76 to 100 of 289 Threat Modelling Jobs in London

scalable solutions.What you’ll be doing: Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments.Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift.Partner … expertise and a passion for security! Here’s what we need:Governance, Risk & Compliance: Risk-based decisions, adherence to regulatory and internal security standards.Threat Modelling and Risk Management: Identify threats and mitigations for complex cloud systems.Cloud Security Expertise: broad knowledge across the following Security Domains and their capabilities within ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to:- Identify business objectives, user needs, risk appetite and cyber security obligations- Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls- Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure)Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence.A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE)Some experience working with security standards such ...

structuring security engagements, including managing scope, stakeholders, and delivery risk. Communicates clearly with both technical architects and non‐technical executives, adjusting without losing accuracy. Threat modelling experience using structured methods such as STRIDE, applied to complex hybrid ecosystems before deployment. Experience working with legacy technical debt in practice ...

/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience collaborating with SOC and Incident Response teams during security events.* Working knowledge of security frameworks and regulations (NIST ...

structuring security engagements, including managing scope, stakeholders, and delivery risk.Communicates clearly with both technical architects and non-technical executives, adjusting without losing accuracy.Threat modelling experience using structured methods such as STRIDE, applied to complex hybrid ecosystems before deployment.Experience working with legacy technical debt in practice: modernising authentication protocols, managing ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).Experience embedding security into CI/CD pipelines and DevSecOps practices.Proven capability in risk assessments, threat modeling, and control gap analysis.Experience collaborating with SOC and Incident Response teams during security events.Working knowledge of security frameworks and regulations (NIST ...

/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience collaborating with SOC and Incident Response teams during security events.* Working knowledge of security frameworks and regulations (NIST ...

control gaps, providing mitigation recommendations.Support governance, risk, compliance, and assurance activities.Contribute to security roadmaps and continuous improvement initiatives.Provide guidance on cloud security monitoring, threat management, and incident response capabilities.Support managed cloud security service engagements where required.Essential Skills & ExperienceProven experience working as a Security Architect within complex enterprise or government … ServicesExperience designing secure cloud solutions within AWS, Azure, or multi-cloud environments.Deep understanding of security architecture principles, frameworks, and best practices.Experience conducting security reviews, threat modelling, and risk assessments.Strong knowledge of identity and access management, network security, encryption, and security monitoring.Experience integrating security into cloud transformation and migration ...

Infrastructure as Code, and cloud-native engineering practices. Drive cloud security governance, architecture assurance, security remediation, and control optimisation initiatives. Conduct security architecture reviews, threat modelling exercises, risk assessments, and cloud security maturity assessments. Contribute to business development activities, thought leadership, and the continued growth of our Cloud ...

technical validation sessions.Security Leadership & StrategyDriving the organization’s Zero Trust strategy and security roadmap.Providing architectural governance and ensuring security best practices across projects.Conducting threat modelling, gap assessments, and risk evaluations for critical applications and network paths.Advocate for the adoption of modern security frameworks and secure-by-design principles.Operations ...

governance, and IT operations sit at the heart of that ambition.What you will be doingSecurity architecture and engineering– Define security architecture standards and lead threat modelling across the organisation– Establish and maintain long-term security architecture aligned to business strategy and regulatory requirements– Guide technology decisions … enterprise level, including cloud strategy and zero trust adoption– Oversee penetration testing, DLP, and advanced threat detection programmes.– Own the vulnerability management programme– Implement enterprise frameworks including IAM, SIEM, and data classification.– Anticipate emerging threats, leverage AI/ML for predictive security, and set the technology vision– Lead Security ...

/CD pipelines. Partner directly with Engineering and Product teams on architectural decisions, technical trade‐offs and secure‐by‐design development. Run threat‐modelling exercises and support developers with secure coding practices across Node.js, React Native and C++ environments. Own vulnerability management, including triage, risk prioritisation, remediation tracking … Kubernetes security architecture Application and API security Secure software development and shift‐left security Vulnerability management and incident response AI‐related security and emerging threat management SOC 2 Type II and ISO 27001 maturity Security automation and CI/CD integration Enterprise customer security requirements Building the company ...

