76 to 100 of 169 Threat Modelling Jobs in England

needs to product leadership and engineers Broad experience with information, system, and network security concepts and components Demonstrated experience with architecture and security reviews, threat modeling applications and identifying areas of risk Experience implementing strategies to support secure and compliant architectures Deep understanding of the OWASP Top 10 application ...

security considerations (securing AI workloads, data exposure risks) and/or using AI tooling to augment security engineering workflows. Ability to contribute to threat modelling and communicate security risk clearly to engineering and product audiences. A growth mindset and genuine curiosity to keep learning. SC‐200 (Microsoft Security … Operations Analyst) certification. KQL proficiency for detection rule authoring and threat hunting. Experience working in a similar fintech or financial services environment. All are welcome: At Flagstone, we’re assembling a diverse team that defies our industry’s norms. Think this role could suit you? We encourage ...

network, application, data and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero-trust security models and continuous verification frameworks. Cyber Threat & Risk Management Assess cyber threat landscape and design threat-informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident … response, threat intelligence and cyber defence capabilities. Architect security monitoring, detection and response solutions. Design business continuity and cyber resilience frameworks. Compliance & Standards Implementation Ensure security architectures comply with MOD security requirements and ITAR regulations. Design security solutions supporting Information Security Management System (ISMS) compliance. Architect compliance and audit ...

network, application, data, and endpoint layers. Lead security architecture reviews and technical security assessments. Design zero‐trust security models and continuous verification frameworks. Cyber Threat & Risk Management – Assess cyber threat landscape and design threat‐informed security architectures. Lead security risk assessments and vulnerability management programmes. Design incident … response, threat intelligence, and cyber defence capabilities. Architect security monitoring, detection, and response solutions. Design business continuity and cyber resilience frameworks. Compliance & Standards Implementation – Ensure security architectures comply with MOD security requirements and ITAR regulations. Design security solutions supporting ISMS compliance. Architect compliance and audit capabilities for regulatory reporting. ...

engineering and project teams, ensuring all deliverables align with security standards (e.g. NIST CSF 2.0) and protect information assets (Confidentiality, Integrity, Availability). Lead threat modelling, risk assessments, and secure coding initiatives (especially in Python and Azure environments) across the chatbot lifecycle and broader IT systems, mitigating vulnerabilities ...

cloud, and OT infrastructure. Act as the technical Security Design Authority for new capital projects, system changes, and third-party supplier solutions. Conduct threat modelling and architectural risk assessments to identify control gaps and drive resilience. Collaborate closely with 24/7 operations, network engineering, and OT teams ...

background. Hands-on experience securing LLMs, GenAI, RAG solutions and AI agents. Experience with Azure OpenAI, AI Foundry and ideally GCP Vertex AI. AI threat modelling, red teaming, prompt injection testing and security control design. Engineering-led mindset with a strong understanding of AI, machine learning and data ...

design and improve cybersecurity governance frameworks, providing strategic advice across areas including: Cyber governance, risk and compliance (GRC) Gap analysis against recognised security frameworks Threat modelling, risk assessments and mitigation planning Security policy development, review and compliance Third-party risk management and cyber resilience Cloud and network security ...

architecture. Experience with firewalls, IDS/IPS, VPNs, NAC and segmentation. Knowledge of Zero Trust architecture. Understanding of secure network design principles. Experience with threat modelling and security risk management. Familiarity with CIS, NIST and ISO27001 frameworks. Strong stakeholder management and documentation skills. CISSP, CCNP Security or equivalent ...

architectures and solution designs (e.g. Privileged Access Management, SSO, IDAM, network security, encryption) Understanding of IT infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and/or cloud security experience preferred SABSA/ ...

architectures and solution designs (e.g. Privileged Access Management, SSO, IDAM, network security, encryption) Understanding of IT infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and/or cloud security experience preferred SABSA/ ...

architectures and solution designs (e.g. Privileged Access Management, SSO, IDAM, network security, encryption) Understanding of IT infrastructure, technical concepts and design methodologies Understanding of threat modelling and reference architecture development Ability to learn and adapt quickly; hands-on network and/or cloud security experience preferred SABSA/ ...

SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance outcomes Lead threat modelling, risk identification, and mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance ...

scanning Support secure SDLC practices such as: Branch protection and quality gates, Secure build and release controls, Artifact integrity and validation checks Assist with threat modelling and secure design reviews in collaboration with architecture teams. Support developers in vulnerability triage and remediation. Tune security tools to reduce false ...

SonarQube, CodeQL, Checkmarx, Fortify, Veracode, Trivy and OWASP ZAP into CI/CD pipelines. Strong understanding of secure coding practices, OWASP Top 10, threat modeling and vulnerability remediation for modern web applications. Working knowledge of React, Angular and Spring Boot application architecture to effectively identify vulnerabilities and recommend secure ...

Design Review & Assessment Conduct detailed security reviews of IT architecture and design documentation Assess security controls and identify gaps against MOD security requirements Evaluate threat models and security assumptions underlying IT designs Review security specifications for completeness and MOD compliance Identify residual security risks and recommend mitigation strategies Support … design principles Technical Knowledge Comprehensive understanding of IT security controls and security frameworks Strong knowledge of network, infrastructure, application and data security Understanding of threat modelling and risk assessment methodologies Familiarity with MOD security requirements, Classification Guides and security policy Knowledge of ITAR regulations and export control requirements ...

GCP. You will build automation, secure APIs, and deliver cloud security solutions through CI/CD pipelines. Applicants should have strong cloud security knowledge, threat modelling expertise, IaC tooling, and relevant AWS/GCP plus Cyber Security certifications, working within an Agile DevOps team. #J-18808-Ljbffr ...

around data protection and network modernisation. Ensure security best practices are followed across projects and tasks, including network and data security controls. Assisting with threat modelling, gap assessments, and risk evaluations for both data and network assets. Promoting the adoption of modern security frameworks and secure‐by‐design ...

information security management systems, e.g. NIST, ISO Experience of developing and managing a Cyber Incident Response capability Experience of developing Security Awareness training including Threat Modelling, table top war gaming Experience in tracing through and evaluating responses to security requirements for a system Experience in maintaining elements ...

cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities and remedial action plans. Coordinating with product ...

Demonstrated ability to engineer or deploy AI Detection and Response (AIDR) workflows utilizing agentic and SIEM technologies, with a strong focus on AI-native threat modeling (e.g., MAESTRO framework). Understanding of Governance, Risk, and Compliance (GRC), specifically managing AI governance policies and enforcing the principle of least privilege ...

that integrate seamlessly into CI/CD pipelines. Analyse complex cloud and Kubernetes architectures to identify and document potential attack vectors, mapping them against threat models to prioritise security improvements. Support defensive hardening efforts by providing actionable insights and telemetry from security validation exercises, ensuring continuous improvement of detection ...

that integrate seamlessly into CI/CD pipelines. Analyse complex cloud and Kubernetes architectures to identify and document potential attack vectors, mapping them against threat models to prioritise security improvements. Support defensive hardening efforts by providing actionable insights and telemetry from security validation exercises, ensuring continuous improvement of detection ...

frameworks that integrate into CI/CD pipelines. Analyze complex cloud and Kubernetes architectures to identify and document potential attack vectors, mapping them against threat models to prioritize security improvements. Support defensive hardening efforts by providing actionable insights and telemetry from security validation exercises, ensuring continuous improvement of detection ...

with Engineering to embed secure‐by‐design principles into development workflows Build, manage, and continuously improve security policies, standards, and controls Lead risk management, threat modeling, and vulnerability management processes Oversee incident detection, response, and recovery planning Drive security awareness and training across the company Establish and manage identity ...