151 to 175 of 612 Threat Modelling Jobs in England

architectures and reusable solution patterns Define and author enterprise‐level security policies, controls frameworks, and governance documentation aligned to industry standards Lead risk assessments, threat modelling exercises, and security posture evaluations for cloud platforms and SaaS products, utilising methodologies such as FAIR Drive compliance programmes covering ...

NIST 800‐53. Partner with Product & Engineering: Embed DevSecOps and secure SDLC practices into our CI/CD pipelines; oversee pentesting, red teaming, and threat modeling across our core infrastructure. Enable Enterprise Sales: Serve as the technical security authority in high‐stakes customer procurement reviews, vendor risk assessments (DDQs ...

design decisions and raising overall DevSecOps maturity across the organization Lead vulnerability management and remediation across application, pipeline, and cloud environments while participating in threat modeling and architecture reviews to ensure security is embedded at the design level What We're Looking For: Basic Required Qualifications: 8+ years ...

across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance.Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security.Design secure architectures across Azure, AWS, Google Cloud, SaaS, and on-premises environments.Lead integration of identity, security, network … architecture-led consultancy and managed service opportunities.Qualification & Experience Experience in Security Architecture, Enterprise Architecture, or Cyber Security Consulting.Strong expertise in Zero Trust, security governance, threat modelling, risk management, and cloud security.Advanced Microsoft security experience across Entra ID, Defender, Sentinel, Purview, Intune, Azure Security, and Microsoft 365 Security.Deep ...

across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance.Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security.Design secure architectures across Azure, AWS, Google Cloud, SaaS, and on-premises environments.Lead integration of identity, security, network … architecture-led consultancy and managed service opportunities.Qualification & Experience Experience in Security Architecture, Enterprise Architecture, or Cyber Security Consulting.Strong expertise in Zero Trust, security governance, threat modelling, risk management, and cloud security.Advanced Microsoft security experience across Entra ID, Defender, Sentinel, Purview, Intune, Azure Security, and Microsoft 365 Security.Deep ...

across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance.Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security.Design secure architectures across Azure, AWS, Google Cloud, SaaS, and on-premises environments.Lead integration of identity, security, network … architecture-led consultancy and managed service opportunities.Qualification & Experience Experience in Security Architecture, Enterprise Architecture, or Cyber Security Consulting.Strong expertise in Zero Trust, security governance, threat modelling, risk management, and cloud security.Advanced Microsoft security experience across Entra ID, Defender, Sentinel, Purview, Intune, Azure Security, and Microsoft 365 Security.Deep ...

across the Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance.Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security.Design secure architectures across Azure, AWS, Google Cloud, SaaS, and on-premises environments.Lead integration of identity, security, network … architecture-led consultancy and managed service opportunities.Qualification & Experience Experience in Security Architecture, Enterprise Architecture, or Cyber Security Consulting.Strong expertise in Zero Trust, security governance, threat modelling, risk management, and cloud security.Advanced Microsoft security experience across Entra ID, Defender, Sentinel, Purview, Intune, Azure Security, and Microsoft 365 Security.Deep ...

Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance. Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security. Design secure architectures across Azure, AWS, Google Cloud, SaaS, and on-premises environments. Lead integration of identity, security … consultancy and managed service opportunities. Qualification & Experience Experience in Security Architecture, Enterprise Architecture, or Cyber Security Consulting. Strong expertise in Zero Trust, security governance, threat modelling, risk management, and cloud security. Advanced Microsoft security experience across Entra ID, Defender, Sentinel, Purview, Intune, Azure Security, and Microsoft 365 Security. ...

DevOps, and operational teams, you will contribute to cloud architecture designs, automate security remediation processes, and provide proactive insights into cloud risks, vulnerabilities, and threat mitigation strategies. You will leverage your expertise in cloud security, infrastructure as code, CI/CD pipelines, containerisation, and governance frameworks to ensure that … software development lifecycle practices. Identify, assess, and mitigate cloud security risks, vulnerabilities, and compliance gaps. Contribute to cloud architecture reviews, security assessments, and threat modelling activities. Work with security tooling and SIEM platforms to improve visibility, detection, and response capabilities. Support incident, problem, and change management processes while ...

