51 to 75 of 169 Threat Modelling Jobs in England

with NIST, ISO 27001 and CSA STAR compliance frameworks. Experience engaging with Information Security, Risk, Control & Compliance, Architecture and Project teams. Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS. Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security ...

Infrastructure as Code, and cloud-native engineering practices. Drive cloud security governance, architecture assurance, security remediation, and control optimisation initiatives. Conduct security architecture reviews, threat modelling exercises, risk assessments, and cloud security maturity assessments. Contribute to business development activities, thought leadership, and the continued growth of our Cloud ...

such as Wiz, Microsoft Defender, and ArmorCode. Prioritise and coordinate remediation efforts based on business impact, exploitability, and risk exposure. Conduct security assessments and threat modelling exercises for new projects and technologies. Ensure security controls align with SOC2, ISO27001, CIS Controls, and organisational risk management requirements. Produce reports … support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling. Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities. Develop automated controls and workflows to enhance governance, compliance, and incident response processes. Skills and Experience Microsoft Entra ID/ ...

CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability management using a range of contemporary tools. Drive AI and automation to enhance security operations and threat detection. Oversee ...

engineering expertise throughout the system development and operational lifecycle, ensuring security requirements are identified and implemented from concept through disposal. Conduct security architecture reviews, threat assessments, and technical risk analysis for classified environments. Support the development and maintenance of system security documentation, security architectures, and security operating procedures. Lead … management, encryption, and identity management solutions Demonstrable experience applying Secure by Design principles in complex IT systems and programmes. Experience conducting security architecture reviews, threat modelling, and risk assessments. Strong understanding of system hardening, security controls implementation, and security testing methodologies. Experience supporting system engineering and security requirements ...

guidance, and where required production of an action plan for vulnerabilities identified with clear recommendations and outcomes to mitigate and address. Delivering risk, threat modelling and analysis for systems, applications and infrastructure. Designing proportional security controls to bring risk within appetite, leveraging native cloud technologies. Producing security architecture ...

guidance, and where required production of an action plan for vulnerabilities identified with clear recommendations and outcomes to mitigate and address. Delivering risk, threat modelling and analysis for systems, applications and infrastructure. Designing proportional security controls to bring risk within appetite, leveraging native cloud technologies. Producing security architecture ...

review architectures at both high-level and detailed design, offering clear and actionable guidance* You have a strong grasp of secure design principles, threat modelling, risk management, and zero trust concepts* You communicate with clarity and empathy, making complex AI security topics easy to understand for non-technical ...

other complex global organisations. Strong knowledge of cloud IAM security models. Experience using Infrastructure as Code tools including Terraform and CloudFormation. Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS. Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security ...

controls into engineering workflows. Collaborate with software development teams to improve secure coding practices. Develop and maintain monitoring, logging, and incident response automation. Support threat modelling and secure architecture reviews. Drive DevSecOps best practices across engineering teams. Contribute to platform engineering and cloud-native application delivery. Required Experience ...

controls into engineering workflows. Collaborate with software development teams to improve secure coding practices. Develop and maintain monitoring, logging, and incident response automation. Support threat modelling and secure architecture reviews. Drive DevSecOps best practices across engineering teams. Contribute to platform engineering and cloud-native application delivery. Required Experience ...

design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines and escalated where required Maintain ...

design principles and integrate security controls into cloud services, Infrastructure-as-Code (IaC), automation frameworks, and CI/CD pipelines Own vulnerability management, threat modelling, exposure management, and remediation governance across AWS and Azure platforms, ensuring security findings are remediated within agreed timelines and escalated where required Maintain ...

Elastic, LogRhythm, ArcSight, Exabeam) Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs) Experience in detection engineering, threat modelling, and attacker behaviour analysis Familiarity with SOAR tools and automation workflows Security Knowledge Understanding of networks, Windows/Linux systems, cloud platforms … Azure, AWS, GCP), identity systems, and endpoint security tools Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies Essential Requirements Degree (or equivalent experience) in a computing or related discipline Proven experience across IT infrastructure and information security Relevant certifications (e.g. GIAC, CISSP, SSCP, Microsoft ...

products. Responsibilities: Owns the development and maturation of security features for Anduril’s products Authors and maintains security documentation including System Security Plans, Threat Analysis and Risk Assessments, and compliance evidence Collaborates and builds solutions with engineering teams to meet and exceed industry-standard security goals Collaborates with manufacturing … applications, network, or embedded systems Experience building, testing, and delivering production-ready systems, especially for embedded and/or Linux systems Experience with structured threat modelling and risk assessment methodologies Experience in building and security autonomous systems and their unique threat model Experience in any previous military ...

exposure to large-scale transformation programmes. Description Design and implement security architectures and controls. Drive security best practices across projects and operations. Lead threat modelling, risk assessments, and security reviews. Support cloud, infrastructure, and application security initiatives. Act as a senior escalation point for security-related matters. Mentor ...

technical problems and thrive in collaborative engineering environments. You'll ideally have experience with: Security architecture for cloud-hosted government or highly regulated systems Threat modelling using recognised methodologies such as STRIDE Kubernetes and DevSecOps security Azure and Microsoft 365 security engineering Secure-by-design development practices Producing ...

continuity strategies aligned to business requirements. Work closely with infrastructure, cloud and cyber security teams to deliver resilient hybrid environments. Conduct cyber resilience assessments, threat modelling and recovery planning. Support cyber recovery testing and resilience exercises. Provide technical leadership and architectural guidance across multiple workstreams. Engage with senior ...

design. Identity & Access Management (IAM/IDAM). Single Sign-On (SSO). Privileged Access Management (PAM). Network Security. Cloud Security. Encryption technologies. Threat modelling. Security frameworks such as ISO 27001, NIST or equivalent. Strong communication and stakeholder management skills. Professional certifications such as CISSP, SABSA or similar ...

state security architectures. Apply frameworks such as TOGAF, SABSA and ArchiMate. Design secure hybrid and cloud-native architectures, with a focus on AWS. Conduct threat modelling, risk assessments and security design reviews. Define security standards, patterns and reference architectures. Provide architecture assurance across cloud, network, infrastructure and enterprise ...

principles are embedded across IT and business projects, acting as a key point of expertise for cybersecurity solutions. Responsibilities include implementing security controls, conducting threat modelling and architecture reviews, and defining secure configurations and standards. The role also ensures systems include robust monitoring, detection, incident response, and recovery ...

compliance management (scanning to remediation), patch management, endpoint protection/anti‐malware, and access control management (e.g., IAM/PAM). Experience with threat modelling and risk assessment applied to cloud architectures and CI/CD pipelines to guide secure design and prioritize risk treatment. Experience with AppSec ...

applying a holistic approach to shape secure solutions that support strategic objectives. Key responsibilities Develop and manage the security vision, architecture specifications, architecture analysis, threat modelling, requirements, standards, design patterns, reference architectures, strategies and roadmaps Apply security design principles to produce practical security architectures Lead security engagement with ...

encryption technologies. Knowledge of cloud security architecture and security best practices. Familiarity with Zero Trust principles and identity-centric security models. Experience undertaking threat modelling, security design reviews or abuse-case analysis. Ability to identify security vulnerabilities and recommend practical mitigations. Understanding of security architecture patterns, segmentation ...

encryption technologies. Knowledge of cloud security architecture and security best practices. Familiarity with Zero Trust principles and identity-centric security models. Experience undertaking threat modelling, security design reviews or abuse-case analysis. Ability to identify security vulnerabilities and recommend practical mitigations. Understanding of security architecture patterns, segmentation ...