26 to 50 of 75 Threat Modelling Jobs in England

this role leads the tech refresh and evergreening of security toolsets - ensuring the security technology estate remains current, supported, effective, and aligned with evolving threat landscapes, client policies, and cross-domain architectural patterns. This is a hands-on architecture role, not a governance-only position. The Technical Security Architect … make clear, evidence-based recommendations. Design and review cloud, identity, network, perimeter and platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical ...

this role leads the tech refresh and evergreening of security toolsets - ensuring the security technology estate remains current, supported, effective, and aligned with evolving threat landscapes, client policies, and cross-domain architectural patterns. This is a hands-on architecture role, not a governance-only position. The Technical Security Architect … make clear, evidence-based recommendations. Design and review cloud, identity, network, perimeter and platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical ...

control adoption, misconfiguration trends, remediation progress, recurring issues, and exception patterns. AI Security Enablement Design and maintain AI-assisted workflows for security intake triage, threat model drafting, architecture review summaries, control mapping, remediation guidance, and risk statement generation. Build prompt libraries, review rubrics, validation steps, and human … identity, secrets, data storage, network access, observability, workload isolation, and third-party AI service integrations in partnership with Sec Architecture & AppSec. Support AI application threat modelling and risk reviews in partnership with BISO/AppSec. Create developer-facing guidance for safe use of AI coding assistants, AI APIs ...

Assess cloud, network, infrastructure and application security controls. Review complex technical solutions to ensure alignment with security, regulatory and business requirements. Conduct and support threat modelling, cyber risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management, helping ...

Assess cloud, network, infrastructure and application security controls. Review complex technical solutions to ensure alignment with security, regulatory and business requirements. Conduct and support threat modelling, cyber risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management, helping ...

pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation & Supplier Engagement Support V&V, penetration testing, and remediation, and manage security alignment with suppliers. Compliance & Documentation Own the security compliance dossier … hardware engineering with at least 5 years focused on cybersecurity for embedded systems, IoT, or cloud platforms. Proven track record in secure architecture design, threat modelling, and risk assessment across multi-domain products. Hands-on experience with secure boot, TPM, cryptographic key management, and secure OTA updates, security ...

Assess and advise on cloud, network, infrastructure and application security controls. Review complex technical solutions against security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments . Provide technical oversight of security testing and penetration testing activities. Support vulnerability management and help teams ...

define risk appetite and make informed decisions about whether an initiative is ready to progress. Alongside engineers, you'll get into the technical detail - threat-modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes. From POC to production, you'll bring the two sides … implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review AI architectures, guardrails, evaluations ...

define risk appetite and make informed decisions about whether an initiative is ready to progress. Alongside engineers, you'll get into the technical detail - threat-modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes. From POC to production, you'll bring the two sides … implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review AI architectures, guardrails, evaluations ...

Assess cloud, network, infrastructure and application security controls. Review complex technical solutions to ensure they meet security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments. Provide technical oversight of security testing and penetration testing activities. Support vulnerability management, helping teams prioritise ...

Assess cloud, network, infrastructure and application security controls. Review complex technical solutions to ensure alignment with security, regulatory and business requirements. Conduct and support threat modelling, cyber risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management, helping ...

that span multiple technology domains. Job responsibilities Cultivate a security culture with your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your product across ...

challenges that span multiple technology domains. Job responsibilities Cultivate a security culturewith your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your productacross its breadth ...

that span multiple technology domains. Job responsibilities Cultivate a security culture with your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your product across ...

support assurance activity and demonstrate alignment with security standards and frameworks. Acting as a security architecture design authority, embedding secure-by-design principles and threat modelling into major technology change. Shaping security architecture across AI and agentic technologies, zero trust and identity, Azure, AWS and GCP, DevSecOps … breach and attack simulation, purple teaming, control monitoring or security posture management. Strong security architecture knowledge, including practical experience of security design reviews and threat modelling. Good working knowledge of MITRE ATT&CK, alongside the ability to map security controls against real-world attacker techniques. Strong experience governing protective ...