will:Help reduce cyber risk across technology programmes by identifying, defining, and assuring appropriate security requirements, controls, and risk treatments throughout the project lifecycle.Conduct threat modelling exercises using industry frameworks such as MITRE ATT&CK to identify credible threats and recommend proportionate security controls.Design and advise on functional … more of the following domains: Cloud security (Azure, AWS, GCP)Network securityIdentity and Access Management (IAM)Application security/DevSecOpsInfrastructure and platform securityContinuous Threat Exposure ManagementAbility to analyse technical risks and communicate recommendations to both technical and non-technical stakeholders.Strong written, verbal, and presentation skills.Demonstrated ability ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to: Identify business objectives, user needs, risk appetite and cyber security obligations Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to:- Identify business objectives, user needs, risk appetite and cyber security obligations- Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls- Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure)Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE)Some experience working with security standards such ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to: Identify business objectives, user needs, risk appetite and cyber security obligations Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure)Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE)Some experience working with security standards ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to:- Identify business objectives, user needs, risk appetite and cyber security obligations- Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls- Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure)• Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.• A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE)• Some experience working with security standards ...

structuring security engagements, including managing scope, stakeholders, and delivery risk. Communicates clearly with both technical architects and non‐technical executives, adjusting without losing accuracy. Threat modelling experience using structured methods such as STRIDE, applied to complex hybrid ecosystems before deployment. Experience working with legacy technical debt in practice ...

Partner with product, engineering, and infrastructure teams to embed security within existing practices. Conduct security and risk assessments of applications, platforms, and infrastructure, including threat modeling and targeted technical review. Apply security principles to protect systems and data, ensuring availability, authentication, authorization, confidentiality, and integrity. Create technical documentation outlining ...

cloud-native security controls.Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation.Knowledge of SSDLC practices and threat modelling.Ability to review cloud architectures and technical designs from a security perspective. Understanding of authentication and authorization patterns.Strong communication and collaboration skills, with the ability ...

native security controls. Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation. Knowledge of SSDLC practices and threat modelling. Ability to review cloud architectures and technical designs from a security perspective. Understanding of authentication and authorization patterns. Strong communication and collaboration skills ...

structuring security engagements, including managing scope, stakeholders, and delivery risk.Communicates clearly with both technical architects and non-technical executives, adjusting without losing accuracy.Threat modelling experience using structured methods such as STRIDE, applied to complex hybrid ecosystems before deployment.Experience working with legacy technical debt in practice: modernising authentication protocols, managing ...

build tools is also expected as part of the development toolkit.Experience with RESTful web services and frameworks to build APIs is important. Architecture & Modelling Tools: Use of modelling tools to create architecture diagrams and documentation – e.g. Microsoft Visio, Draw.io, Lucidchart or UML design tools.Architecture & Design Knowledge: Strong grasp … architecture. This means following principles like least privilege, defense in depth, and secure coding practices. Incorporating security reviews in the design phase, using threat modelling for new systems, and ensuring compliance with relevant standards (such as ISO 27001and other internal security policies). For cloud deployments, adhering ...

control gaps, providing mitigation recommendations.Support governance, risk, compliance, and assurance activities.Contribute to security roadmaps and continuous improvement initiatives.Provide guidance on cloud security monitoring, threat management, and incident response capabilities.Support managed cloud security service engagements where required.Essential Skills & ExperienceProven experience working as a Security Architect within complex enterprise or government … ServicesExperience designing secure cloud solutions within AWS, Azure, or multi-cloud environments.Deep understanding of security architecture principles, frameworks, and best practices.Experience conducting security reviews, threat modelling, and risk assessments.Strong knowledge of identity and access management, network security, encryption, and security monitoring.Experience integrating security into cloud transformation and migration ...

providing mitigation recommendations. Support governance, risk, compliance, and assurance activities. Contribute to security roadmaps and continuous improvement initiatives. Provide guidance on cloud security monitoring, threat management, and incident response capabilities. Support managed cloud security service engagements where required. Essential Skills & ExperienceProven experience working as a Security Architect within complex … secure cloud solutions within AWS, Azure, or multi-cloud environments. Deep understanding of security architecture principles, frameworks, and best practices. Experience conducting security reviews, threat modelling, and risk assessments. Strong knowledge of identity and access management, network security, encryption, and security monitoring. Experience integrating security into cloud transformation ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement Design and maintain AI‐assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, networking access, observability, workload isolation, and third‐party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer‐facing guidance for safe use of AI coding assistants, AI APIs ...

dashboards covering control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns.AI Security EnablementDesign and maintain AI-assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation.Build prompt libraries, review rubrics, validation steps, and human-in-the-loop … including identity, secrets, data storage, network access, observability, workload isolation, and third-party AI service integrations in partnership with Sec Architecture & AppSec.Support AI application threat modelling and risk reviews in partnership with BISO/AppSec.Create developer-facing guidance for safe use of AI coding assistants, AI APIs, data ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement: Design and maintain AI‐assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, network access, observability, workload isolation, and third‐party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer‐facing guidance for safe use of AI coding assistants, AI APIs ...