25 of 25 Remote/Hybrid Threat Modelling Jobs in England

Security Engineer/Security Consultant (Application Security & Threat Modelling) Rate - £550 - £650 Outside IR35 Duration - 6 months initial Location - Bristol/London (once a week/remote) Role overview: A leading Financial Services is seeking an experienced Security Engineering Consultant on a contract basis. The successful candidate will … embedded within engineering tribes, providing security consultancy and guidance to development teams throughout the software development lifecycle. The primary focus of the role is threat modelling. The consultant will conduct threat models for new and existing products, identify risks at the design stage and work with developers ...

embedded from the earliest stages of delivery. Working across both enterprise IT and Operational Technology (OT) environments, you'll provide expert guidance, lead threat modelling activities and define security standards that protect critical services relied upon by millions of customers. What you'll be doing As Security Architect … security architecture principles, standards, reference models and reusable design patterns. Review and approve solution architectures, high-level designs and significant design decisions. Facilitate threat modelling workshops using methodologies including STRIDE, attack trees and kill-chain analysis. Ensure threats, risks, abuse cases and security requirements are identified, documented ...

security threats and risks that may need review. Assist in risk assessment/acceptance/remediation processes Develop and mature the Incident Response and Threat hunting capabilities. Implementation of Incident Response frameworks/methodologies such as Kill Chain, MITRE, Threat Modelling, Diamond Model. Development of Threat … work day may sometimes be needed. Qualifications, Skills, and Experience Relevant experience in an Incident Response and Security Monitoring; Relevant experience in working with threat modelling frameworks. Experience in finding, analysing, and extracting attack related payload from packet captures and host forensics images. Experience in a banking, investment ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

complex enterprise IT and operational technology environments. Work with technical and solution architects to embed security throughout the design and delivery lifecycle. Apply threat modelling techniques to identify threats and define appropriate security requirements. Provide specialist advice on security risks, threat-based mitigation and system design. Manage … premises architecture and virtualisation Cloud platforms and containerisation Databases and LLM technologies Mobile technologies and application security Security architecture and secure-by-design principles Threat modelling, risk assessment and security requirements Security controls, protective monitoring and IAM Previous experience working specifically as a Security Architect is desirable ...

security processes through infrastructure-as-code and scripting. Maintaining technical and security documentation. Supporting development teams with security tooling and best practices. Contributing to threat modelling and compliance activities. Applications are welcomed from candidates with the required experience from backgrounds including: Application Security Engineer, DevSecOps Engineer, Product Security … code and secure engineering practices. Familiarity with GitHub and GitHub Actions. Experience with Terraform and Python. Understanding of cloud security governance. Experience with threat modelling in software engineering contexts. Knowledge of ISO 27001 and its relevance to secure engineering. Exposure to Agile working environments and DevSecOps practices Ideally ...

Copilot CLI. Evaluate, test and govern MCP servers, including GitHub, Jira and Confluence integrations. Implement AI security controls, access policies and approval processes. Conduct threat modelling and AI risk assessments in partnership with Cyber Security teams. Define governance processes for onboarding and approving AI tooling. Produce SOPs, technical … GitHub Enterprise administration. Experience with GitHub Copilot, AI developer tooling or AI platform enablement. Understanding of MCP (Model Context Protocol) or AI tool integrations. Threat modelling, security governance and risk management. Strong technical documentation and stakeholder engagement skills. Desirable AI governance or responsible AI frameworks. DevSecOps or Platform ...

Copilot CLI. Evaluate, test and govern MCP servers, including GitHub, Jira and Confluence integrations. Implement AI security controls, access policies and approval processes. Conduct threat modelling and AI risk assessments in partnership with Cyber Security teams. Define governance processes for onboarding and approving AI tooling. Produce SOPs, technical … GitHub Enterprise administration. Experience with GitHub Copilot, AI developer tooling or AI platform enablement. Understanding of MCP (Model Context Protocol) or AI tool integrations. Threat modelling, security governance and risk management. Strong technical documentation and stakeholder engagement skills. Desirable AI governance or responsible AI frameworks. DevSecOps or Platform ...

