1 to 25 of 41 Threat Modelling Jobs in the South East

play a critical role in designing, assuring, and delivering secure solutions across our client engagements. You will champion Secure by Design principles and lead threat modelling activities to ensure risks are identified and mitigated early in the lifecycle. Working closely with stakeholders, you will define security architectures, ensure … Design – Embed security into every stage of the solution lifecycle, ensuring systems are designed with security controls from the outset rather than retrofitted. Threat Modelling – Lead and facilitate threat modelling exercises (e.g. STRIDE), identifying vulnerabilities and defining mitigations early in delivery Risk Assessment – Identify, assess ...

love to hear from you.Key ResponsibilitiesAs our Lead AI & Data Security Architect, you'll:Define secure AI adoption patterns and security standards across Bupa.Lead threat modelling and security reviews for AI-enabled solutions, including large language models (LLMs), generative AI tools and autonomous agents.Develop governance frameworks, security controls … leadership roles.Strong experience securing AI, machine learning and cloud-based services.Expert knowledge of Microsoft Azure, Azure OpenAI, AI Foundry and cloud security principles.Experience leading threat modelling, security architecture reviews and control design activities.Strong knowledge of security frameworks including NIST CSF, NIST ...

experience designing and assuring security architectures across cloud (Azure/M365), hybrid, and SaaS environments. Experience of identity and access management, security risk assessment, threat modelling and security governance is essential. You must be able to demonstrate practical depth in Identity and Access Management (IAM/PAM), threat modelling, and security-by-design principles, The ability to translate technical risk into clear business context for senior academic and professional stakeholders is also an essential requirement. Desirable requirements: Relevant professional security or architecture certifications (e.g., CISSP, TOGAF, SABSA, Microsoft Security certifications) and prior experience working within Higher ...

Lead the adoption of reusable global components and shared platforms where they meet UK product and regulatory needs Security, compliance and operational integrity Ensure threat modelling, secure design, privacy by design, vulnerability management and data protection controls are integrated into engineering ways of working. Work with security, risk … automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

standards, reference architectures, control patterns and assessment methodologies for AI models, LLM and agentic AI systems and AI development platforms. Lead security architecture reviews, threat modelling and technical assurance for high-risk AI systems, products and material changes. Establish and improve model-assurance requirements for third-party … security initiatives from assessment and design through implementation, validation and operational handover, with measurable adoption and risk-reduction outcomes. Experience leading security architecture reviews, threat modelling and remediation through the software or product development lifecycle. Strong understanding of AI security threats and mitigations. Experience designing or assessing security ...

architectures and control patterns for AI agents, including identity, permissions, tool use, data access, memory, human oversight, logging and containment. Lead security risk assessments, threat modelling and assurance reviews for high-risk agentic AI use cases, platforms and material design changes. Develop and apply test scenarios for agentic … meetings and collaboration. Qualifications: Demonstrated experience delivering security controls from design through implementation, validation and operational handover across cross-functional engineering teams. Experience with threat modelling, security assessment and remediation for applications, cloud services, APIs or AI-enabled systems. Strong understanding of agentic AI security risks and controls ...

safety-critical airborne mission systems. In this role you will: Develop and maintain security requirements for complex airborne electronic and mission-computing systems Undertake threat modelling, vulnerability analysis and security risk assessments throughout the engineering lifecycle Support the development of security architectures and secure-by-design solutions Produce … Secure by Design principles and relevant product and systems security standards, with experience embedding security throughout an engineering lifecycle Experience undertaking security risk assessments, threat modelling, vulnerability analysis or security requirements development Ability to interpret technical designs and communicate security risks and mitigations to multidisciplinary engineering teams Experience ...

product-security architecture for complex airborne mission systems Define the security strategy, requirements and secure-by-design approach across the programme lifecycle Lead threat modelling, vulnerability analysis, security risk assessment and accreditation activities Provide technical authority and informed security advice across systems, software and hardware engineering Make … aerospace or another safety-critical engineering environment Strong experience defining security requirements and secure-by-design approaches at system or product level Experience leading threat modelling, security risk assessment and vulnerability-analysis activities Experience providing technical leadership and making security architecture decisions across multidisciplinary engineering teams Knowledge ...

business and security requirements, and translate them into practical architectural solutions. Working knowledge of architectural frameworks such as SABSA and TOGAF. Strong understanding of threat modelling, risk assessment, and secure-by-design principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards ...

this role leads the tech refresh and evergreening of security toolsets - ensuring the security technology estate remains current, supported, effective, and aligned with evolving threat landscapes, client policies, and cross-domain architectural patterns. This is a hands-on architecture role, not a governance-only position. The Technical Security Architect … make clear, evidence-based recommendations. Design and review cloud, identity, network, perimeter and platform security solutions. Apply Zero Trust, defence-in-depth and threat-informed design principles. Ensure security architectures align with NIST, ISO 27001, CIS, NCSC and client security requirements. Act as a security design authority, providing technical ...

scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy as Code and threat modelling. A proactive, curious and collaborative approach, with the ability to guide engineering teams, support third-party supply chain security and make complex topics ...

