26 to 50 of 169 Threat Modelling Jobs in England

with infrastructure engineering teams to securely deliver cloud solutions. Acting as a Subject Matter Expert (SME) for cloud security services and best practices. Conducting threat modelling, security reviews, and security testing activities. Supporting the adoption and optimisation of CSPM/SSPM tooling and policy-as-code security controls. … Bicep. Experience with CSPM/SSPM solutions, cloud security tooling, and cloud governance. Knowledge of Kubernetes and modern cloud security architectures. Experience with threat modelling, security testing, and cloud security standards. Understanding of authentication, cryptography, networking, and enterprise security principles. Familiarity with policy-as-code security tools such ...

with infrastructure engineering teams to securely deliver cloud solutions. Act as a Subject Matter Expert (SME) for cloud security services and best practices. Conduct threat modelling, security reviews, and security testing activities. Support the adoption and optimization of CSPM/SSPM tooling and policy-as-code security controls. … Bicep. Experience with CSPM/SSPM solutions, cloud security tooling, and cloud governance. Knowledge of Kubernetes and modern cloud security architectures. Experience with threat modelling, security testing, and cloud security standards. Understanding of authentication, cryptography, networking, and enterprise security principles. Familiarity with policy-as-code security tools such ...

requirements. Provide hands-on technical guidance throughout implementation, contributing to design reviews, governance forums, and coding where required. Champion secure-by-design principles, incorporating threat modelling, identity and access management, encryption, secure logging, and Secure SDLC best practices into solution designs. Required Skills/Experience The ideal candidate … hands-on experience with open-source data technologies such as Apache Spark, Trino, Airflow, Apache Superset , or similar platforms. Demonstrable security architecture expertise, including threat modelling, IAM (RBAC/ABAC), encryption, secrets management, secure logging, Secure SDLC, and vulnerability management. Experience producing architecture documentation including HLDs, LLDs, reference ...

become permanent) Industry: Technology/Regulated Industry What You'll Be Doing Define security architecture for web, mobile and digital platforms. Perform application threat modelling and security design reviews. Partner with development teams to integrate security into Agile delivery. Establish secure design patterns for customer-facing applications. Review … application security principles and OWASP Top 10. Knowledge of APIs, microservices and modern authentication technologies. Experience with Agile, DevSecOps and CI/CD pipelines. Threat modelling and security risk assessment expertise. Excellent communication and stakeholder management. Knowledge of industry security standards and compliance frameworks. CISSP, CSSLP or similar ...

earn their trust and enable their best work, you need to be genuinely close to the craft — able to engage at depth on threat modelling, agentic security tooling, SDLC design, and application risk. You’ll also own AppSec strategy and be accountable for how the function scales alongside … engineering context into a clear, prioritised programme of work with measurable outcomes. Be a credible technical partner to your team — engage substantively on threat models, security architecture, agentic tooling design, and risk decisions, and be willing to get into the details when it matters. Define and maintain the team ...

evolve the mobile security framework across the organisation's mobile platforms. Conduct and oversee mobile application penetration testing, vulnerability assessments and remediation activities. Perform threat modelling, security analysis and risk assessments for mobile applications and supporting services. Define and promote secure development standards, application hardening techniques and mobile … experience in mobile application security, with approximately 10+ years in cyber security, application security or a related field. Deep expertise in mobile penetration testing, threat modelling, vulnerability management and security assurance. Strong knowledge of OWASP MASVS, MASTG and industry-recognised mobile security standards and testing methodologies. Proven experience ...

project lifecycle. Responsibilities Design and develop security architectures for secure infrastructure and network environments. Produce high and low-level security architecture documentation. Conduct threat modelling, security risk assessments and vulnerability analysis. Define security controls aligned to Secure by Design principles. Support security assurance, accreditation and governance activities. Work …/IPS and boundary protection PKI, cryptography and key management Identity & Access Management (IAM) and Privileged Access Management (PAM) Secure by Design principles Threat modelling and security risk assessment Experience producing security architecture artefacts and supporting security accreditation activities. Good knowledge of: NCSC guidance JSP 440 MOD security ...

hands‐on, on the problems that carry the most risk. Anaplan is not a simple SaaS application. The platform performs highly dimensional, enterprise‐scale modelling with responsive recalculation and strong correctness expectations. The technical surface area includes the legacy Hyperblock engine, the newer Polaris engine, and a growing … tool and authorisation boundaries, and abuse and prompt‐injection defences, informed by references such as MITRE ATLAS and the OWASP LLM Top 10. Lead threat modelling on the riskiest systems: and turn the findings into concrete design changes. Drive secure‐by‐design into the supply chain and attack ...

hands‐on, on the problems that carry the most risk. Anaplan is not a simple SaaS application. The platform performs highly dimensional, enterprise‐scale modelling with responsive recalculation and strong correctness expectations. The technical surface area includes the legacy Hyperblock engine, the newer Polaris engine, and a growing … tool and authorisation boundaries, and abuse and prompt‐injection defences, informed by references such as MITRE ATLAS and the OWASP LLM Top 10. Lead threat modelling on the riskiest systems: and turn the findings into concrete design changes. Drive secure‐by‐design into the supply chain and attack ...

Governance team The AI Security Engineer is responsible for securing AI platforms and systems against adversarial threats. The role focuses on technical security controls, threat modelling, red teaming, and continuous monitoring of AI systems. Role details Title: AI Engineer/Azure Artificial Intelligence Engineer Location: can be either … programming experience (Python, C#, or Java) Your role will focus on:- Design and implement security controls for AI and LLM systems Perform AI-specific threat modelling and risk analysis Lead red team and blue team testing of AI platforms This is a really interesting role and a great ...

