76 to 100 of 367 Threat Modelling Jobs in England

SDLC and DevSecOps including SAST DAST SCA and secrets management in CI/CD Define and maintain secure coding standards security acceptance criteria and threat modelling processes for engineering teams Partner with engineering teams to triage and prioritise vulnerabilities ensuring remediation SLAs are met using CVSS and EPSS … generation open‐source dependency risk and third‐party component governance aligned to DORA and NCSC guidance Shape the divisional AI security function including AI threat models and governance aligned to the EU AI Act the organisation’s AI risk framework and relevant PRA and FCA guidance Own the divisional ...

earn their trust and enable their best work, you'll need to be genuinely close to the craft — able to engage at depth on threat modelling, agentic security tooling, SDLC design, and application risk. You'll also own AppSec strategy and be accountable for how the function scales … context into a clear, prioritised programme of work with measurable outcomes. Be a credible technical partner to your team — able to engage substantively on threat models, security architecture, agentic tooling design, and risk decisions, and willing to get into the details when it matters. Define and maintain the team ...

standards, reference architectures, control patterns and assessment methodologies for AI models, LLM and agentic AI systems and AI development platforms. Lead security architecture reviews, threat modelling and technical assurance for high-risk AI systems, products and material changes. Establish and improve model-assurance requirements for third-party … security initiatives from assessment and design through implementation, validation and operational handover, with measurable adoption and risk-reduction outcomes. Experience leading security architecture reviews, threat modelling and remediation through the software or product development lifecycle. Strong understanding of AI security threats and mitigations. Experience designing or assessing security ...

part of a bigger team, working with a group of a Senior Security Architects and Digital Engineering stakeholders to produce security architecture artifacts, threat modelling, design assurance, and reusable patterns that strengthen the programmes security posture. Key Responsibilities: You will lead and deliver core security architecture outputs including … Digital Engineering Security Artifacts and Engagement Report Security Requirements Specification Security Principles Framework Infrastructure Mapping Document & Security Architecture Design Pack Threat Modelling Report Reusable Security Pattern Library Knowledge Transfer Pack (training materials, handover content, recorded walkthroughs) We are looking for someone with: Extensive Security Architecture/Security Consulting ...

environment. The Opportunity This is a senior technical leadership role responsible for driving strategic security engineering initiatives across vulnerability management, application security, AI security, threat modelling, security analytics, and metrics engineering. You will build and lead a high-performing engineering function while delivering scalable, automated security services that … tooling and platforms. Drive vulnerability, exposure, and security posture management across complex technology estates. Develop and enhance application security, API security, AI security, and threat modelling capabilities. Establish security metrics, reporting, and analytics platforms to measure control effectiveness. Build automation-first engineering practices and integrate security into DevOps ...

environment. The Opportunity This is a senior technical leadership role responsible for driving strategic security engineering initiatives across vulnerability management, application security, AI security, threat modelling, security analytics, and metrics engineering. You will build and lead a high-performing engineering function while delivering scalable, automated security services that … tooling and platforms. Drive vulnerability, exposure, and security posture management across complex technology estates. Develop and enhance application security, API security, AI security, and threat modelling capabilities. Establish security metrics, reporting, and analytics platforms to measure control effectiveness. Build automation-first engineering practices and integrate security into DevOps ...

architectures and control patterns for AI agents, including identity, permissions, tool use, data access, memory, human oversight, logging and containment. Lead security risk assessments, threat modelling and assurance reviews for high-risk agentic AI use cases, platforms and material design changes. Develop and apply test scenarios for agentic … meetings and collaboration. Qualifications: Demonstrated experience delivering security controls from design through implementation, validation and operational handover across cross-functional engineering teams. Experience with threat modelling, security assessment and remediation for applications, cloud services, APIs or AI-enabled systems. Strong understanding of agentic AI security risks and controls ...

following: Systems and operating systems: strong understanding of operating system architecture, systems engineering and platform security, ideally with significant Linux experience. Security architecture: threat modelling, security boundaries, attack surfaces, hardening and secure-by-design principles. Networking: TCP/IP, DNS, routing, segmentation, firewalls, TLS, VPNs and secure communications. … customer requirements from technical, security and delivery perspectives. Identify opportunities for common platforms, services and tooling. Lead security architecture Lead or contribute to threat modelling and architectural risk assessments. Set and promote good practice around system hardening, trust, PKI, cryptography and network security. Ensure security and assurance requirements ...

