1 to 25 of 312 Threat Modelling Jobs in London

future. Department Overview Role Purpose The Security Architect is a hands-on technical practitioner responsible for designing, building, and validating security solutions, conducting technical threat modelling, executing risk assessments, and ensuring regulatory compliance across Motorola Solutions UK (MSI UK) platforms and regional customer environments. Operating within the Cyber … control mapping, technical documentation, and pre‐sales bid support. Focus allocation spans four primary delivery streams: Bespoke Security Solution Design & AI Build (40%), Technical Threat Modelling & Risk Assessments (30%), Regulatory Compliance & Control Verification (20%), and Pre‐Sales Support (10%). Principal Accountabilities & Duties Bespoke Security Solution Design ...

hands-on security engineering role. The role requires someone who can work directly with product and engineering teams, review designs, assess APIs, run threat models, test systems, coordinate penetration testing, identify vulnerabilities, and help teams remediate issues. The role ensures DTS products, APIs, data collaboration capabilities, AI-enabled workflows … scanning, and container scanning. Helping teams triage, prioritise, and remediate security findings. Working with engineering teams to make security checks practical and repeatable. 3. Threat Modelling and Security Design Reviews Run threat modelling and security design reviews for new and changed capabilities. This includes: Facilitating threat ...

Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Security Operations Analyst | Cyber Threat Intelligence | Threat ModellingWe are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing … environments. This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat ...

heart of the role, you'll remain technically engaged throughout delivery. You'll work alongside engineering teams to understand solutions, identify security risks, support threat modelling and design reviews, and provide practical guidance that helps teams build securely. Where deeper specialist knowledge is required, you'll work with … programme, the maturity of the Information Security Front Door, and the consistent application of proportionate, risk based security assurance. You'll help improve threat modelling and security review practices, ensure security risks are clearly understood and prioritised, and help delivery teams access the right Information Security expertise when ...

Application Security Engineer. You'll work closely with engineering teamsto deliver day-to-day AppSec capabilities across security tooling, vulnerability management,secure design and threat modelling, while helping shape how Application Security operates asthe function matures. Key Responsibilities Vulnerability Management & Security Tooling Support the rollout and operation … design and API security reviews for new services, integrations, and RFCs Review and respond to penetration test requests and third-party integration reviews Facilitate threat modelling sessions using the team's runbook/guide Work with engineering teams to establish and improve threat modelling practices acrosssquads ...

Security Engineer/Security Consultant (Application Security & Threat Modelling) Rate - £550 - £650 Outside IR35 Duration - 6 months initial Location - Bristol/London (once a week/remote) Role overview: A leading Financial Services is seeking an experienced Security Engineering Consultant on a contract basis. The successful candidate will … embedded within engineering tribes, providing security consultancy and guidance to development teams throughout the software development lifecycle. The primary focus of the role is threat modelling. The consultant will conduct threat models for new and existing products, identify risks at the design stage and work with developers ...

decisions, APIs, integrations, cloud services, and deployment patterns to identify security risks early in the delivery lifecycle. Mature repeatable approaches for application security reviews, threat modelling, and risk-based assurance across new and changed solutions. Provide guidance and oversight on secure development lifecycle practices, including security requirements, design … review, code and security review considerations, dependency management, secrets management, testing, and release assurance. Conduct threat modelling for internally developed applications, AI-enabled workflows, integrations, automation use cases, and higher-risk technology changes, using STRIDE or similar methodologies. Advise on secure design principles, including identity and access management ...

like you: We're currently hiring a Senior Application Security Engineer to own AppSec end-to-end across our development lifecycle: from design-stage threat modelling through to code review, tooling, and remediation of findings. This is a hands-on engineering role, not a compliance or customer-facing … AppSec programme for Flagstone and report back on its success to relevant stakeholders including leadershipFormalise a secure development lifecycle which includes owning threat modelling and secure design review for new features and systems, working directly with engineering teams during design rather than after the fact, introducing security gates ...

Threat Intelligence and Vulnerability Manager 6-Month Contract | Inside IR35 | London 1-2 Days Per Week We're looking for an experienced security leader to take ownership of Threat Intelligence, Vulnerability Management, Threat Modelling, Security Testing and External Threat Hunting capabilities within a complex, high … uncover vulnerabilities, drive assurance activities, and provide the intelligence needed to strengthen enterprise security across IT, OT, physical and people security domains. Key Experience Threat Intelligence & Threat Hunting Vulnerability Management & Risk Prioritisation Threat Modelling & Security Assurance Penetration Testing & Control Validation Security Operations & Incident Readiness Supplier & Security ...

recruiting Threat Modelling Associates to join our client, one of the Big Four. You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences. Role: Threat Modeling Contract duration: 6 months initially (with scope to extend) Location: Hybrid – 4 days a week in London … office, 1 day working from home. We are recruiting Threat Modelling Associates to join our client, one of the Big Four. You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences. Role: Threat Modeling Day rate: £450 – 500 per day (inside IR35 ...

