1 to 25 of 74 Threat Modelling Jobs in England

misconfiguration management so that findings are actionable, low-noise and owned by the right teams. Day to day, you’ll run practical threat-modelling sessions, review application and cloud designs, improve security playbooks, support vulnerability and misconfiguration remediation, and build automation that reduces toil. We’re looking … misconfiguration & vulnerability management: experience identifying and reducing infrastructure-as-code and AWS vulnerabilities & misconfigurations at scale through pragmatic guardrails, tooling and clear remediation paths. Threat modelling: confidence running lightweight, practical threat-modelling sessions that lead to useful engineering decisions and risk reduction. CI/ ...

Security Engineer/Security Consultant (Application Security & Threat Modelling) Rate - £550 - £650 Outside IR35 Duration - 6 months initial Location - Bristol/London (once a week/remote) Role overview: A leading Financial Services is seeking an experienced Security Engineering Consultant on a contract basis. The successful candidate will … embedded within engineering tribes, providing security consultancy and guidance to development teams throughout the software development lifecycle. The primary focus of the role is threat modelling. The consultant will conduct threat models for new and existing products, identify risks at the design stage and work with developers ...

coding guidance so that security findings are clear, actionable and owned by the right teams. You’ll work closely with engineers to support practical threat modelling, triage application vulnerabilities, improve security playbooks and help teams remediate issues in a pragmatic way. You do not need … code security awareness: familiarity with security tooling in development workflows, such as SAST, software composition analysis, secret scanning or repository security controls. Threat modelling awareness: experience participating in, supporting or facilitating lightweight threat-modelling sessions for applications, services or new features. Automation mindset: ability to write ...

embedded from the earliest stages of delivery. Working across both enterprise IT and Operational Technology (OT) environments, you'll provide expert guidance, lead threat modelling activities and define security standards that protect critical services relied upon by millions of customers. What you'll be doing As Security Architect … security architecture principles, standards, reference models and reusable design patterns. Review and approve solution architectures, high-level designs and significant design decisions. Facilitate threat modelling workshops using methodologies including STRIDE, attack trees and kill-chain analysis. Ensure threats, risks, abuse cases and security requirements are identified, documented ...

influence across Digital, Global Business Systems, cloud platforms, APIs, integrations, and customer-facing applications. The role combines technical leadership, application security expertise, engineering engagement, threat modelling, secure-by-design governance, and application security posture management. Responsibilities Lead the RX Application Security programme, defining and maintaining strategy, roadmap, standards … controls, and security maturity objectives. Drive adoption of Secure by Design principles by embedding security throughout the Secure Development Lifecycle (SDLC), including threat modelling and security architecture reviews. Own and mature the Application Security Posture Management capability, including management and optimisation of Aikido and related security tooling. Develop ...

security threats and risks that may need review. Assist in risk assessment/acceptance/remediation processes Develop and mature the Incident Response and Threat hunting capabilities. Implementation of Incident Response frameworks/methodologies such as Kill Chain, MITRE, Threat Modelling, Diamond Model. Development of Threat … work day may sometimes be needed. Qualifications, Skills, and Experience Relevant experience in an Incident Response and Security Monitoring; Relevant experience in working with threat modelling frameworks. Experience in finding, analysing, and extracting attack related payload from packet captures and host forensics images. Experience in a banking, investment ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

software and product development lifecycle. Key Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation activities. Advise on secure design, cloud security, mobile security, authentication, encryption … Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience supporting audits, regulatory reviews or compliance ...

Java, C, C++ and other relevant languages. Integrate security controls and automated testing into CI/CD pipelines , including SAST, DAST and SCA. Support threat modelling and vulnerability management across products and services. Work closely with developers, architects, DevOps teams and product owners to embed security into their … major language such as Java, C, C++, C#, Python or similar. Knowledge of secure software development lifecycles and shift-left security practices. Experience with threat modelling , such as STRIDE or similar approaches. Understanding of application, API and web security. Experience interpreting security findings, identifying false positives and prioritising ...

technical designs. Working across areas such as cloud, infrastructure, networks, integration, applications and enterprise security. Producing and reviewing security architecture and design documentation. Conducting threat modelling and identifying security risks within proposed solutions. Applying Secure by Design principles throughout the technology lifecycle. Working closely with Solution Architects, Engineers … architecture or solution-design experience. Relevant experience could include: Security Architecture or security solution design. Designing or reviewing HLDs/LLDs and technical architectures. Threat modelling and Secure by Design. Cloud security across AWS, Azure and/or GCP. Security architecture across infrastructure, networks, applications or integration environments. ...

complex enterprise IT and operational technology environments. Work with technical and solution architects to embed security throughout the design and delivery lifecycle. Apply threat modelling techniques to identify threats and define appropriate security requirements. Provide specialist advice on security risks, threat-based mitigation and system design. Manage … premises architecture and virtualisation Cloud platforms and containerisation Databases and LLM technologies Mobile technologies and application security Security architecture and secure-by-design principles Threat modelling, risk assessment and security requirements Security controls, protective monitoring and IAM Previous experience working specifically as a Security Architect is desirable ...

security processes through infrastructure-as-code and scripting. Maintaining technical and security documentation. Supporting development teams with security tooling and best practices. Contributing to threat modelling and compliance activities. Applications are welcomed from candidates with the required experience from backgrounds including: Application Security Engineer, DevSecOps Engineer, Product Security … code and secure engineering practices. Familiarity with GitHub and GitHub Actions. Experience with Terraform and Python. Understanding of cloud security governance. Experience with threat modelling in software engineering contexts. Knowledge of ISO 27001 and its relevance to secure engineering. Exposure to Agile working environments and DevSecOps practices Ideally ...

