126 to 150 of 367 Threat Modelling Jobs in England

guidance, and where required production of an action plan for vulnerabilities identified with clear recommendations and outcomes to mitigate and address. Delivering risk, threat modelling and analysis for systems, applications and infrastructure. Designing proportional security controls to bring risk within appetite, leveraging native cloud technologies. Producing security architecture ...

patterns Integrate security tooling and automated controls intoCI/CD pipelines, including SAST/DAST tooling, secrets scanning, and policy-as-code enforcement Conduct threat modelling exercises, cloud security posture reviews, and risk assessments for cloud platforms and workloads Work within scaled agile delivery teams, contributing security requirements ...

requirements for shipboard and supporting systems. Build and structure the initial asset register for configuration control, capturing criticality, zone, ownership and dependency attributes. Support threat modelling and security risk assessment from an architecture perspective, and translate assessed risk into architectural controls. Define architecture‐level security requirements and maintain ...

network, application, data and endpoint layers Lead security architecture reviews and technical security assessments Design zero-trust security models and continuous verification frameworks Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures Lead security risk assessments and vulnerability management programmes Design incident … response, threat intelligence and cyber defence capabilities Architect security monitoring, detection and response solutions Design business continuity and cyber resilience frameworks Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations Design security solutions supporting Information Security Management System (ISMS) compliance Architect compliance and audit ...

security solutions across network, application, data and endpoint layersLead security architecture reviews and technical security assessmentsDesign zero-trust security models and continuous verification frameworksCyber Threat & Risk ManagementAssess cyber threat landscape and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat … complianceArchitect compliance and audit capabilities for regulatory reportingLead security standards implementation and controls frameworksSecurity Solutions & IntegrationArchitect endpoint protection, data loss prevention (DLP) and advanced threat protection solutionsDesign cloud security architectures supporting hybrid and multi-cloud environmentsArchitect application security, API security and secure SDLC integrationDesign security operations centre (SOC) capabilities ...

Enterprise Security Architecture or Security Solutions Architecture to develop and own: Identify business objectives, user needs, risk appetite and cyber security obligationsIdentify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controlsVerify and evidence alignment to 'Secure by Design' principles, corporate security policy/standards … NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelinesIn-depth knowledge of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. Minimum of 10 years of experience in Cyber SecurityAny 2 of the following certifications CISSP, CISM, CCSP, CRISC or equivalent experience3+ years ...

/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience ...

challenges that span multiple technology domains. Job responsibilitiesCultivate a security culture with your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your product across ...

executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security ...

scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy as Code and threat modelling. A proactive, curious and collaborative approach, with the ability to guide engineering teams, support third-party supply chain security and make complex topics ...

products across Consumer, OTC and MRE lines. This is a senior, hands-on role: you'll design and run the secure development lifecycle, lead threat modeling and architecture review, own the security debt lifecycle for product engineering teams, and architect the automated pipelines that protect billions in transaction volume. … Driven SDLC Innovation: Research, architect, and safely embed cutting-edge AI utilities and Large Language Model (LLM) agents directly into our secure development lifecycle. Threat Modelling & Architecture Reviews: Lead STRIDE/attack-tree threat models for sensitive flows including authentication, payment, custody, reconciliation and sign ...

define risk appetite and make informed decisions about whether an initiative is ready to progress. Alongside engineers, you'll get into the technical detail - threat-modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes. From POC to production, you'll bring the two sides … implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review AI architectures, guardrails, evaluations ...

influence secure solution design. Research emerging technologies and develop innovative approaches to challenging security problems. Contribute to the development of reference architectures and threat models. Support the delivery of secure technology solutions across major public sector and government programmes. Key Skills & Experience The organisation is looking for Security Consultants … Sign-On (SSO) and Identity and Access Management (IAM/IDAM). Network security and encryption. IT infrastructure, technical concepts and solution design methodologies. Threat modelling and security architecture development. Identifying security vulnerabilities and assessing their potential business and technical impact. Communicating security risks and recommendations ...

response capabilities for AI-related threats and misuse scenarios. Identify opportunities to use AI to enhance cyber security operations, such as alert triage, threat analysis, playbook automation, knowledge retrieval, and workflow optimisation. Stay current on evolving risks, attack techniques, regulations, and industry practices related to AI security … systems, including prompt injection, data exfiltration, insecure model access, supply chain risks, model poisoning, and sensitive data exposure. Experience conducting architecture reviews, threat modelling, and security assessments for complex technical solutions. Ability to translate technical risk into clear, practical guidance for both engineering and non-technical stakeholders. Strong ...