they’re effectively configured, maintained, and scaled as the business grows Embed secure-by-design practices into the development lifecycle — from secure coding and threat modelling to design reviews and CI/CD hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure … like OWASP and AWS Well-Architected to real-world scenarios Have experience reviewing and improving product and infrastructure security, including secure SDLC practices (e.g. threat modelling, secure code review, CI/CD hardening) Are familiar with compliance frameworks like ISO 27001 or SOC 2 , and can translate technical ...

experience in several of the following: Systems and operating systems: OS architecture, systems engineering and platform security, ideally with significant Linux experience. Security architecture: threat modelling, security boundaries, attack surfaces, hardening and secure-by-design principles. Networking: TCP/IP, DNS, routing, segmentation, firewalls, TLS, VPNs and secure … equally interested in exceptional architects from adjacent technical disciplines with the right systems and security expertise. Additional Responsibilities You'll lead or contribute to threat modelling and architectural risk assessments, promoting good practice around system hardening, trust, PKI, cryptography and network security. You'll contribute to secure development ...

Build for long-running, concurrent offensive-security workloads, owning the reliability, capacity, latency and cost characteristics that come with them. Engineer for an unusual threat model. Our platform intentionally runs offensive tooling against customer environments. Authorisation, tenant isolation, secrets, controlled execution, threat modelling and auditability are fundamental … reliable afterwards. You're comfortable across containers, cloud infrastructure and infrastructure-as-code. You have strong security instincts. You understand authorisation, secrets, isolation and threat modelling, and know when a design deserves suspicion. AI is already part of how you engineer software. You've gone beyond autocomplete ...

contract where you can lead the security workstream on a genuinely high-profile project? Do you enjoy working across the full lifecycle, from threat modelling and risk assessment through to customer-facing assurance documentation? My client is an established manufacturer of precision technology, delivering solutions used across … into the Embedded Software Engineering Manager. Your responsibilities: Your day-to-day work will involve identifying vulnerabilities and developing the project's risk assessment, threat model and security architecture, ensuring security risks are proportionately treated and clearly evidenced. You'll be advising engineering teams on security controls across ...

risk within technology projects by ensuring appropriate security requirements, controls, monitoring, and assurance activities are identified, specified, and evidenced throughout the project lifecycle. Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls. Define monitoring … looking for experience in the following skills: Strong technical knowledge in at least one of the following areas: Public cloudApplication securityNetworkingOn-premises infrastructureUnderstanding of threat modelling, security controls, and risk analysis principles. Ability to assess risks and recommend proportionate security controls and monitoring measures, rather than relying solely ...

Performance: Design solution‐wide UI resilience (graceful degradation, back‐pressure, retry strategies) and own performance standards across web and mobile. Quality, Security & Compliance: Own threat modelling and security hardening for tribe front‐end products; maintain high standards through code review, secure coding practices, and risk management. External Representation … zero‐downtime deployments, observability, performance budgets). Experience with Azure development and cloud‐based infrastructure , including CI/CD and pipeline observability. Experience owning threat modelling and security hardening for front‐end products; strong grasp of OWASP and secure coding practices. Track record of originating and shepherding cross ...

London/GlasgowThe AI Security Engineer is responsible for securing AI platforms and systems against adversarial threats. The role focuses on technical security controls, threat modelling, red teaming, and continuous monitoring of AI systems. Responsibilities: Design and implement security controls for AI and LLM systemsPerform AI-specific threat modelling and risk analysisLead red team and blue team testing of AI platformsConduct prompt injection and adversarial testingImplement monitoring, logging, and alerting for AI behaviourSecure AI pipelines, APIs, and orchestration layersSupport secure deployment and CI/CD practicesSkills & Experience: Strong background in security engineering and cloud securityHands ...

across Lloyds Bank, Halifax, Bank of Scotland and Scottish Widows. You'll help design, build and enhance a world-class mobile security framework, leading threat modelling, security assessments, penetration testing capabilities and security tooling across Android and iOS platforms. Working within agile teams, you'll drive continuous improvements … impact and do the best work of your career, you've just found it What we're looking for? Experience of mobile platform security, threat modelling and mitigation techniques Strong hands-on experience conducting reviews of mobile application security posture Experience developing and maintaining penetration testing tools, scripts ...