application security analysis, cybersecurity compliance, or IT risk management within a software development or SaaS environment. Practical understanding of Security by Design (SbD) concepts, threat modelling principles, and application security baselines (e.g., OWASP, ISO 27001, NIST). Familiarity with modern software development lifecycles (SDLC), cloud hosting platforms ...

stakeholders, capture business and security requirements, and translate them into practical architectural solutions.Working knowledge of architectural frameworks such as SABSA and TOGAF.Strong understanding of threat modelling, risk assessment, and secure-by-design principles, with the ability to apply outputs to architectural decisions.Experience interpreting and applying security standards, frameworks ...

with Compliance, Legal, and Internal Audit functions Security assessment and management of Westcoast hosted and cloud infrastructure, networks, endpoints, and applications and data against threat models. Including developing testing and remediation plans with tracking. Working with system owners to drive the implementation of identity good practice and in particular ...

current and emerging technologies to select or recommend the best solutions for the future state architecture. Knowledge of application security, MITRE ATT&CK and Threat Modelling. Broad knowledge of controls in the industry (NIST, ISO, PCI, SOC, CSF, ISO27001, SABSA and TOGAF) Identity and Access Management (SAML, OAuth, certs … Identifying security flaws in solutions through threat modelling, architectural assessments and design reviews Identity and Access Management, Data Leakage Prevention, Network and Infrastructure Security Cryptography, Encryption and Key Management, Secrets Management, TLS, IPSec, Ciphers, X509 Application Security Design, DevSecOps, Agile practices, Shift Left concepts and automation You have ...

Lead Security Integration Specialist (Contract) We are looking for an experienced Lead Security Integration Specialist to drive the integration of security governance, threat intelligence, and risk management across complex engineering environments. Working autonomously, you'll bridge the gap between engineering, security, digital teams, and senior stakeholders, ensuring security … security integration policies, processes, and engineering deliverables. Support the creation of: Product Security Integration Policy Security Risk Management Integration Process Risk Assessment Integration Frameworks Threat Integration Plans Drive alignment between engineering risk management, product security, and wider business functions. Review current threat modelling approaches and support DevSecOps ...

Lead Security Integration Specialist (Contract) We are looking for an experienced Lead Security Integration Specialist to drive the integration of security governance, threat intelligence, and risk management across complex engineering environments. Working autonomously, you'll bridge the gap between engineering, security, digital teams, and senior stakeholders, ensuring security … security integration policies, processes, and engineering deliverables. Support the creation of: Product Security Integration Policy Security Risk Management Integration Process Risk Assessment Integration Frameworks Threat Integration Plans Drive alignment between engineering risk management, product security, and wider business functions. Review current threat modelling approaches and support DevSecOps ...

cloud platforms (Azure, AWS) and cloud‐native architectures Experience with containerisation (Docker, Kubernetes) and CI/CD pipelines Familiarity with security architecture principles and threat modelling Experience in the cybersecurity, forensics, or defence technology sectors Understanding of database design and data architecture patterns Experience with API design ...

patterns. This will include areas such as LLMs, RAG, AI agents, vector databases, prompt injection, data leakage, identity, tool/API integration and AI threat modelling, alongside broader cloud and enterprise security architecture. The successful candidate will have a strong security architecture background combined with genuine AI/ ...

architectures Ability to capture business and security requirements and translate them into practical architectural solutions Working knowledge of SABSA and TOGAF Strong understanding of threat modelling, risk assessment and secure-by-design principles Experience applying standards and regulatory requirements, including NIST, ISO 27001, JSP 440, the HMG Security ...

cloud platforms (Azure, AWS) and cloud-native architectures Experience with containerization (Docker, Kubernetes) and CI/CD pipelines Familiarity with security architecture principles and threat modeling Experience in the cybersecurity, forensics, or defense technology sectors Understanding of database design and data architecture patterns Experience with API design and RESTful ...

Security Penetration Tester , you will be responsible for supporting the design, implementation, and maintenance of TVM (Threat & Vulnerability Management) solutions, controls and processes across the organisation. You will be liaising with Digital teams to ensure appropriate mitigation and remediation of vulnerabilities detected across our IT estate. This role requires … actions. Liaise and coordinate with technology and business stakeholders in relation to cyber security patching and vulnerability management issues/actions. Maintain a cyber threat assessment methodology, align to evolving industry standards and integrate into BAU and project-based business processes. Support with proactive threat hunting ...

customer data sources, APIs and systems • Own test strategy, acceptance and the technical documentation customers and accreditors need • Lead technical assurance, including architecture reviews, threat modelling and accreditation support • Write production code where delivery needs it and feed field insight back to engineering Essential Requirements • Active DV clearance ...

focus on marine Operational Technology (OT), Industrial Control Systems (ICS), network architectures and cyber resilience for maritime applications. Experience in cyber risk assessments, threat modelling, and security architecture reviews is beneficial. Experience with remote monitoring systems, cloud connected systems, vessel performance platforms and data assurance Good understanding ...

London, and you’ll act as a trusted security adviser across cloud, engineering and architecture teams. You will deliver security architecture, design assurance and threat modelling, develop blueprints and reusable patterns, and help teams build secure-by-design cloud #J-18808-Ljbffr ...