Infrastructure as Code and cloud-native engineering practices Drive cloud security governance, architecture assurance, security remediation and control optimisation initiatives Conduct security architecture reviews, threat modelling, risk assessments and cloud security maturity assessments Contribute to business development, thought leadership and the continued growth of the Cloud Security practice ...

measures and best practicesCoordinating incident response across the organisation to respond to threats and security breachesUpgrade security solutions, research new attack vectors and develop threat modelsPerforming security control audits and coordinating with other teams within the organisation to implement the outcomes of security controlsSkills:Cloud Security and Development ...

best practices Coordinating incident response across the organisation to respond to threats and security breaches Upgrade security solutions, research new attack vectors and develop threat models Performing security control audits and coordinating with other teams within the organisation to implement the outcomes of security controls Skills Cloud Security ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture … building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack ...

security findings Improving secrets management and encryption practices Monitoring cloud activity and investigating suspicious behaviour Supporting incident response and documenting corrective actions Contributing to threat modelling for new services and architecture changes Maintaining evidence and technical controls required for audits and compliance reviews Where it gets technically interesting ...

Responsibilities of a Cloud Security Specialist Design secure AWS architectures, patterns and security controls Apply security, regulatory and compliance requirements to cloud environments Conduct threat modelling and risk assessments across AWS workloads Support large-scale cloud migration and transformation projects Collaborate with architects, engineers and cyber security teams ...

guidance, and where required production of an action plan for vulnerabilities identified with clear recommendations and outcomes to mitigate and address. Delivering risk, threat modelling and analysis for systems, applications and infrastructure. Designing proportional security controls to bring risk within appetite, leveraging native cloud technologies. Producing security architecture ...

guidance, and where required production of an action plan for vulnerabilities identified with clear recommendations and outcomes to mitigate and address. Delivering risk, threat modelling and analysis for systems, applications and infrastructure. Designing proportional security controls to bring risk within appetite, leveraging native cloud technologies. Producing security architecture ...

passionate and talented application security engineer with very deep understanding of OWASP, CWE 25, Data Protection, Access management, software vulnerabilities, best practices design and threat modelling skills, who can work in a dynamic environment. You must be dedicated to able to work with developers in producing secure code ...

cloud, network, infrastructure and application security controls. Review complex technical solutions and ensure they align with security, regulatory and business requirements. Conduct and support threat modelling, risk assessments and vulnerability assessments. Provide technical oversight and recommendations for security testing and penetration testing activities. Support vulnerability management activities, helping ...

using tools such as Wiz, Microsoft Defender, and ArmorCode.Prioritise and coordinate remediation efforts based on business impact, exploitability, and risk exposure.Conduct security assessments and threat modelling exercises for new projects and technologies.Ensure security controls align with SOC2, ISO27001, CIS Controls, and organisational risk management requirements.Produce reports and metrics … support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling.Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities.Develop automated controls and workflows to enhance governance, compliance, and incident response processes.Skills and Experience: Essential Microsoft Entra ID/Identity Governance ...

engineering and DevOps teams to embed security tools (e.g., SAST, DAST, SCA) into CI/CD pipelines.Help maintain and improve automated security testing workflows.Support threat modelling and secure design practices at the project level.Participate in security reviews of new features and applications.Security Testing and ToolingOversee the planning … DevSecOps environments.Hands-on experience with security testing tools (e.g., Veracode, SonarQube, Burp Suite, etc.).Familiarity with secure coding practices, OWASP Top 10, and threat modelling.Experience working in Agile or DevOps-driven environments.Strong verbal and written communication skills.Relevant security or DevSecOps certifications (e.g., CSSLP, CEH, GWEB) preferred.Eligible for SC clearance ...