assurance for large, complex and regulated organisations. Assess cloud, hybrid and on-premises architectures across identity, networks, applications, platforms and data. Carry out threat modelling and identify credible attack paths, design weaknesses and control gaps. Judge whether proposed or alternative controls provide equivalent, proportionate protection. Review high-level … should also have: Substantial experience as a practising security architect in large, complex or regulated organisations. Strong command of secure-by-design principles, threat modelling and architecture assurance. Practical experience across cloud, hybrid infrastructure, identity, networks, applications and data security. Excellent written English and the ability to explain ...

applied to architectures, technical decisions, and third-party integrations. Your work will involve maintaining and prioritizing the product’s security backlog, coordinating risk assessments, threat modelling, and vulnerability assessments, and ensuring that required security controls (e.g., access control, encryption, secure configuration) are implemented and evidenced. You will monitor … security by design and by default” across architectures, user stories, technical decisions, and third-party integrations Proficiency in coordinating product-level security risk assessments, threat modelling, and vulnerability assessments, as well as maintaining a prioritized security backlog Experience interpreting and cascading central security policies, standards, and regulatory requirements ...

looking for a Cyber Threat & Vulnerability Analyst to join our Cyber Security team, helping protect the systems that deliver essential water services to millions of customers every day. You'll play a key role in identifying, assessing, and reducing cyber risk across a large and complex technology estate, making … closely with technical teams and business stakeholders to keep our services safe, resilient, and running smoothly. What you'll be doing as a Cyber Threat & Vulnerability Analyst: As a Cyber Threat & Vulnerability Analyst, you'll be responsible for supporting and improving how we identify, assess, and manage cyber ...

influencing projects from inception through to deployment while providing practical, pragmatic security guidance. Key Experience Secure by Design & Security Assurance Security Architecture & Design Reviews Threat Modelling & Risk Identification Microsoft Security Stack (Identity, Endpoint, Cloud & Monitoring) Security Platform Configuration & Support Security Standards, Controls & Governance Vendor & Security Tool Management Stakeholder … Across Engineering & Delivery Teams What You'll Be Doing Embed security into projects and programmes from day one Conduct security design reviews and lightweight threat modelling Drive security assurance throughout the delivery lifecycle Enhance configuration, adoption and effectiveness of security platforms Support onboarding and implementation of new security ...

role blends incident response, detection engineering, and SOC automation, with emphasis on building tools and systems rather than mere monitoring. The team performs threat modelling, threat hunting, and ongoing tuning of detection logic, while sharing best practices across the firm. English fluency is essential. #J-18808-Ljbffr ...

Help reduce cyber risk across technology programmes by identifying, defining, and assuring appropriate security requirements, controls, and risk treatments throughout the project lifecycle. Conduct threat modelling exercises using industry frameworks such as MITRE ATT&CK to identify credible threats and recommend proportionate security controls. Design and advise … following domains: Cloud security (Azure, AWS, GCP) Network security Identity and Access Management (IAM) Application security/DevSecOps Infrastructure and platform security Continuous Threat Exposure Management Ability to analyse technical risks and communicate recommendations to both technical and non-technical stakeholders. Strong written, verbal, and presentation skills. Demonstrated ability ...

NIST 800‐53. Partner with Product & Engineering: Embed DevSecOps and secure SDLC practices into our CI/CD pipelines; oversee pentesting, red teaming, and threat modeling across our core infrastructure. Enable Enterprise Sales: Serve as the technical security authority in high‐stakes customer procurement reviews, vendor risk assessments (DDQs ...

Recruitment seeks an experienced Threat Intelligence and Vulnerability Manager for a 6-month contract in London. This hands-on leadership role coordinates Threat Intelligence, Vulnerability Management, Threat Modelling, Security Testing and External Threat Hunting within a complex, high-profile environment. You will identify emerging threats ...

Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance. Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security. Design secure architectures across Azure, AWS, Google Cloud, SaaS, and on-premises environments. Lead integration of identity, security … consultancy and managed service opportunities. Qualification & Experience Experience in Security Architecture, Enterprise Architecture, or Cyber Security Consulting. Strong expertise in Zero Trust, security governance, threat modelling, risk management, and cloud security. Advanced Microsoft security experience across Entra ID, Defender, Sentinel, Purview, Intune, Azure Security, and Microsoft 365 Security. ...