101 to 125 of 367 Threat Modelling Jobs in England

DevOps, and operational teams, you will contribute to cloud architecture designs, automate security remediation processes, and provide proactive insights into cloud risks, vulnerabilities, and threat mitigation strategies. You will leverage your expertise in cloud security, infrastructure as code, CI/CD pipelines, containerisation, and governance frameworks to ensure that … software development lifecycle practices. Identify, assess, and mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to: Identify business objectives, user needs, risk appetite and cyber security obligations Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to: Identify business objectives, user needs, risk appetite and cyber security obligations Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure)Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE)Some experience working with security standards ...

structuring security engagements, including managing scope, stakeholders, and delivery risk. Communicates clearly with both technical architects and non‐technical executives, adjusting without losing accuracy. Threat modelling experience using structured methods such as STRIDE, applied to complex hybrid ecosystems before deployment. Experience working with legacy technical debt in practice ...

native security controls. Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation. Knowledge of SSDLC practices and threat modelling. Ability to review cloud architectures and technical designs from a security perspective. Understanding of authentication and authorization patterns. Strong communication and collaboration skills ...

providing mitigation recommendations. Support governance, risk, compliance, and assurance activities. Contribute to security roadmaps and continuous improvement initiatives. Provide guidance on cloud security monitoring, threat management, and incident response capabilities. Support managed cloud security service engagements where required. Essential Skills & ExperienceProven experience working as a Security Architect within complex … secure cloud solutions within AWS, Azure, or multi-cloud environments. Deep understanding of security architecture principles, frameworks, and best practices. Experience conducting security reviews, threat modelling, and risk assessments. Strong knowledge of identity and access management, network security, encryption, and security monitoring. Experience integrating security into cloud transformation ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement Design and maintain AI‐assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, networking access, observability, workload isolation, and third‐party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer‐facing guidance for safe use of AI coding assistants, AI APIs ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement: Design and maintain AI‐assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, network access, observability, workload isolation, and third‐party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer‐facing guidance for safe use of AI coding assistants, AI APIs ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement Design and maintain AI-assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, network access, observability, workload isolation, and third-party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer-facing guidance for safe use of AI coding assistants, AI APIs ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

Infrastructure as Code, and cloud-native engineering practices. Drive cloud security governance, architecture assurance, security remediation, and control optimisation initiatives. Conduct security architecture reviews, threat modelling exercises, risk assessments, and cloud security maturity assessments. Contribute to business development activities, thought leadership, and the continued growth of our Cloud ...

systems we use to guard the firm. Think about this role as some combination of incident responder, detection engineer, security engineer, SOC automation engineer, threat hunter, threat modeler, and security awareness engineer. Our SOC team is involved in engineering (e.g., we built our own SOAR, email content scanning … system, the entire alerting stack and much more) and we handle the incident response and remediation when a threat is found. Our analysts research and prioritise what threats need to be monitored, hunt for them in our data, write code to detect them and constantly tune the detection ...

role in helping to shape our client’s transformation journeys. Identify business objectives, user needs, risk appetite and cyber security obligations Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to ‘Secure by Design’ principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...

Infrastructure as Code and cloud-native engineering practices Drive cloud security governance, architecture assurance, security remediation and control optimisation initiatives Conduct security architecture reviews, threat modelling, risk assessments and cloud security maturity assessments Contribute to business development, thought leadership and the continued growth of the Cloud Security practice ...

Support the planning and scoping of IT Health Checks (ITHCs) and interpret assessment outcomes. Identify, assess and manage security risks within solution architectures. Conduct threat modelling, risk assessments and security impact analyses. Design proportionate security controls using cloud-native technologies and services. Produce architecture artefacts including security patterns ...

Doing Lead the design and assurance of secure architectures across complex Defence, Government, CNI and mission-critical environments. Define security requirements, threat models, architectural principles and proportionate security controls across the system lifecycle. Identify and manage security risks across high-level and detailed solution designs, providing practical mitigation strategies … Framework (CAF), NIST and ISO 27001 . Experience applying risk-driven security architecture methodologies to complex systems and environments. Strong understanding of security requirements, threat modelling, risk assessment and security controls. The ability to communicate complex technical risks and recommendations to both technical and C-level audiences. Experience ...

such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001 or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments and architecture reviews. Strong troubleshooting, documentation and cross-functional communication skills. Personal Strong team player with excellent communication skills. ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture … building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack ...

such as Wiz, Microsoft Defender, and ArmorCode. Prioritise and coordinate remediation efforts based on business impact, exploitability, and risk exposure. Conduct security assessments and threat modelling exercises for new projects and technologies. Ensure security controls align with SOC2, ISO27001, CIS Controls, and organisational risk management requirements. Produce reports … support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. Skills and Experience Essential Microsoft Entra ...

pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier EngagementSupport V&V, penetration testing, and remediation, and manage security alignment with suppliers. Compliance & DocumentationOwn the security compliance dossier, including Cybersecurity … hardware engineering with at least 5 years focused on cybersecurity for embedded systems, IoT, or cloud platforms. Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products. Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security ...

secure coding training, workshops and awareness sessions. Mentor development teams and promote security-first engineering practices. Drive adoption of secure development standards and methodologies. Threat & Vulnerability Management Support application vulnerability management activities. Assist development teams with vulnerability triage and remediation planning. Identify recurring weaknesses and opportunities for continuous improvement. … into CI/CD pipelines. Strong understanding of OWASP Top 10 and common vulnerability classes. Experience with API and web application security. Knowledge of threat modelling techniques and methodologies. Experience working closely with software engineering teams in enterprise environments. Ability to read and understand code in languages such ...

built into the way systems are designed and developed. The role The focus is across: Application Security Cloud Security DevSecOps Secure Software Development Lifecycles Threat Modelling Vulnerability Management Security Testing Security tooling and controls Working with development and engineering teams to implement security requirements Providing technical security advice ...

options and recommendations clearly to senior stakeholders who may not have a security background. The work can include: Security architecture and secure-by-design Threat modelling and security risk assessment Reviewing solution and infrastructure designs Defining security requirements and controls Cloud, infrastructure, network and identity security Working with ...

Secrets Manager, ECS, Aurora and access controls Identity and access management across the business, including Cloudflare Zero Trust Security within the engineering lifecycle, from threat modelling and secure design reviews through to vulnerability management and secure development practices CI/CD and software supply-chain security, including dependencies ...