1 to 25 of 39 Threat Modelling Jobs in Central London

/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services and architecture changes. Validate fixes and identify root causes to reduce recurring vulnerabilities. … prioritise and remediate security issues. Hands‐on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting knowledge to understand unfamiliar code and contribute to automation. The confidence to work independently ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps … Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications ...

complex enterprise IT and operational technology environments. Work with technical and solution architects to embed security throughout the design and delivery lifecycle. Apply threat modelling techniques to identify threats and define appropriate security requirements. Provide specialist advice on security risks, threat-based mitigation and system design. Manage … premises architecture and virtualisation Cloud platforms and containerisation Databases and LLM technologies Mobile technologies and application security Security architecture and secure-by-design principles Threat modelling, risk assessment and security requirements Security controls, protective monitoring and IAM Previous experience working specifically as a Security Architect is desirable ...

Architect for remote UK work with Active SC clearance. You will guide security design across delivery and engineering, review designs for compliance, and lead threat modelling and risk assessments. The role focuses on Azure security services and cloud-native controls within regulated government contexts. The position requires strong ...

automation that prevent material weaknesses reaching production Secure the software supply chain through trusted dependencies, SBOMs, artefact signing, provenance and workload identity Lead threat modelling and security design reviews for complex products and platforms Diagnose vulnerabilities and misconfigurations, reduce false positives and work directly with engineers on prevention … application testing, dependency analysis, secrets detection, container and cloud posture tooling Ability to write maintainable code, scripts, integrations and policy-as-code Experience leading threat modelling and resolving complex security design trade-offs Ability to assess emerging AI and agentic engineering practices pragmatically and establish proportionate controls Ability ...

risk within technology projects by ensuring appropriate security requirements, controls, monitoring, and assurance activities are identified, specified, and evidenced throughout the project lifecycle. Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls. Define monitoring … Skills and Experience Strong technical knowledge in at least one of the following areas: Public cloud, Application security, Networking, On-premises infrastructure. Understanding of threat modelling, security controls, and risk analysis principles. Ability to assess risks and recommend proportionate security controls and monitoring measures, rather than relying solely ...

help reduce cyber risk across client technology projects within the UK health, public sector, Defence and Central Government. You will define security requirements, perform threat modelling, and ensure effective controls and monitoring throughout the project lifecycle. You will work on cutting‐edge security challenges and collaborate with ...

applied to architectures, technical decisions, and third-party integrations. Your work will involve maintaining and prioritizing the product’s security backlog, coordinating risk assessments, threat modelling, and vulnerability assessments, and ensuring that required security controls (e.g., access control, encryption, secure configuration) are implemented and evidenced. You will monitor … security by design and by default” across architectures, user stories, technical decisions, and third-party integrations Proficiency in coordinating product-level security risk assessments, threat modelling, and vulnerability assessments, as well as maintaining a prioritized security backlog Experience interpreting and cascading central security policies, standards, and regulatory requirements ...

continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

both technical and non-technical stakeholders. Develop security principles, controls and approaches aligned to client requirements, industry standards and regulatory frameworks. Conduct security assessments, threat and risk assessments, vulnerability assessments and security audits. Advise clients on security controls, emerging technologies and appropriate technical solutions. Work with technology vendors … systems integrator or professional services environment . Strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS . Experience with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM ...

into actionable design controls and implementation guidance. Evaluate emerging technologies, products, and platforms for alignment with enterprise security strategy. Conduct architecture risk assessments and threat modelling to identify potential exposures. Collaborate with infrastructure, application, and data teams to ensure secure solution design and integration. Document and maintain security … across workforce, privileged, service, application and machine identities; identity governance, modern authentication, access lifecycle management, conditional access, PAM/PIM, federation, SSO, MFA, identity threat detection, and zero trust identity control design. AI & Blockchain Architecture: Secure architecture and governance for AI, machine learning, generative AI, agentic solutions, distributed ledger ...

