15 of 15 Part-Time Threat Modelling Jobs in the UK

IT Cyber Security Analyst Ref: YC46941 A highly successful IT and telecommunications services company is currently recruiting an IT Cyber Security Analyst (Threat Intelligence Analyst) to work at their clients site in London. In this role, you will be responsible for identifying, analysing, and communicating cyber threats to support proactive defence strategies. The ideal candidate should have expertise in … threat intelligence analysis, collaboration across teams, familiarity with security tools, and strong analytical skills. ELIGIBLE APPLICANTS: (O) Eligible visa: Permanent residence, Spouse, Partner, Working holiday, Graduate (X) NOT eligible: Student visa, Requiring visa sponsorship, WORK TYPE: office-based VISA SUPPORT: No TYPE: 6 months rolling contract, full-time WORKING HOURS: Mon-Fri 9:00-17:00 SALARY: up to … 54k, depending on experience START: Nov-Dec 2025 LOCATION: London (office-based) Cyber Security Analyst Main Responsibilities: Monitor and analyse the global threat landscape to identify emerging risks, adversary tactics, and trends relevant to the organization's business and technology environment Collaborate with Red Team, Blue Team, and Penetration Testing teams to integrate threat intelligence into testing scenarios More ❯

IT Cyber Security Analyst Ref: YC46941 A highly successful IT and telecommunications services company is currently recruiting an IT Cyber Security Analyst (Threat Intelligence Analyst) to work at their clients site in London. In this role, you will be responsible for identifying, analysing, and communicating cyber threats to support proactive defence strategies. The ideal candidate should have expertise in … threat intelligence analysis, collaboration across teams, familiarity with security tools, and strong analytical skills. ELIGIBLE APPLICANTS: (O) Eligible visa: Permanent residence, Spouse, Partner, Working holiday, Graduate (X) NOT eligible: Student visa, Requiring visa sponsorship, WORK TYPE: office-based VISA SUPPORT: No TYPE: 6 months rolling contract, full-time WORKING HOURS: Mon-Fri 9:00-17:00 SALARY: up to … 54k, depending on experience START: Nov-Dec 2025 LOCATION: London (office-based) Cyber Security Analyst Main Responsibilities: Monitor and analyse the global threat landscape to identify emerging risks, adversary tactics, and trends relevant to the organization's business and technology environment Collaborate with Red Team, Blue Team, and Penetration Testing teams to integrate threat intelligence into testing scenarios More ❯

You will champion secure development practices throughout the software development lifecycle, with a strong emphasis on 'shift-left' principles to embed security early in the process. You will facilitate threat modelling workshops to help product teams identify, assess, and mitigate potential threats. You will also collaborate closely with other functions within the CISO organisation, including Application Security, Offensive … daily significant change to complex Cloud serverless transformation projects. You will have the ability to work with infrastructure as code and understand complex architectures. You will Lead/facilitate threat modelling workshops with SMEs. Engage with key stakeholders to identify threats and recommend countermeasures. Participate in architectural reviews of Product cloud implementations against security best practice, relevant threats … security principles, practices, and frameworks, such as OWASP, NIST, and ISO. Awareness of security tools and technologies, such as SAST, DAST, IAST, SCA, WAF, IDS, IPS. Experience in conducting threat modelling and risk assessments. Interview process The interview process for this role is two stages including a technical competency-based question and a task. Working Schedule This role More ❯

AWS and Azure native security controls such as IAM, GuardDuty, Key Vault, and Security Hub Manage endpoint protection and EDR/XDR tooling, ensuring consistent configuration and real-time threat visibility Oversee firewall, VPN, and intrusion prevention configurations to maintain secure network boundaries Support certificate and key management following encryption and PKI best practices Vulnerability, Threat, and Risk … Management Automate vulnerability scanning and penetration testing using tools (Qualys, Nessus, OpenVAS) and custom scripts Coordinate third-party penetration tests and track remediation actions Conduct ongoing threat modelling, patch management, and risk assessments Perform regular configuration reviews, compliance checks, and security health audits across all systems Maintain awareness of emerging threats and advise on appropriate mitigations Incident Detection More ❯

