8 of 8 Threat Modelling Jobs in Sheffield

engineering, platform, and central architecture/governance teams, they run design and governance forums and influence without authority. They'll bring genuine cybersecurity expertise-threat modelling, security controls, identity and access, encryption, logging, and secure SDLC-so CSA's platforms and products can be trusted in production … cloud platforms and traditional on‐premise hosting; hands‐on experience with Azure, AWS and/or GCP is beneficial. Proven security architecture expertise, including: Threat modelling and secure‐by‐design practices IAM (RBAC/ABAC), privileged access concepts, and service‐to‐service authentication Encryption in transit/ ...

/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience ...

/CD pipelines, build tools, artifact repositories and developer platforms Expertise in secure software delivery, vulnerability management and platform security Experience with threat modelling, security frameworks and maturity assessments Strong knowledge of application security, network security and cloud security principles More details available on successful application. ...

traditional on-premise hosting; hands-on experience with Azure, AWS and/or GCP is beneficial. Proven security architecture expertise is beneficial, including: Threat modelling and secure-by-design practices IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication Encryption in transit/at rest ...

creating actionable alerts, defining SLOs and SLIs, and leading incident response and post‐incident improvement activities. Embed security by design through secure coding practices, threat modelling, role‐based access control and least privilege, secrets management including Key Vault integration, and modern identity patterns using OAuth2 and OIDC. Coach ...

think enterprise grade and demonstrates ambition in problem solving. Matrixed Collaboration & Stakeholder Management Cross-Functional Orchestration: Act as the central nexus between Cyber (threat intelligence and architecture), CTO/CIO (engineering, platform, and infrastructure delivery), and CRO (regulatory compliance and operational risk). Influence Without Authority: Navigate a complex … Stack Mastery: Proven track record of scaling modern AppSec tooling, API security gateways, cloud-native application protection platforms (CNAPP), and automated vulnerability orchestration pipelines. Threat Modeling Expertise: Strong command of threat modeling methodologies (e.g., STRIDE, PASTA) tailored for complex, interconnected banking applications. Functional & Cultural Leadership Matrix Leadership ...

signing, enterprise software deployment, or application updating* Experience designing APIs or shared platform components consumed by multiple applications or teams* Experience with software security threat modeling or secure desktop application design* Experience mentoring engineers or providing technical leadership within a development team **The Ideal Candidate**You enjoy solving problems ...

pipeline implementation with the engineer responsible for CI/CD and release automation* Work closely with Autodesk application-security specialists to develop threat models, address security findings, apply Electron and Chromium security best practices, and ensure privileged desktop functionality is exposed safely* Collaborate with specialist graphics and rendering teams … enterprise software deployment* Experience designing shared APIs, SDKs, runtimes, or platform components consumed by multiple products or engineering teams* Experience with desktop application threat modeling and secure application architecture* Experience with software supply-chain security, dependency management, vulnerability response, and release provenance* Experience defining operational standards for a customer ...