DevOps teams to embed security tools (e.g., SAST, DAST, SCA) into CI/CD pipelines. Help maintain and improve automated security testing workflows. Support threat modelling and secure design practices at the project level. Participate in security reviews of new features and applications. Security Testing and ToolingOversee … DevSecOps environments. Hands-on experience with security testing tools (e.g., Veracode, SonarQube, Burp Suite, etc.).Familiarity with secure coding practices, OWASP Top 10, and threat modelling. Experience working in Agile or DevOps-driven environments. Strong verbal and written communication skills. Relevant security or DevSecOps certifications (e.g., CSSLP, CEH, GWEB ...

architecture and secure solution design. Identity & Access Management (IAM/IDAM), Privileged Access Management (PAM), Single Sign-On (SSO), network security and encryption technologies. Threat modelling and reference architecture development. Cloud and/or network security. Working within large enterprise or public sector environments. Excellent communication and stakeholder ...

solving skills, with the ability to assess complex security risks and develop effective mitigation strategies. Further Experienced in: Identifying security flaws in solutions through threat modelling, risk analysis, architectural assessments and design reviewsCurrent security vulnerabilities and threats specific to AI/ML, MITRE ATLAS framework and OWASPIdentity ...

Familiarity with the NIST Risk Management Framework (RMF). Experience with vulnerability management and security tooling. Exposure to security architecture, secure design reviews, or threat modelling. Understanding of AI governance and Responsible AI principles. Knowledge of Government Digital Service (GDS) delivery methodologies. Qualifications The following certifications would be advantageous ...

effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data. Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices. Consults on security direction, maintaining a vigil over prudent assurance ...

access management (IAM). Accountabilities Control function or security guild responsible for technology change oversight and governance. Execution of security risk assessments and building threat models during the change & development lifecycle in order to identify vulnerabilities within the banks IT systems, applications and infrastructure, ensuring that compensating security controls ...

critical operations. Your work may include: Deploy, and maintain secure infrastructure within Kubernetes environments Administer and maintain Splunk for log aggregation, monitoring, alerting, and threat detection Operate and manage Nessus for vulnerability scanning, reporting, and remediation tracking Integrate security tools into CI/CD pipelines and cloud-native workflows … Scripting or automation skills (e.g. Python, Bash, or similar) Understanding of security frameworks and best practices Knowledge of configuring SIEM tooling. Basic understanding of threat frameworks, such as ATT&CK. Experience with additional SIEM or observability platforms Experience with Microsoft Defender Experience with DevSecOps practices and pipeline security Certifications ...

secured. Define security requirements for endpoint, email, Microsoft 365, data, application and network architectures . Establish appropriate requirements for security logging, monitoring, alerting, threat detection and incident response. Review technical architecture and solution designs, identifying security weaknesses, control gaps, dependencies and areas requiring further assurance. Assess migration strategies … policies, information-security standards, data-protection obligations and relevant regulatory or assurance requirements. Maintain appropriate security architecture documentation, including HLDs, security principles, control matrices, threat models, risk assessments, exception records and architecture decision records . Provide clear security recommendations and risk-based advice to programme leadership and senior stakeholders. ...

still evolving. You'll have the opportunity to: Lead AI Security and broader cyber security assessments Advise senior stakeholders on AI-related cyber risk Threat model LLM applications, AI agents and agentic workflows Assess risks around prompt injection, excessive agency, data leakage, insecure tool use and model supply chains … oversight, logging and autonomous actions Advise organisations on secure adoption of AI across their technology estate Identify opportunities to safely use AI across SOC, threat detection, vulnerability management and incident response Shape client propositions, bids and new AI Security offerings Lead and mentor consultants within engagements Work alongside specialists ...

/CD pipelines, build tools, artifact repositories and developer platforms Expertise in secure software delivery, vulnerability management and platform security Experience with threat modelling, security frameworks and maturity assessments Strong knowledge of application security, network security and cloud security principles More details available on successful application. ...

applications, platforms, APIs, cloud solutions, and data services using the Shift left methodology Provide expert security guidance and assurance across the wider business Lead threat modelling activities and support informed decision-making around security risks, controls, and trade offs Define and maintain security patterns covering areas such ...