Month contract based in London with 3 days/week in office. Purpose of the role: We are looking for an experienced Threat Modelling Security Engineer to identify security threats, define effective mitigating controls and manage findings throughout their lifecycle. You will deliver threat models to agreed … timeframes, develop secure Python-based automation and help improve the existing threat modelling service. The role involves presenting technical work to senior and cross-functional stakeholders, while training and supervising junior team members. You will work with minimal supervision across cloud, DevOps and regulated security environments. What ...

Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation. Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies. Act as the technical lead for AI security, helping to establish … incidents, working with internal teams, external SOC providers and specialist partners. Improve vulnerability and exposure management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation. Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory or contractual ...

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

central Security Architecture function, you’ll partner with architects, engineering teams and senior stakeholders across the business to provide expert guidance on security design, threat modelling, governance and emerging technology risks. With the increased adoption of cloud technologies, APIs, AI solutions and modern application platforms, this role offers … pragmatic and risk-based manner. Key responsibilities include: Conducting end-to-end security architecture and design reviews across technology initiatives. Performing structured threat modelling using methodologies such as STRIDE. Producing and maintaining security standards, architecture patterns and technical guidelines. Providing expert security consultancy throughout project lifecycles. Assessing security ...

signs things off. Security has to be designed into what we build, not added afterwards. You'll own our secure development standards, run threat modelling on the work that carries the most risk, and set the direction for how we handle cloud security, identity, vulnerability management and data … they can ship quickly and safely Own our secure development and secure coding standards, and coordinate penetration testing across the delivery lifecycle Run threat modelling on the highest‐risk work, and set up the approach and training so teams can do their own Set the security standards ...

/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services and architecture changes. Validate fixes and identify root causes to reduce recurring vulnerabilities. … prioritise and remediate security issues. Hands‐on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting knowledge to understand unfamiliar code and contribute to automation. The confidence to work independently ...

/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services and architecture changes. Validate fixes and identify root causes to reduce recurring vulnerabilities. … prioritise and remediate security issues. Hands-on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting knowledge to understand unfamiliar code and contribute to automation. The confidence to work independently ...

Engineer on Mystra, you'll own application security end-to-end across multi-tenant, trillion-row-scale, AI-enabled data platforms. You'll lead threat modelling and design review with product teams, build the tooling and patterns that make secure codet, and find and fix the vulnerabilities that … steered by your own expert judgement and intuition, to keep Genomics secure against state-of-the-art threats. A Day in the Life Leading threat modelling and design reviews for new products and infrastructure, and defining the security invariants every team builds against: tenant isolation, authentication and authorisation ...

Access Management (IAM)—directly into emerging engineering streams. Guide technical squads on implementing secure contemporary architectures, safely handling RESTful APIs and containerized microservices. 2. Threat Modelling & Proactive Risk Management Maintain an up-to-date stance on the evolving financial service threat landscape. Lead collaborative Threat Modelling … GitHub Actions, or GitLab CI integrated with logging clusters like Splunk, Datadog, or ELK Stack. Secondary Roles & Responsibilities 1. Operational Research & Incident Advisory Evaluate threat intelligence data and primary risk trends to continuously recommend security enhancements to the platform's security stack. Support incident readiness functions by acting ...

dayLondon, England Contract Threat Intelligence Analyst594 per day (Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Threat Intelligence Analyst | Cyber Security | Enterprise SecurityWe are currently recruiting for an experienced Threat Intelligence Analyst to join a major cybersecurity … programme supporting critical business and technology operations. This is an exciting opportunity for a security professional with strong experience in Threat Intelligence, Enterprise Security Architecture, Platform Security, and Security Architecture Design to help identify, analyse, and mitigate emerging cyber threats across complex environments. Working within a highly skilled cybersecurity ...

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting. This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits. You will be responsible for: Designing and implementing threat ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

Lead security architecture reviews across new products, platforms, APIs, applications, integrations and data solutions, translating threats and risks into practical engineering requirements. Drive a threat-led approach to security , using threat modelling, attacker behaviour and frameworks such as MITRE ATT&CK to inform architecture decisions and prioritise … including end-to-end ownership of security architecture for modern software products and solutions. Strong knowledge of product and application security , including secure SDLC, threat modelling, vulnerability management and security testing. Strong understanding of cloud and platform security , alongside the ability to work with on‐premise and legacy ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through …/DAST tooling, API security, and container security in agile delivery contexts. Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector ...

expert security design guidance to delivery and engineering teams. Review solution and product designs to ensure compliance with security standards and best practice. Conduct threat modelling and security risk assessments. Design security controls aligned to organisational risk appetite. Support the deployment of cloud-based services, predominantly within Azure … Good knowledge of ISO 27001, NIST CSF and CIS Controls. Experience with Azure security services, identity management and cloud-native security controls. Exposure to threat modelling and risk assessment methodologies. Understanding of security assurance and controls testing activities. Excellent stakeholder engagement and communication skills. Desirable Skills & Certifications CISSP ...