1 to 25 of 99 Remote/Hybrid Threat Modelling Jobs in London

hands-on security engineering role. The role requires someone who can work directly with product and engineering teams, review designs, assess APIs, run threat models, test systems, coordinate penetration testing, identify vulnerabilities, and help teams remediate issues. The role ensures DTS products, APIs, data collaboration capabilities, AI-enabled workflows … scanning, and container scanning. Helping teams triage, prioritise, and remediate security findings. Working with engineering teams to make security checks practical and repeatable. 3. Threat Modelling and Security Design Reviews Run threat modelling and security design reviews for new and changed capabilities. This includes: Facilitating threat ...

heart of the role, you'll remain technically engaged throughout delivery. You'll work alongside engineering teams to understand solutions, identify security risks, support threat modelling and design reviews, and provide practical guidance that helps teams build securely. Where deeper specialist knowledge is required, you'll work with … programme, the maturity of the Information Security Front Door, and the consistent application of proportionate, risk based security assurance. You'll help improve threat modelling and security review practices, ensure security risks are clearly understood and prioritised, and help delivery teams access the right Information Security expertise when ...

Application Security Engineer. You'll work closely with engineering teamsto deliver day-to-day AppSec capabilities across security tooling, vulnerability management,secure design and threat modelling, while helping shape how Application Security operates asthe function matures. Key Responsibilities Vulnerability Management & Security Tooling Support the rollout and operation … design and API security reviews for new services, integrations, and RFCs Review and respond to penetration test requests and third-party integration reviews Facilitate threat modelling sessions using the team's runbook/guide Work with engineering teams to establish and improve threat modelling practices acrosssquads ...

Security Engineer/Security Consultant (Application Security & Threat Modelling) Rate - £550 - £650 Outside IR35 Duration - 6 months initial Location - Bristol/London (once a week/remote) Role overview: A leading Financial Services is seeking an experienced Security Engineering Consultant on a contract basis. The successful candidate will … embedded within engineering tribes, providing security consultancy and guidance to development teams throughout the software development lifecycle. The primary focus of the role is threat modelling. The consultant will conduct threat models for new and existing products, identify risks at the design stage and work with developers ...

recruiting Threat Modelling Associates to join our client, one of the Big Four. You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences. Role: Threat Modeling Contract duration: 6 months initially (with scope to extend) Location: Hybrid – 4 days a week in London … office, 1 day working from home. We are recruiting Threat Modelling Associates to join our client, one of the Big Four. You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences. Role: Threat Modeling Day rate: £450 – 500 per day (inside IR35 ...

central Security Architecture function, you’ll partner with architects, engineering teams and senior stakeholders across the business to provide expert guidance on security design, threat modelling, governance and emerging technology risks. With the increased adoption of cloud technologies, APIs, AI solutions and modern application platforms, this role offers … pragmatic and risk-based manner. Key responsibilities include: Conducting end-to-end security architecture and design reviews across technology initiatives. Performing structured threat modelling using methodologies such as STRIDE. Producing and maintaining security standards, architecture patterns and technical guidelines. Providing expert security consultancy throughout project lifecycles. Assessing security ...

/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services and architecture changes. Validate fixes and identify root causes to reduce recurring vulnerabilities. … prioritise and remediate security issues. Hands‐on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting knowledge to understand unfamiliar code and contribute to automation. The confidence to work independently ...

/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services and architecture changes. Validate fixes and identify root causes to reduce recurring vulnerabilities. … prioritise and remediate security issues. Hands-on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting knowledge to understand unfamiliar code and contribute to automation. The confidence to work independently ...