Governance team The AI Security Engineer is responsible for securing AI platforms and systems against adversarial threats. The role focuses on technical security controls, threat modelling, red teaming, and continuous monitoring of AI systems. Role details Title: AI Engineer/Azure Artificial Intelligence Engineer Location: can be either … programming experience (Python, C#, or Java) Your role will focus on:- Design and implement security controls for AI and LLM systems Perform AI-specific threat modelling and risk analysis Lead red team and blue team testing of AI platforms This is a really interesting role and a great ...

Railway Cyber Security) IEC 63452 (Railway Rolling Stock Cyber Security) Conduct or oversee penetration testing activities, vulnerability assessments, architecture reviews, risk assessment and threat modelling for rail clients. Provide expert interpretation of cyber security requirements for railway operators, manufacturers, and integrators. Ensure security recommendations are aligned with safety … environments. Practical experience in penetration testing or security assessment methodologies (not necessarily a full-time tester, but capable). Experience with secure architecture review, threat modelling, and risk assessment in industrial or transport environments. Domain Knowledge In-depth understanding of the rail operational ecosystem, including signalling, rolling stock ...

assurance for large, complex and regulated organisations. Assess cloud, hybrid and on‐premises architectures across identity, networks, applications, platforms and data. Carry out threat modelling and identify credible attack paths, design weaknesses and control gaps. Judge whether proposed or alternative controls provide equivalent, proportionate protection. Review high‐level … should also have: Substantial experience as a practising security architect in large, complex or regulated organisations. Strong command of secure‐by‐design principles, threat modelling and architecture assurance. Practical experience across cloud, hybrid infrastructure, identity, networks, applications and data security. Excellent written English and the ability to explain ...

defence to deliver agentic infosec solutions aligned to our target operating model. Key Responsibilities Design security solutions for AI-driven and agentic systems Conduct threat modelling (AI-specific and traditional) and risk reviews Support the embedding security across the end-to-end agentic SDLC (design, test, release, governance … within information security, ideally with a hands‐on background in application or infrastructure security Solid understanding of core security principles and architectures Experience with: Threat modelling Secure system design Embedding security within the SDLC Exposure to AI and agentic systems (practical or conceptual), including: Security and governance ...

bring your ambition to work every day, which is why, at British Airways the sky is never the limit. The role: Cyber Threat Lead This role reports to the Cyber Threat Intelligence Manager, working with IAG and BA business to ensure BA is identifying, understanding and responding … Leading the effort to identify and report cyber threats relevant to British Airways, covering both tactical and strategic requirements Technical leader for cyber threat identification across BA Support the Cyber Threat Intelligence Manager in active threat management for BA, ensuring timely, specific, and relevant cyber threat ...

bring your ambition to work every day, which is why, at British Airways the sky is never the limit. The role: Cyber Threat Lead This role reports to the Cyber Threat Intelligence Manager, working with IAG and BA business to ensure BA is identifying, understanding and responding … Leading the effort to identify and report cyber threats relevant to British Airways, covering both tactical and strategic requirements Technical leader for cyber threat identification across BA Support the Cyber Threat Intelligence Manager in active threat management for BA, ensuring timely, specific, and relevant cyber threat ...

Looking ForWe are looking for a Principal Threat Modeling Architect. You will be responsible for leading the enterprise Threat Modeling program, establishing threat modeling standards, methodologies, and governance, and building a high-performing team of threat modeling professionals. You will partner with application development, cloud engineering … organization, a function that is critical to the firm's ability to design and deliver secure technology solutions. As cyber threats continue to evolve, threat modeling serves as a foundational security practice that enables the organization to identify architectural weaknesses early, reduce risk, strengthen security-by-design practices ...

ABOVE SECRET environments, ROSA, Garrison, Citadel, VCF, Cross-Domain Solutions Zero Trust, IDAM & PKI - conditional access, hybrid identity, cryptography, HSMs, IAM, RBAC, OIDC, federation Threat Modelling - STRIDE/STRIDE-LM, attack-surface analysis, trust boundary modelling, design reviews Network & Boundary Security - Checkpoint, Palo Alto, Fortinet, Cisco, Juniper ...

policies, network segmentation, and secrets management Configure and tune SIEM (or similar) for cloud-focused detection Establish logging, monitoring, and alerting requirements based on threat modelling Investigate and respond to cloud security events Risk & Compliance Identify, articulate, and escalate security risks to senior leadership with mitigation plans Track ...

Infrastructure as Code (Terraform, Bicep, ARM, Ansible) Design secure Azure, AWS and hybrid cloud environments Implement vulnerability management, security monitoring and automated compliance Support threat modelling, security architecture reviews and risk assessments Drive adoption of Secure Software Development Lifecycle (SSDLC) best practice Implement container and Kubernetes security across ...

operations sit at the heart of that ambition. What you will be doing Security architecture and engineering Define security architecture standards and lead threat modelling across the organisation Establish and maintain long‐term security architecture aligned to business strategy and regulatory requirements Guide technology decisions at an enterprise … level, including cloud strategy and zero trust adoption Oversee penetration testing, DLP, and advanced threat detection programmes Own the vulnerability management programme Implement enterprise frameworks including IAM, SIEM, and data classification Anticipate emerging threats, leverage AI/ML for predictive security, and set the technology vision Lead the Security ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the the company Security presales and Architecture function supporting the development of proposals, solution options … Build trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

Responsibilities of a Cloud Security Specialist Design secure AWS architectures, patterns and security controls Apply security, regulatory and compliance requirements to cloud environments Conduct threat modelling and risk assessments across AWS workloads Support large-scale cloud migration and transformation projects Collaborate with architects, engineers and cyber security teams ...