1 to 25 of 541 Threat Modelling Jobs in the UK

Cyber Security Consultant – Threat Modelling & Security Architecture Location: UK-based, with travel to Bristol, Manchester, North West England and London for on-site work Working Pattern: Hybrid with travel to client sites as required Type: Permanent Clearance: UK National with active SC Clearance — this is a mandatory requirement … Consultancy Tektora are supporting an established Technology Consultancy who are looking to speak with SC Cleared Cyber Security Consultants for a permanent opportunity delivering threat modelling and secure design across complex client environments. Please note: active SC Clearance is essential for this role. Applications cannot be considered without ...

future. Department Overview Role Purpose The Security Architect is a hands-on technical practitioner responsible for designing, building, and validating security solutions, conducting technical threat modelling, executing risk assessments, and ensuring regulatory compliance across Motorola Solutions UK (MSI UK) platforms and regional customer environments. Operating within the Cyber … control mapping, technical documentation, and pre‐sales bid support. Focus allocation spans four primary delivery streams: Bespoke Security Solution Design & AI Build (40%), Technical Threat Modelling & Risk Assessments (30%), Regulatory Compliance & Control Verification (20%), and Pre‐Sales Support (10%). Principal Accountabilities & Duties Bespoke Security Solution Design ...

hands-on security engineering role. The role requires someone who can work directly with product and engineering teams, review designs, assess APIs, run threat models, test systems, coordinate penetration testing, identify vulnerabilities, and help teams remediate issues. The role ensures DTS products, APIs, data collaboration capabilities, AI-enabled workflows … scanning, and container scanning. Helping teams triage, prioritise, and remediate security findings. Working with engineering teams to make security checks practical and repeatable. 3. Threat Modelling and Security Design Reviews Run threat modelling and security design reviews for new and changed capabilities. This includes: Facilitating threat ...

Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Security Operations Analyst | Cyber Threat Intelligence | Threat ModellingWe are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing … environments. This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat ...

heart of the role, you'll remain technically engaged throughout delivery. You'll work alongside engineering teams to understand solutions, identify security risks, support threat modelling and design reviews, and provide practical guidance that helps teams build securely. Where deeper specialist knowledge is required, you'll work with … programme, the maturity of the Information Security Front Door, and the consistent application of proportionate, risk based security assurance. You'll help improve threat modelling and security review practices, ensure security risks are clearly understood and prioritised, and help delivery teams access the right Information Security expertise when ...

Application Security Engineer. You'll work closely with engineering teamsto deliver day-to-day AppSec capabilities across security tooling, vulnerability management,secure design and threat modelling, while helping shape how Application Security operates asthe function matures. Key Responsibilities Vulnerability Management & Security Tooling Support the rollout and operation … design and API security reviews for new services, integrations, and RFCs Review and respond to penetration test requests and third-party integration reviews Facilitate threat modelling sessions using the team's runbook/guide Work with engineering teams to establish and improve threat modelling practices acrosssquads ...

Security Engineer/Security Consultant (Application Security & Threat Modelling) Rate - £550 - £650 Outside IR35 Duration - 6 months initial Location - Bristol/London (once a week/remote) Role overview: A leading Financial Services is seeking an experienced Security Engineering Consultant on a contract basis. The successful candidate will … embedded within engineering tribes, providing security consultancy and guidance to development teams throughout the software development lifecycle. The primary focus of the role is threat modelling. The consultant will conduct threat models for new and existing products, identify risks at the design stage and work with developers ...

play a critical role in designing, assuring, and delivering secure solutions across our client engagements. You will champion Secure by Design principles and lead threat modelling activities to ensure risks are identified and mitigated early in the lifecycle. Working closely with stakeholders, you will define security architectures, ensure … Design – Embed security into every stage of the solution lifecycle, ensuring systems are designed with security controls from the outset rather than retrofitted. Threat Modelling – Lead and facilitate threat modelling exercises (e.g. STRIDE), identifying vulnerabilities and defining mitigations early in delivery Risk Assessment – Identify, assess ...