embedding security into CI/CD pipelines and secure code practices Proven experience presenting security solutions to CISOs, IT Directors, and senior stakeholders Knowledge of OWASP Top 10, cryptography, threat modeling, and secure coding principles Certifications: CISSP (required), Azure Security Engineer/GCP Security Engineer/AWS Security Specialty (preferred), CISM, CCSP, OSCP (desirable) Nice-to-Haves Infrastructure-as More ❯

security best practices. Embed security controls, monitoring, and automation across the SDLC. Collaborate with software engineers, QA, and product teams to ensure secure design and deployment. Conduct vulnerability assessments, threat modelling, and risk mitigation. Support compliance requirements in highly regulated environments. Essential Skills & Experience Proven experience working as a Security Architect or DevSecOps Engineer in a cloud-first More ❯

in customer-facing Security Architecture/Consulting roles, presenting to Senior Stakeholders Experience in the telecommunications sector (ideally on a global scale), working to GSMA standards Advanced Security Architecture & Threat Modeling Vulnerability management Penetration testing & exploitation Cloud security (AWS, Azure, GCP) and container security (Docker, Kubernetes) Network security (firewalls, SIEM, IDS/IPS, packet analysis) Secure software development & code More ❯

Design principles, de-risk complex change, and simplify security. Key Responsibilities Deliver expert cyber consultancy across digital product lifecycles Drive Secure by Design and privacy by default principles Lead threat modelling, translating findings into actionable design guidance Define secure architecture for modern cloud platforms Guide teams on secure coding, reviews and best practice Support incident response and foster More ❯

you be doing? Manage security controls across on prem and AWS environments. Lead incident response, vulnerability assessments and pentest co-ordination. Manage IAM systems and support Engineering teams with threat modelling and secure development practices. Own ISO27001, Cyber Essentials+, PCI-DSS and GDPR compliance. Manage physical security (access control etc) What experience do you need? 2+ years experience More ❯

Mobile Security Engineer Location - Bristol, UK (Hybrid - 3days Onsite) Inside IR35 Contract ( 6months to start with) Banking sector Project Skills Required - Experience of Mobile platform security, threat modelling and mitigation techniques Capable of conducting regular reviews of our mobile application security posture using your hands-on experience. Develop and maintain pen-testing security tools, scripts, policies and procedures More ❯

Expectation Experience of Mobile platform security, threat modelling and mitigation techniques Capable of conducting regular reviews of our mobile application security posture using your hands-on experience. Develop and maintain pen-testing security tools, scripts, policies and procedures In depth knowledge of mobile app security standards (Android/iOS) Job Summary To play a pivotal role in designing More ❯

for cloud infrastructure (primarily AWS), including automation for configuration scanning and remediation. Act as a subject matter expert on cloud security within engineering, providing guidance during design reviews and threat modelling sessions. Harden Kubernetes environments and enforce secure cluster configurations. Secure and manage infrastructure using Infrastructure-as-Code, with a focus on Terraform. Senior Security Engineer, Cloud Requirements More ❯

currently seeking a DeFi Security Engineer for their London office. This role focuses on supporting the security of their Crypto trading infrastructure and OTC platform Responsibilities: Conduct vulnerability assessments, threat modeling, and penetration testing across infrastructure, smart contracts, and OTC-specific components Lead system hardening, network segmentation, identity management, and rapid incident response for DeFi and OTC environments Investigate More ❯

of multi-AD/AZ and regional data centers FedRAMP, PCI DSS, or similar compliance and auditing experience Experience and detailed technical knowledge in PaaS engineering. Expertise in applying threat modeling or other risk identification techniques to develop security solutions Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race More ❯

initiative. Key Responsibilities: Define and maintain security architecture for service mesh deployments across Kubernetes and containerised platforms. Conduct risk assessments and develop mitigation strategies for identified vulnerabilities. Create detailed threat models aligned to MITRE ATT&CK and STRIDE frameworks. Design and review secure API gateway patterns using IBM DataPower. Lead implementation of Zero-Trust , mTLS, RBAC and policy enforcement … cryptography and secure communication protocols. Experience designing secure architectures for hybrid/multi-cloud environments. Strong background in Zero-Trust , microservices security, and containerised platforms. Experienced in building bespoke threat models using MITRE ATT&CK & STRIDE . Ability to assess security elements of solution designs, constructively challenge, and drive secure outcomes. If you are interested or would like to More ❯