Doing Lead the design and assurance of secure architectures across complex Defence, Government, CNI and mission-critical environments. Define security requirements, threat models, architectural principles and proportionate security controls across the system lifecycle. Identify and manage security risks across high-level and detailed solution designs, providing practical mitigation strategies … Framework (CAF), NIST and ISO 27001 . Experience applying risk-driven security architecture methodologies to complex systems and environments. Strong understanding of security requirements, threat modelling, risk assessment and security controls. The ability to communicate complex technical risks and recommendations to both technical and C-level audiences. Experience ...

Assess and advise on cloud, network, infrastructure and application security controls. Review complex technical solutions against security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments . Provide technical oversight of security testing and penetration testing activities. Support vulnerability management and help teams ...

that span multiple technology domains. Job responsibilities Cultivate a security culture with your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your product across ...

Grafana, Datadog or CloudWatch . Relevant Google Cloud certifications , such as Developer, Solutions Architect or Security. Experience implementing cloud security practices including secure coding, threat modelling, compliance and incident response. Open-source contributions or a strong track record of technical knowledge sharing. Experience leading multi-team initiatives spanning ...

experience of CI/CD, ideally using GitHub Actions, together with Docker and containerised workloads - Sound understanding of monitoring, incident response, backup, disaster recovery, threat modelling and secure software delivery - Experience within fintech, banking, payments, accounting software, payroll or another regulated environment would be advantageous; exposure ...

containerised environments, including network policies. Strong grasp of network security controls: firewalls, WAFs, segmentation, TLS termination and egress filtering. A structured approach to threat modelling and risk assessment, and the ability to explain risk clearly to any audience. Experience in financial services or another regulated environment. Inclusion, Work ...

that integrate seamlessly into CI/CD pipelines. Analyse complex cloud and Kubernetes architectures to identify and document potential attack vectors, mapping them against threat models to prioritise security improvements. Support defensive hardening efforts by providing actionable insights and telemetry from security validation exercises, ensuring continuous improvement of detection ...

financial services experience) Good deep understanding of Generative AI and Agentic security risks such as prompt injection, data poisoning etc. Experience working with either threat modeling, risk assessing or auditing cloud technologies (AWS, Google and Azure), Generative AI/agentic systems and tool integrations (A2A, MCP) Recognized cloud security ...

useful, not mandatory) Enterprise frameworks: TOGAF/Zachman/ArchiMate Integration architecture: APIs, events, microservices, messaging, security boundaries. Data architecture familiarity: Fabric, data governance, modelling, quality & lineage. Security‐by‐design: IAM, encryption, threat modelling, compliance. Cloud architecture familiarity: Azure, identity, security, cost optimisation. What Chanel can offer ...

enterprise-wide technical strategies Strong knowledge of: Cloud technologies Serverless architectures DevOps practices CI/CD pipelines Test-driven development (TDD) Security architecture and threat modelling Experience working within Agile, multidisciplinary environments Excellent stakeholder engagement and influencing skills Ability to translate complex technical concepts into clear business-focused ...

reports against security risks to protect data, applications, and infrastructure using modern tools Uses enterprise-authorized AI capabilities within the work environment to accelerate threat modeling, control review analysis, and security documentation, validating outputs and handling data according to sensitivity and security requirements. Conducts reviews on existing security controls ...

International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy … Code Leadership - Champion Infrastructure as Code (IaC) and Security-as-Code practices, including policy enforcement, security linting, and automated compliance validation across cloud environments. Threat Modeling & Architecture Reviews - Lead advanced threat modeling (e.g., STRIDE-LM) for pipelines, microservices, and cloud-native applications, and conduct architecture reviews to drive ...

identification and analysis of web application security vulnerabilities - Oversee daily management of application security platforms to maintain coverage, compliance and remediation of findings - Conduct threat modelling and review application architectures - Implement application security controls and proactive measures to prevent security incidents - Implement and manage SAST/SCA tooling ...