decisions, APIs, integrations, cloud services, and deployment patterns to identify security risks early in the delivery lifecycle. Mature repeatable approaches for application security reviews, threat modelling, and risk-based assurance across new and changed solutions. Provide guidance and oversight on secure development lifecycle practices, including security requirements, design … review, code and security review considerations, dependency management, secrets management, testing, and release assurance. Conduct threat modelling for internally developed applications, AI-enabled workflows, integrations, automation use cases, and higher-risk technology changes, using STRIDE or similar methodologies. Advise on secure design principles, including identity and access management ...

like you: We're currently hiring a Senior Application Security Engineer to own AppSec end-to-end across our development lifecycle: from design-stage threat modelling through to code review, tooling, and remediation of findings. This is a hands-on engineering role, not a compliance or customer-facing … AppSec programme for Flagstone and report back on its success to relevant stakeholders including leadershipFormalise a secure development lifecycle which includes owning threat modelling and secure design review for new features and systems, working directly with engineering teams during design rather than after the fact, introducing security gates ...

skilled Mobile Application Security Specialist with hands‐on experience in securing mobile platforms and applications. The ideal candidate will possess deep expertise in mobile threat modelling, vulnerability assessment, and penetration testing, with a strong understanding of Android and iOS security standards. This role is critical to ensuring … security testing tools, scripts, and frameworks to support penetration testing activities. Define and implement security policies, standards, and procedures for mobile platforms. Perform ongoing threat modelling and risk assessments to proactively address potential security gaps. Collaborate with development and DevSecOps teams to integrate security best practices throughout ...

# Security LeadLead security reviews, threat modelling, external testing, report handling and launch sign-off.All open rolesApplyAbout the role## What this role does.EvaEsi is a whole new model line, built on the research from Forlais. It is a significant launch, and you can help shape it.You will lead … security for the platform. That means security reviews, threat modelling, external testing, handling reports and giving the sign-off before launch.We take security seriously and the role comes with the standing to act on what you find.What we look for## Qualifications.* Application security experience on real production systems. ...

Threat Intelligence and Vulnerability Manager 6-Month Contract | Inside IR35 | London 1-2 Days Per Week We're looking for an experienced security leader to take ownership of Threat Intelligence, Vulnerability Management, Threat Modelling, Security Testing and External Threat Hunting capabilities within a complex, high … uncover vulnerabilities, drive assurance activities, and provide the intelligence needed to strengthen enterprise security across IT, OT, physical and people security domains. Key Experience Threat Intelligence & Threat Hunting Vulnerability Management & Risk Prioritisation Threat Modelling & Security Assurance Penetration Testing & Control Validation Security Operations & Incident Readiness Supplier & Security ...

recruiting Threat Modelling Associates to join our client, one of the Big Four. You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences. Role: Threat Modeling Contract duration: 6 months initially (with scope to extend) Location: Hybrid – 4 days a week in London … office, 1 day working from home. We are recruiting Threat Modelling Associates to join our client, one of the Big Four. You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences. Role: Threat Modeling Day rate: £450 – 500 per day (inside IR35 ...

Month contract based in London with 3 days/week in office. Purpose of the role: We are looking for an experienced Threat Modelling Security Engineer to identify security threats, define effective mitigating controls and manage findings throughout their lifecycle. You will deliver threat models to agreed … timeframes, develop secure Python-based automation and help improve the existing threat modelling service. The role involves presenting technical work to senior and cross-functional stakeholders, while training and supervising junior team members. You will work with minimal supervision across cloud, DevOps and regulated security environments. What ...

Confidential Computing , and secure workload segmentation . Develop security design documentation, diagrams, and rationale aligned with business and compliance requirements. Apply risk‐based and threat‐based approaches to recommend secure and proportionate solutions. Agentic AI & LLM Security Architecture You will be responsible for shaping security controls around emerging … prompt defense, prompt isolation API & orchestration security, including secure agent tool use Data security for vector stores, embeddings, and retrieval services Performing AI‐specific threat modelling , including: Model extraction & poisoning Hallucination‐driven risk Sensitive data leakage Toxic output & jailbreak attempts Advising on secure integration of AI with cloud ...

Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation. Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies. Act as the technical lead for AI security, helping to establish … incidents, working with internal teams, external SOC providers and specialist partners. Improve vulnerability and exposure management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation. Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory or contractual ...

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

business-critical platforms and services. Working closely with architecture, engineering, cloud and infrastructure teams, you will provide security leadership, conduct architecture reviews, perform threat modelling, and define security controls across complex enterprise environments. Key Responsibilities Define and maintain secure architecture principles, standards and reference architectures. Conduct security architecture … design reviews across cloud, infrastructure, applications and network environments. Perform threat modelling and security risk assessments. Design secure-by-design solutions across cloud, hybrid infrastructure, applications, identity and network environments. Support the implementation of Zero Trust security principles. Provide architectural guidance across AWS and Azure environments. Define security ...

central Security Architecture function, you’ll partner with architects, engineering teams and senior stakeholders across the business to provide expert guidance on security design, threat modelling, governance and emerging technology risks. With the increased adoption of cloud technologies, APIs, AI solutions and modern application platforms, this role offers … pragmatic and risk-based manner. Key responsibilities include: Conducting end-to-end security architecture and design reviews across technology initiatives. Performing structured threat modelling using methodologies such as STRIDE. Producing and maintaining security standards, architecture patterns and technical guidelines. Providing expert security consultancy throughout project lifecycles. Assessing security ...

experienced Senior Information Security Consultant to join our team. This is a senior advisory role — you will provide expert guidance across security architecture review, threat modelling, and AI risk assessment, working closely with project teams, technology leads, and senior business stakeholders to ensure security risk is understood … Deliver security advisory services to the business, acting as a trusted consultant to stakeholders at all levels — from project teams to senior leadership. Lead threat modelling exercises across programs and key systems, translating findings into clear, business-relevant risk statements for non-technical audiences. Conduct security architecture reviews ...

influence across Digital, Global Business Systems, cloud platforms, APIs, integrations, and customer-facing applications. The role combines technical leadership, application security expertise, engineering engagement, threat modelling, secure-by-design governance, and application security posture management. Responsibilities Lead the RX Application Security programme, defining and maintaining strategy, roadmap, standards … controls, and security maturity objectives. Drive adoption of Secure by Design principles by embedding security throughout the Secure Development Lifecycle (SDLC), including threat modelling and security architecture reviews. Own and mature the Application Security Posture Management capability, including management and optimisation of Aikido and related security tooling. Develop ...

edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security is engineered into everyday work - from threat modelling and architecture at design time to hardened, monitored systems in production. You'll build trusted relationships with client engineering leads, platform teams, and senior stakeholders … Report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal engineering rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles — building the tooling and automation that make ...

part of a multi-disciplinary Agile team, you will implement DevSecOps practices throughout the software development lifecycle, embedding security practices (e.g. vulnerability management, threat modelling etc.) and automating security artifact generation (e.g. secret scanning, container security, SAST, DAST etc.). You will provide subject matter expertise in application … delivery teams. Verifying the implementation of security principles, architectural patterns, and requirements. Driving the adoption of cyber security practices (e.g. vulnerability management, threat modelling etc.) within Agile delivery teams. Putting people first & developing others – You'll help coach and develop more junior members of the team. Minimum (essential ...

signs things off. Security has to be designed into what we build, not added afterwards. You'll own our secure development standards, run threat modelling on the work that carries the most risk, and set the direction for how we handle cloud security, identity, vulnerability management and data … they can ship quickly and safely Own our secure development and secure coding standards, and coordinate penetration testing across the delivery lifecycle Run threat modelling on the highest‐risk work, and set up the approach and training so teams can do their own Set the security standards ...