20 of 20 Permanent Threat Modelling Jobs in the South West

edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security assurance is woven into everyday engineering work — from threat modelling at design time to control testing in production. You'll build trusted relationships with client security teams, senior stakeholders, and government security communities … report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles — making security a shared engineering responsibility rather than ...

edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security assurance is woven into everyday engineering work - from threat modelling at design time to control testing in production. You'll build trusted relationships with client security teams, senior stakeholders, and government security communities … report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles - making security a shared engineering responsibility rather than ...

Regulations - feeding posture data into governance and risk reporting rather than treating it as a point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme … structuring reports around the decisions people need to make, not just the controls you've tested. Embed security as a continuous engineering concern , supporting threat modelling and security reviews throughout delivery, challenging designs that create unnecessary risk, and mentoring colleagues on secure-by-default practices. Support and assess ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

networks, communications and mission-supporting systems. Provide security input into formal engineering design reviews, including SRR, PDR, CDR and equivalent programme governance gates. Conduct threat modelling and risk assessment activity across ship systems, platform services, navigation, propulsion, communications, IT, OT and associated support environments. Define and assure network … assurance or risk management frameworks. Experience supporting security accreditation, assurance, compliance or certification activities in a UK defence or similarly regulated environment. Experience conducting threat modelling, security risk assessment and security requirements definition. Experience supporting FAT, integration testing, harbour trials, sea trials, or equivalent technical acceptance activities from ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

Responsibilities of a Cloud Security Specialist Design secure AWS architectures, patterns and security controls Apply security, regulatory and compliance requirements to cloud environments Conduct threat modelling and risk assessments across AWS workloads Support large-scale cloud migration and transformation projects Collaborate with architects, engineers and cyber security teams ...

applying a holistic approach to shape secure solutions that support strategic objectives. Key responsibilities Develop and manage the security vision, architecture specifications, architecture analysis, threat modelling, requirements, standards, design patterns, reference architectures, strategies and roadmaps Apply security design principles to produce practical security architectures Lead security engagement with ...

architectures and solution designs (e.g. Privileged Access Management, SSO, IDAM, network security, encryption) Understanding of IT infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and/or cloud security experience preferred SABSA/ ...

SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance outcomes Lead threat modelling, risk identification, and mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance ...

cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities and remedial action plans. Coordinating with product ...

order to prevent, or limit future reoccurrence in collaboration with the Incident Response (IR) Team Have an understanding of Incident Response, Cyber Kill Chain, Threat Modelling and pertinent Attack Vectors Have a collaborative working ethos in order to work across the team in order to create pertinent Playbooks … SIEM and IDS rules to reduce false positives and maintain good security alerting. Creation of reporting for management and clients on security incidents and threat intelligence trends. What you ll bring Be able to excellently communicate at all levels, working with customers is a must, so we need ...

Consultant Shaping and reviewing security architecture for complex IT and digital platforms Assessing cyber risks and identifying weaknesses early in the design process Supporting threat modelling activities and translating findings into clear risk statements Advising teams on compliance with standards such as ISO 27001, NIST, GDPR ...

cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities and remedial action plans. Coordinating with product ...

work across security controls, risk management, and zero-trust principles in a hybrid London-based environment. You will engage with public sector projects, perform threat modelling, define security policies and support secure procurement and supplier assessments, while growing through broad exposure #J-18808-Ljbffr ...

cybersecurity principles and risk management Experience applying security technologies to architectures and solution designs Understanding of IT infrastructure, technical concepts, and design methodologies Understand threat modelling and development of reference architecture Preferred hands-on experience in Network and/or Cloud security Reasonable Adjustments: Respect and equality ...

C++. Awareness of key architectural patterns/approaches, algorithms, data structures, cryptography, security protocols (e.g., TLS and OAuth/OIDC), secure system design and Threat Modelling. Certified Kubernetes and public cloud knowledge (e.g. CKAD and AWS certifications). #J-18808-Ljbffr ...

into design, production, and delivery, building trusted relationships with client security teams and senior leaders. You will establish assurance frameworks, mentor colleagues, and drive threat modelling, vulnerability management, and policy adoption at scale within #J-18808-Ljbffr ...

multi-risk-stripe review strategy and focus on cloud services, third-party tech, and governance across on-prem and cloud environments. You will review threat models, identify control gaps, and collaborate with stakeholders to ensure compliance with policy and regulatory standards. #J-18808-Ljbffr ...

premises and cloud environments. You report to the Employee Platforms Tech & Cyber Operational Risk Officer. Key activities include conducting technical risk assessments; reviewing threat models for critical systems and third‐party solutions; identifying and driving mitigation of control gaps; collaborating with stakeholders and technology teams to ensure compliance with … oversight and risk assessments of Employee Platforms. Monitor and assess significant events where technology is a factor, including external incidents driven by third parties, threat actors, and technology change failure. Understand and utilise trends and toolsets within AI/LLM platforms to assist and streamline assessments in order ...