Grafana, Datadog or CloudWatch . Relevant Google Cloud certifications , such as Developer, Solutions Architect or Security. Experience implementing cloud security practices including secure coding, threat modelling, compliance and incident response. Open-source contributions or a strong track record of technical knowledge sharing. Experience leading multi-team initiatives spanning ...

support assurance activity and demonstrate alignment with security standards and frameworks. Acting as a security architecture design authority, embedding secure-by-design principles and threat modelling into major technology change. Shaping security architecture across AI and agentic technologies, zero trust and identity, Azure, AWS and GCP, DevSecOps … breach and attack simulation, purple teaming, control monitoring or security posture management. Strong security architecture knowledge, including practical experience of security design reviews and threat modelling. Good working knowledge of MITRE ATT&CK, alongside the ability to map security controls against real-world attacker techniques. Strong experience governing protective ...

SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling and security gap assessments. Troubleshoot and optimise Zero Trust deployments, telemetry and access controls. Provide technical guidance, mentorship and architectural governance. ...

experience designing and evaluating secure Cloud and IT architectures, including identity and access management, encryption and network segmentation. Advanced experience in security risk assessment, threat modelling and vulnerability analysis across complex IT and OT environments Practical experience applying Secure-by-Design principles, overseeing security testing, advising on compliance ...

experience designing and evaluating secure Cloud and IT architectures, including identity and access management, encryption and network segmentation. Advanced experience in security risk assessment, threat modelling and vulnerability analysis across complex IT and OT environments Practical experience applying Secure-by-Design principles, overseeing security testing, advising on compliance ...

current and emerging technologies to select or recommend the best solutions for the future state architecture. Knowledge of application security, MITRE ATT&CK and Threat Modelling. Broad knowledge of controls in the industry (NIST, ISO, PCI, SOC, CSF, ISO27001, SABSA and TOGAF) Identity and Access Management (SAML, OAuth, certs … Identifying security flaws in solutions through threat modelling, architectural assessments and design reviews Identity and Access Management, Data Leakage Prevention, Network and Infrastructure Security Cryptography, Encryption and Key Management, Secrets Management, TLS, IPSec, Ciphers, X509 Application Security Design, DevSecOps, Agile practices, Shift Left concepts and automation You have ...

Lead Security Integration Specialist (Contract) We are looking for an experienced Lead Security Integration Specialist to drive the integration of security governance, threat intelligence, and risk management across complex engineering environments. Working autonomously, you'll bridge the gap between engineering, security, digital teams, and senior stakeholders, ensuring security … security integration policies, processes, and engineering deliverables. Support the creation of: Product Security Integration Policy Security Risk Management Integration Process Risk Assessment Integration Frameworks Threat Integration Plans Drive alignment between engineering risk management, product security, and wider business functions. Review current threat modelling approaches and support DevSecOps ...

Lead Security Integration Specialist (Contract) We are looking for an experienced Lead Security Integration Specialist to drive the integration of security governance, threat intelligence, and risk management across complex engineering environments. Working autonomously, you'll bridge the gap between engineering, security, digital teams, and senior stakeholders, ensuring security … security integration policies, processes, and engineering deliverables. Support the creation of: Product Security Integration Policy Security Risk Management Integration Process Risk Assessment Integration Frameworks Threat Integration Plans Drive alignment between engineering risk management, product security, and wider business functions. Review current threat modelling approaches and support DevSecOps ...

architectures Ability to capture business and security requirements and translate them into practical architectural solutions Working knowledge of SABSA and TOGAF Strong understanding of threat modelling, risk assessment and secure-by-design principles Experience applying standards and regulatory requirements, including NIST, ISO 27001, JSP 440, the HMG Security ...

Handle day-to-day vulnerability management, including pen test findings: prioritise what's genuinely exploitable, track fixes and check they've worked. Help run threat modelling sessions in IriusRisk and turn the results into backlog tickets. Look after secrets management, certificates and access reviews and keep security documentation ...