecture reviews. Strong troubleshooting, documentation and cross-functional communication skills. Personal Strong team player with excellent communication skills. ...

network, application, data and endpoint layers Lead security architecture reviews and technical security assessments Design zero-trust security models and continuous verification frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations Design security solutions supporting Information Security Management System (ISMS) compliance Architect compliance and audit ...

security solutions across network, application, data and endpoint layersLead security architecture reviews and technical security assessmentsDesign zero-trust security models and continuous verification frameworksCyber Threat & Risk ManagementAssess cyber threat landscape and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat … complianceArchitect compliance and audit capabilities for regulatory reportingLead security standards implementation and controls frameworksSecurity Solutions & IntegrationArchitect endpoint protection, data loss prevention (DLP) and advanced threat protection solutionsDesign cloud security architectures supporting hybrid and multi-cloud environmentsArchitect application security, API security and secure SDLC integrationDesign security operations centre (SOC) capabilities ...

scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy as Code and threat modelling. A proactive, curious and collaborative approach, with the ability to guide engineering teams, support third-party supply chain security and make complex topics ...

critical operations. Your work may include: Deploy, and maintain secure infrastructure within Kubernetes environments Administer and maintain Splunk for log aggregation, monitoring, alerting, and threat detection Operate and manage Nessus for vulnerability scanning, reporting, and remediation tracking Integrate security tools into CI/CD pipelines and cloud-native workflows … Scripting or automation skills (e.g. Python, Bash, or similar) Understanding of security frameworks and best practices Knowledge of configuring SIEM tooling. Basic understanding of threat frameworks, such as ATT&CK. Experience with additional SIEM or observability platforms Experience with Microsoft Defender Experience with DevSecOps practices and pipeline security Certifications ...

are7+ years' experience in cyber security roles, with strong architecture focusProven experience delivering complex, cross domain Network security architecturesStrong understanding of security risks, threat modelling, and mitigating controlsHands on experience securing systems detailed in the "Scope of Technology" section aboveDeep knowledge of containerised, virtualised and hybrid infrastructureStrong knowledge ...

needs to product leadership and engineers Broad experience with information, system, and network security concepts and components Demonstrated experience with architecture and security reviews, threat modeling applications and identifying areas of risk Experience implementing strategies to support secure and compliant architectures Deep understanding of the OWASP Top 10 application ...

Assurance Coordinator Role. Proven ability to deliver security artefacts including Security Management Plans, Risk Registers and Risk Assessments, Security Requirements Documents, Security Aspects Letters, Threat Models and Vulnerability Assessments, Security Architecture Documents, Compliance & Audit Reports, and Incident & Recovery Plans. Experience in the assurance or implementation of information or cybersecurity ...

patterns. This will include areas such as LLMs, RAG, AI agents, vector databases, prompt injection, data leakage, identity, tool/API integration and AI threat modelling, alongside broader cloud and enterprise security architecture. The successful candidate will have a strong security architecture background combined with genuine AI/ ...

Experience Cloud security testing exposure (particularly Azure). Vulnerability management tooling such as Tenable, Pentera or similar. Experience with SSDLC, SAST and DAST processes. Threat modelling experience. Security certifications such as OSCP, CEH, CISSP, CREST or equivalent technical certifications. Equivalent certifications will be considered. Why This Role ...

deliver security artefacts such as, but not limited to, Security Management Plans, Risk Registers and Risk Assessments, Security Requirements Documents, Security Aspects Letters, Threat Models and Vulnerability Assessments, Security Architecture Documents, Compliance & Audit Reports, and Incident & Recovery Plans Experience in the assurance or implementation of information or cybersecurity management ...

Security Penetration Tester , you will be responsible for supporting the design, implementation, and maintenance of TVM (Threat & Vulnerability Management) solutions, controls and processes across the organisation. You will be liaising with Digital teams to ensure appropriate mitigation and remediation of vulnerabilities detected across our IT estate. This role requires … actions. Liaise and coordinate with technology and business stakeholders in relation to cyber security patching and vulnerability management issues/actions. Maintain a cyber threat assessment methodology, align to evolving industry standards and integrate into BAU and project-based business processes. Support with proactive threat hunting ...

environments. Produce and review high-level security designs covering network security, segmentation, multi-tenancy, virtualisation, containers, encryption, key and secrets management, AI runtime and threat modelling. Design IAM solutions, including identity providers, SSO, RBAC and MFA. Define SIEM/SOAR architecture and detailed designs for logging, correlation, playbooks … SIEM/SOAR Key Experience: Strong Security Architecture experience within complex enterprise environments Experience across network security, IAM, SIEM/SOAR and threat modelling Strong understanding of EPP, DLP, encryption, containers and cloud or infrastructure security Ability to produce high-level and detailed technical designs If this sounds ...

cloud security initiatives. Required Experience Hands-on experience with HackerOne or similar bug bounty platforms. Strong web application security knowledge (OWASP Top 10, ASVS, threat modelling). Experience building security tooling and automation. Familiarity with security testing tools such as Burp Suite. Exposure to incident response and application ...