Establish approaches for triaging findings, managing false positives, tracking remediation, and measuring security improvement. Promote security-by-design and secure-by-default principles through threat modelling, design reviews, architectural guidance, and secure coding practices. Improve the identification, assessment, documentation, and remediation of vulnerabilities throughout the software development lifecycle. … drive improvements to software quality, reliability, and security. The following skills and attributes are a plus: Experience applying secure software development lifecycle practices, including threat modelling, secure design, vulnerability management, and release governance. Experience with vulnerability disclosure, severity assessment, remediation planning, and security updates. Experience leading technical initiatives ...

remote Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives … real technical impact. What Youll Do: Build and optimise Threat Detection capabilities in Elastic and Azure Sentinel Develop Threat Models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with our external SOC to refine ...

remote Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives … real technical impact. What You'll Do: Build and optimise Threat Detection capabilities in Elastic and Azure Sentinel Develop Threat Models for AWS & Azure and our global SaaS products Create and maintain incident response playbooks Automate response actions with the Security Team Partner with our external ...

Profile Summary Seeking security engineer to join our Proactive Security team, this role will focus on the development of security technology stack to ensure threat mitigation is in place through offensive and preventive measures. Duties and Responsibilities Threat Modelling & Risk Analysis: Develop and maintain threat models … tooling integration and orchestration. Develop and implementation of SOAR capabilities that aligns with existing technology stack. Experience with KMS systems and methodologies. Identity based threat detection and prevention. Privileged Access and Session Management SIEM Management: Design, implement, and maintain of workspaces, including data connectors, Logic App, Function App, analytics ...

both technical and non-technical stakeholders. Develop security principles, controls and approaches aligned to client requirements, industry standards and regulatory frameworks. Conduct security assessments, threat and risk assessments, vulnerability assessments and security audits. Advise clients on security controls, emerging technologies and appropriate technical solutions. Work with technology vendors … systems integrator or professional services environment . Strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS . Experience with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM ...

Assess cloud, network, infrastructure and application security controls. Review complex technical solutions to ensure alignment with security, regulatory and business requirements. Conduct and support threat modelling, cyber risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management, helping ...

Assess cloud, network, infrastructure and application security controls. Review complex technical solutions to ensure alignment with security, regulatory and business requirements. Conduct and support threat modelling, cyber risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management, helping ...

Assess and advise on cloud, network, infrastructure and application security controls. Review complex technical solutions against security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments . Provide technical oversight of security testing and penetration testing activities. Support vulnerability management and help teams ...

define risk appetite and make informed decisions about whether an initiative is ready to progress. Alongside engineers, you'll get into the technical detail - threat-modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes. From POC to production, you'll bring the two sides … implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review AI architectures, guardrails, evaluations ...

define risk appetite and make informed decisions about whether an initiative is ready to progress. Alongside engineers, you'll get into the technical detail - threat-modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes. From POC to production, you'll bring the two sides … implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review AI architectures, guardrails, evaluations ...

Assess cloud, network, infrastructure and application security controls. Review complex technical solutions to ensure they meet security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments. Provide technical oversight of security testing and penetration testing activities. Support vulnerability management, helping teams prioritise ...

Assess cloud, network, infrastructure and application security controls. Review complex technical solutions to ensure alignment with security, regulatory and business requirements. Conduct and support threat modelling, cyber risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management, helping ...

support assurance activity and demonstrate alignment with security standards and frameworks. Acting as a security architecture design authority, embedding secure-by-design principles and threat modelling into major technology change. Shaping security architecture across AI and agentic technologies, zero trust and identity, Azure, AWS and GCP, DevSecOps … breach and attack simulation, purple teaming, control monitoring or security posture management. Strong security architecture knowledge, including practical experience of security design reviews and threat modelling. Good working knowledge of MITRE ATT&CK, alongside the ability to map security controls against real-world attacker techniques. Strong experience governing protective ...

support assurance activity and demonstrate alignment with security standards and frameworks. Acting as a security architecture design authority, embedding secure-by-design principles and threat modelling into major technology change. Shaping security architecture across AI and agentic technologies, zero trust and identity, Azure, AWS and GCP, DevSecOps … breach and attack simulation, purple teaming, control monitoring or security posture management. Strong security architecture knowledge, including practical experience of security design reviews and threat modelling. Good working knowledge of MITRE ATT&CK, alongside the ability to map security controls against real-world attacker techniques. Strong experience governing protective ...

experience designing and evaluating secure Cloud and IT architectures, including identity and access management, encryption and network segmentation. Advanced experience in security risk assessment, threat modelling and vulnerability analysis across complex IT and OT environments Practical experience applying Secure-by-Design principles, overseeing security testing, advising on compliance ...

Sentinel, Microsoft Defender and Defender for Cloud. CrowdStrike: Proven design experience across endpoint and identity security. Security Operations: Monitoring, telemetry, vulnerability management, incident response, threat modelling and security controls. Governance & Compliance Delivery: Experience in smaller, fast-paced organisations, working with internal teams and external partners. As a Cyber ...