What You'll Be Doing Owning the software security strategy and roadmap across the product line Defining security architecture, standards and best practices Embedding threat modelling and security requirements into product development Working closely with software and product teams to drive secure-by-design principles Leading architecture reviews … maturity across the organisation What We're Looking For You'll likely bring experience in: Security Architecture Product Security Secure Software Development Lifecycle (SDLC) Threat Modelling Vulnerability Management Security Testing & Assurance Secure CI/CD Pipelines Risk Assessment & Security Governance Software Architecture and Engineering Leadership Desirable Experience Embedded ...

team's work to group standards and frameworks and building on recent improvements to ways of working Providing technical leadership on design reviews, threat modelling and security assurance across applications, cloud, identity, data and third-party services Acting as the senior escalation point for complex security challenges Building … infrastructure, applications and identity and the credibility to challenge solution designs Practical experience of AI security risk and assurance, including LLM and agentic AI threat modelling, with knowledge of NIST AI RMF, ISO/IEC 42001 and OWASP guidance for LLM applications Experience supporting complex transformation programmes Energy ...

environment. The Opportunity This is a senior technical leadership role responsible for driving strategic security engineering initiatives across vulnerability management, application security, AI security, threat modelling, security analytics, and metrics engineering. You will build and lead a high-performing engineering function while delivering scalable, automated security services that … tooling and platforms. Drive vulnerability, exposure, and security posture management across complex technology estates. Develop and enhance application security, API security, AI security, and threat modelling capabilities. Establish security metrics, reporting, and analytics platforms to measure control effectiveness. Build automation-first engineering practices and integrate security into DevOps ...

Copilot CLI. Evaluate, test and govern MCP servers, including GitHub, Jira and Confluence integrations. Implement AI security controls, access policies and approval processes. Conduct threat modelling and AI risk assessments in partnership with Cyber Security teams. Define governance processes for onboarding and approving AI tooling. Produce SOPs, technical … GitHub Enterprise administration. Experience with GitHub Copilot, AI developer tooling or AI platform enablement. Understanding of MCP (Model Context Protocol) or AI tool integrations. Threat modelling, security governance and risk management. Strong technical documentation and stakeholder engagement skills. Desirable AI governance or responsible AI frameworks. DevSecOps or Platform ...

Copilot CLI. Evaluate, test and govern MCP servers, including GitHub, Jira and Confluence integrations. Implement AI security controls, access policies and approval processes. Conduct threat modelling and AI risk assessments in partnership with Cyber Security teams. Define governance processes for onboarding and approving AI tooling. Produce SOPs, technical … GitHub Enterprise administration. Experience with GitHub Copilot, AI developer tooling or AI platform enablement. Understanding of MCP (Model Context Protocol) or AI tool integrations. Threat modelling, security governance and risk management. Strong technical documentation and stakeholder engagement skills. Desirable AI governance or responsible AI frameworks. DevSecOps or Platform ...

Establish approaches for triaging findings, managing false positives, tracking remediation, and measuring security improvement. Promote security-by-design and secure-by-default principles through threat modelling, design reviews, architectural guidance, and secure coding practices. Improve the identification, assessment, documentation, and remediation of vulnerabilities throughout the software development lifecycle. … drive improvements to software quality, reliability, and security. The following skills and attributes are a plus: Experience applying secure software development lifecycle practices, including threat modelling, secure design, vulnerability management, and release governance. Experience with vulnerability disclosure, severity assessment, remediation planning, and security updates. Experience leading technical initiatives ...

remote Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives … real technical impact. What Youll Do: Build and optimise Threat Detection capabilities in Elastic and Azure Sentinel Develop Threat Models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with our external SOC to refine ...

remote Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives … real technical impact. What You'll Do: Build and optimise Threat Detection capabilities in Elastic and Azure Sentinel Develop Threat Models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with our external ...

Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models … tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics ...

both technical and non-technical stakeholders. Develop security principles, controls and approaches aligned to client requirements, industry standards and regulatory frameworks. Conduct security assessments, threat and risk assessments, vulnerability assessments and security audits. Advise clients on security controls, emerging technologies and appropriate technical solutions. Work with technology vendors … systems integrator or professional services environment . Strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS . Experience with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM ...

business and security requirements, and translate them into practical architectural solutions. Working knowledge of architectural frameworks such as SABSA and TOGAF. Strong understanding of threat modelling, risk assessment, and secure-by-design principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards ...

business and security requirements, and translate them into practical architectural solutions. Working knowledge of architectural frameworks such as SABSA and TOGAF. Strong understanding of threat modelling, risk assessment, and secure-by-design principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards ...