14 of 14 Threat Modelling Jobs in Cambridgeshire

that process. This role exists to embed security expertise directly into how our engineering teams build and ship software: setting the standards, running the threat modelling, and making the judgement calls that keep pace with delivery instead of slowing it down. About Redgate Redgate brings together people … scanner tells you. It's a role built on trust: teams will come to you for guidance, and the judgement you bring to triage, threat modelling, and governance decisions will shape how security actually gets done here. Partner directly with engineering and product teams to define and operationalise ...

software and product development lifecycle. Key Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation activities. Advise on secure design, cloud security, mobile security, authentication, encryption … Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience supporting audits, regulatory reviews or compliance ...

What You'll Be Doing Owning the software security strategy and roadmap across the product line Defining security architecture, standards and best practices Embedding threat modelling and security requirements into product development Working closely with software and product teams to drive secure-by-design principles Leading architecture reviews … maturity across the organisation What We're Looking For You'll likely bring experience in: Security Architecture Product Security Secure Software Development Lifecycle (SDLC) Threat Modelling Vulnerability Management Security Testing & Assurance Secure CI/CD Pipelines Risk Assessment & Security Governance Software Architecture and Engineering Leadership Desirable Experience Embedded ...

clear options and recommendations. Define what good looks like through measurable controls, assurance evidence and acceptance criteria. Embed security into deliveryIntegrate security requirements and threat modelling into product planning, architecture, design and backlog refinement. Establish proportionate security gates across implementation, code review, build, test, release and maintenance activities. … platforms. Strong software architecture and engineering background, with practical experience delivering security controls in complex products. Deep understanding of secure development lifecycle practices, threat modelling, secure design, vulnerability management and security testing. Experience embedding automated security controls and evidence into build, test and CI/CD workflows. Ability ...

pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier Engagement Support V&V, penetration testing, and remediation, and manage security alignment with suppliers. Compliance & Documentation Own the security compliance dossier … hardware engineering with at least 5 years focused on cybersecurity for embedded systems, IoT, or cloud platforms. Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products. Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security ...

roles. Proven experience delivering security assurance within Operational Technology (OT) environments. Strong understanding and practical application of the IEC 62443 standards framework. Experience undertaking threat analysis, risk assessments, and security control definition. Knowledge of security architecture principles, including network segmentation, zones, and conduits. Experience defining and managing security requirements … Security Management Plans, ensuring delivery against agreed timescales, budgets, and quality expectations. Develop secure architectures using zoning, segmentation, and defence-in-depth principles. Conduct threat modelling, security risk assessments, and define effective mitigation strategies. Assess third-party products and components against security requirements and standards. Review engineering ...

engineering teams follow across the organisation. What You'll Do Define end-to-end system architectures aligned to business goals, run architecture reviews and threat modelling sessions, and own the technical roadmap across multiple product domains. Lead service decomposition using Domain-Driven Design - defining bounded contexts, inter-service ...

Cloud Platform, helping shape the security foundations from day one and working closely with architects and engineers to build security into the platform. Lead threat modelling across the platform, identifying realistic attack paths and turning them into practical security requirements, controls and actions that engineering teams can implement. ...

ENISA, UK PSTI, BSI, NIS2 and OpenSSF. We're looking for experience with Security Development Lifecycles and product security assurance, including requirements management, threat modelling, security testing and incident response. The ability to interpret legal and regulatory text and translate it into actionable technical and engineering requirements ...

UK. You will shape security foundations from day one and work closely with architects and engineers to embed security into the platform. Lead threat modelling across the platform, translating attack paths into practical security requirements and controls for engineering teams to implement. #J-18808-Ljbffr ...

Redgate is seeking a security professional to embed security expertise across its product teams, guiding threat modelling, governance, and secure SDLC practices. You will define security requirements, lead governance, and drive SAST/DAST adoption while supporting AI-related security initiatives and cloud-native security across the engineering ...

Redgate is seeking a senior security engineer to embed security deeply into our product teams, defining requirements across the SDLC and leading threat modelling for new features. You’ll influence architecture, guardrails, and secure-by-default patterns, balancing risk with delivery velocity. Work across engineering and product squads ...

supply-chain considerations and contributions to, or practical use of, open-source software projects and ecosystems. Knowledge of cryptographic principles, secure software development, or threat modelling. Exposure to Agile development methodologies and scaled product-development environments. Here is what you can expect when you join our team Career Growth ...

solutions! In this role, you’ll evaluate system security architectures, dive into firmware code for review, contribute to ROM assessments, and perform hands‐on threat modeling and lightweight testing. This is a fantastic opportunity for someone who loves solving complex security challenges, enjoys collaborating with brilliant minds across domains … empowering others to do the same, we’d love to hear from you! Responsibilities: Review firmware and SoC architecture for security risks and threat models. Evaluate critical security features like secure boot, rollback protection, memory isolation, and TEE. Perform C/C++ security code reviews to spot implementation‐level ...