18 of 18 Permanent Threat Modelling Jobs in the South West

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

technical evaluations of supplier cybersecurity posture, control maturity, and architectural resilience, particularly for the firm's most critical and complex third-party relationships. Perform threat modelling against supplier environments to identify potential security risks and develop mitigation strategies tailored to the firm's risk appetite. Evaluate supplier security … credible challenge and expert advisory input. Drive the evolution of the third-party assurance methodology by embedding deeper technical assessment capabilities, including architecture reviews, threat modelling, and cloud security posture evaluation. Translate complex technical cybersecurity risks and supplier control deficiencies into clear, actionable, business-relevant insights for senior ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

lifecycle while advancing your own career in a highly complex and rewarding environment. Leading secure by design assurance activities across complex programmesConducting threat modelling and cyber risk assessments using recognised frameworksDeveloping risk treatment plans and implementing mitigation strategiesProducing technical security evidence including risk assessments and vulnerability analysisSupporting programme … Devonport Royal Dockyard. Essential experience of the Cyber Security LeadStrong experience delivering secure by design or cyber security assurance activitiesProven ability to conduct threat modelling and risk assessmentsIn-depth knowledge of cyber security frameworks such as NIST, ISO 27001, and ISO 27005Experience influencing multidisciplinary teams including engineering ...

native security controls. Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation. Knowledge of SSDLC practices and threat modelling. Ability to review cloud architectures and technical designs from a security perspective. Understanding of authentication and authorization patterns. Strong communication and collaboration skills ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement Design and maintain AI‐assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, networking access, observability, workload isolation, and third‐party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer‐facing guidance for safe use of AI coding assistants, AI APIs ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

across our software development lifecyclehelping us embed security directly into our code and architecture while exploring next-generation defensive strategies like AI/LLM threat modeling. Unlike security roles where youre isolated or acting as a gatekeeper, here youll be a genuine security champion. Youll partner closely with engineering … DevSecOps practices, and mentor developers to build naturally resilient systems. As one of our Application Security Engineers, youll: Provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation. Promote a security-first mindset across development teams, acting as a supportive technical mentor. Integrate security assessments ...

cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities and remedial action plans. Coordinating with product ...

cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities and remedial action plans. Coordinating with product ...

work across security controls, risk management, and zero-trust principles in a hybrid London-based environment. You will engage with public sector projects, perform threat modelling, define security policies and support secure procurement and supplier assessments, while growing through broad exposure #J-18808-Ljbffr ...

haves: Experience in embedded software, firmware or controller development for heat pumps, HVAC systems or other connected products. Knowledge of secure development practices, including threat modelling, vulnerability management and penetration testing. Experience with secure communications, authentication, access control and software-update mechanisms. Familiarity with requirements traceability, configuration management ...

C++. Awareness of key architectural patterns/approaches, algorithms, data structures, cryptography, security protocols (e.g., TLS and OAuth/OIDC), secure system design and Threat Modelling. Certified Kubernetes and public cloud knowledge (e.g. CKAD and AWS certifications). #J-18808-Ljbffr ...

. Experience working with cyber and security requirements down to the system control level. Experience conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigation's. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers ...

Economics, Philosophy, or a STEM subject, or equivalent practical experience. 3 years of research experience in frontier AI safety or governance (e.g., in threat modeling, safety frameworks, or dangerous capability/alignment evaluations). Preferred qualifications: Ability to communicate complex technical topics to leads, governance bodies and policy experts. ...

daily with software developers, testers and product owners to ensure secure design, code quality and dependable delivery. The role combines hands-on engineering with threat modelling, risk assessment and secure delivery practices to elevate our security posture. #J-18808-Ljbffr ...

premises and cloud environments. You report to the Employee Platforms Tech & Cyber Operational Risk Officer. Key activities include conducting technical risk assessments; reviewing threat models for critical systems and third‐party solutions; identifying and driving mitigation of control gaps; collaborating with stakeholders and technology teams to ensure compliance with … oversight and risk assessments of Employee Platforms. Monitor and assess significant events where technology is a factor, including external incidents driven by third parties, threat actors, and technology change failure. Understand and utilise trends and toolsets within AI/LLM platforms to assist and streamline assessments in order ...

premises and cloud environments. You report to the Employee Platforms Tech & Cyber Operational Risk Officer. Key activities include conducting technical risk assessments; reviewing threat models for critical systems and third‐party solutions; identifying and driving mitigation of control gaps; collaborating with stakeholders and technology teams to ensure compliance with … oversight and risk assessments of Employee Platforms. Monitor and assess significant events where technology is a factor, including external incidents driven by third parties, threat actors, and technology change failure. Understand and utilise trends and toolsets within AI/LLM platforms to assist and streamline assessments in order ...