Engineer on Mystra, you'll own application security end-to-end across multi-tenant, trillion-row-scale, AI-enabled data platforms. You'll lead threat modelling and design review with product teams, build the tooling and patterns that make secure codet, and find and fix the vulnerabilities that … steered by your own expert judgement and intuition, to keep Genomics secure against state-of-the-art threats. A Day in the Life Leading threat modelling and design reviews for new products and infrastructure, and defining the security invariants every team builds against: tenant isolation, authentication and authorisation ...

dayLondon, England Contract Threat Intelligence Analyst594 per day (Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Threat Intelligence Analyst | Cyber Security | Enterprise SecurityWe are currently recruiting for an experienced Threat Intelligence Analyst to join a major cybersecurity … programme supporting critical business and technology operations. This is an exciting opportunity for a security professional with strong experience in Threat Intelligence, Enterprise Security Architecture, Platform Security, and Security Architecture Design to help identify, analyse, and mitigate emerging cyber threats across complex environments. Working within a highly skilled cybersecurity ...

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting. This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits. You will be responsible for: Designing and implementing threat ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

Lead security architecture reviews across new products, platforms, APIs, applications, integrations and data solutions, translating threats and risks into practical engineering requirements. Drive a threat-led approach to security , using threat modelling, attacker behaviour and frameworks such as MITRE ATT&CK to inform architecture decisions and prioritise … including end-to-end ownership of security architecture for modern software products and solutions. Strong knowledge of product and application security , including secure SDLC, threat modelling, vulnerability management and security testing. Strong understanding of cloud and platform security , alongside the ability to work with on‐premise and legacy ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through …/DAST tooling, API security, and container security in agile delivery contexts. Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector ...

expert security design guidance to delivery and engineering teams. Review solution and product designs to ensure compliance with security standards and best practice. Conduct threat modelling and security risk assessments. Design security controls aligned to organisational risk appetite. Support the deployment of cloud-based services, predominantly within Azure … Good knowledge of ISO 27001, NIST CSF and CIS Controls. Experience with Azure security services, identity management and cloud-native security controls. Exposure to threat modelling and risk assessment methodologies. Understanding of security assurance and controls testing activities. Excellent stakeholder engagement and communication skills. Desirable Skills & Certifications CISSP ...

Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling for major projects and new technologies Taking a lead role in the secure adoption of Microsoft 365 Copilot, AI agents and custom … engineering and incident response Supporting complex and high‐severity security incidents alongside internal teams and external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting technical controls and evidence ...

governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps … Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications ...

governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps … Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications ...

stakeholders on Secure by Design principles and security best practices. Reviewing and assuring solution designs against established security standards, patterns and architectural frameworks. Leading threat modelling, risk assessments and security design reviews. Identifying security risks and recommending effective mitigation strategies. Supporting cloud-first solutions across Azure and wider … engineering, assurance and risk teams to validate security controls. Producing high-quality security architecture artefacts, standards and blueprints. Monitoring emerging cyber threats and incorporating threat intelligence into security decision-making. Experience Required Extensive experience in Security Architecture within Central Government or the wider Public Sector. Strong understanding ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

secure‐by‐design culture across the business. Key responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers … software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility Please note ...

secure‐by‐design culture across the business. Key responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers … software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility Please note ...

complex enterprise IT and operational technology environments. Work with technical and solution architects to embed security throughout the design and delivery lifecycle. Apply threat modelling techniques to identify threats and define appropriate security requirements. Provide specialist advice on security risks, threat-based mitigation and system design. Manage … premises architecture and virtualisation Cloud platforms and containerisation Databases and LLM technologies Mobile technologies and application security Security architecture and secure-by-design principles Threat modelling, risk assessment and security requirements Security controls, protective monitoring and IAM Previous experience working specifically as a Security Architect is desirable ...

Architect for remote UK work with Active SC clearance. You will guide security design across delivery and engineering, review designs for compliance, and lead threat modelling and risk assessments. The role focuses on Azure security services and cloud-native controls within regulated government contexts. The position requires strong ...

Senior Security Engineer - AI, you will: Design and develop security solutions for AI-driven and agentic systems. Conduct both traditional and AI-specific threat modelling and risk assessments. Support the embedding of security controls throughout the end-to-end agentic SDLC, including design, testing, release and governance. Develop … ideally with a hands-on background in Application Security or Infrastructure Security. Strong understanding of core security principles, controls and architectures. Proven experience in: Threat modelling Secure system design Embedding security within the Software Development Lifecycle (SDLC) Exposure to AI and agentic systems, either through practical implementation ...