1 to 25 of 190 Remote/Hybrid Threat Modelling Jobs in the UK

hands-on security engineering role. The role requires someone who can work directly with product and engineering teams, review designs, assess APIs, run threat models, test systems, coordinate penetration testing, identify vulnerabilities, and help teams remediate issues. The role ensures DTS products, APIs, data collaboration capabilities, AI-enabled workflows … scanning, and container scanning. Helping teams triage, prioritise, and remediate security findings. Working with engineering teams to make security checks practical and repeatable. 3. Threat Modelling and Security Design Reviews Run threat modelling and security design reviews for new and changed capabilities. This includes: Facilitating threat ...

heart of the role, you'll remain technically engaged throughout delivery. You'll work alongside engineering teams to understand solutions, identify security risks, support threat modelling and design reviews, and provide practical guidance that helps teams build securely. Where deeper specialist knowledge is required, you'll work with … programme, the maturity of the Information Security Front Door, and the consistent application of proportionate, risk based security assurance. You'll help improve threat modelling and security review practices, ensure security risks are clearly understood and prioritised, and help delivery teams access the right Information Security expertise when ...

Application Security Engineer. You'll work closely with engineering teamsto deliver day-to-day AppSec capabilities across security tooling, vulnerability management,secure design and threat modelling, while helping shape how Application Security operates asthe function matures. Key Responsibilities Vulnerability Management & Security Tooling Support the rollout and operation … design and API security reviews for new services, integrations, and RFCs Review and respond to penetration test requests and third-party integration reviews Facilitate threat modelling sessions using the team's runbook/guide Work with engineering teams to establish and improve threat modelling practices acrosssquads ...

Security Engineer/Security Consultant (Application Security & Threat Modelling) Rate - £550 - £650 Outside IR35 Duration - 6 months initial Location - Bristol/London (once a week/remote) Role overview: A leading Financial Services is seeking an experienced Security Engineering Consultant on a contract basis. The successful candidate will … embedded within engineering tribes, providing security consultancy and guidance to development teams throughout the software development lifecycle. The primary focus of the role is threat modelling. The consultant will conduct threat models for new and existing products, identify risks at the design stage and work with developers ...

play a critical role in designing, assuring, and delivering secure solutions across our client engagements. You will champion Secure by Design principles and lead threat modelling activities to ensure risks are identified and mitigated early in the lifecycle. Working closely with stakeholders, you will define security architectures, ensure … Design – Embed security into every stage of the solution lifecycle, ensuring systems are designed with security controls from the outset rather than retrofitted. Threat Modelling – Lead and facilitate threat modelling exercises (e.g. STRIDE), identifying vulnerabilities and defining mitigations early in delivery Risk Assessment – Identify, assess ...

recruiting Threat Modelling Associates to join our client, one of the Big Four. You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences. Role: Threat Modeling Contract duration: 6 months initially (with scope to extend) Location: Hybrid – 4 days a week in London … office, 1 day working from home. We are recruiting Threat Modelling Associates to join our client, one of the Big Four. You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences. Role: Threat Modeling Day rate: £450 – 500 per day (inside IR35 ...

business-critical platforms and services. Working closely with architecture, engineering, cloud and infrastructure teams, you will provide security leadership, conduct architecture reviews, perform threat modelling, and define security controls across complex enterprise environments. Key Responsibilities Define and maintain secure architecture principles, standards and reference architectures. Conduct security architecture … design reviews across cloud, infrastructure, applications and network environments. Perform threat modelling and security risk assessments. Design secure-by-design solutions across cloud, hybrid infrastructure, applications, identity and network environments. Support the implementation of Zero Trust security principles. Provide architectural guidance across AWS and Azure environments. Define security ...

central Security Architecture function, you’ll partner with architects, engineering teams and senior stakeholders across the business to provide expert guidance on security design, threat modelling, governance and emerging technology risks. With the increased adoption of cloud technologies, APIs, AI solutions and modern application platforms, this role offers … pragmatic and risk-based manner. Key responsibilities include: Conducting end-to-end security architecture and design reviews across technology initiatives. Performing structured threat modelling using methodologies such as STRIDE. Producing and maintaining security standards, architecture patterns and technical guidelines. Providing expert security consultancy throughout project lifecycles. Assessing security ...

experienced Senior Information Security Consultant to join our team. This is a senior advisory role — you will provide expert guidance across security architecture review, threat modelling, and AI risk assessment, working closely with project teams, technology leads, and senior business stakeholders to ensure security risk is understood … Deliver security advisory services to the business, acting as a trusted consultant to stakeholders at all levels — from project teams to senior leadership. Lead threat modelling exercises across programs and key systems, translating findings into clear, business-relevant risk statements for non-technical audiences. Conduct security architecture reviews ...

/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services and architecture changes. Validate fixes and identify root causes to reduce recurring vulnerabilities. … prioritise and remediate security issues. Hands‐on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting knowledge to understand unfamiliar code and contribute to automation. The confidence to work independently ...

/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services and architecture changes. Validate fixes and identify root causes to reduce recurring vulnerabilities. … prioritise and remediate security issues. Hands-on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting knowledge to understand unfamiliar code and contribute to automation. The confidence to work independently ...

Engineer on Mystra, you'll own application security end-to-end across multi-tenant, trillion-row-scale, AI-enabled data platforms. You'll lead threat modelling and design review with product teams, build the tooling and patterns that make secure codet, and find and fix the vulnerabilities that … steered by your own expert judgement and intuition, to keep Genomics secure against state-of-the-art threats. A Day in the Life Leading threat modelling and design reviews for new products and infrastructure, and defining the security invariants every team builds against: tenant isolation, authentication and authorisation ...

Engineer on Mystra, you'll own application security end-to-end across multi-tenant, trillion-row-scale, AI-enabled data platforms. You'll lead threat modelling and design review with product teams, build the tooling and patterns that make secure codet, and find and fix the vulnerabilities that … steered by your own expert judgement and intuition, to keep Genomics secure against state-of-the-art threats. A Day in the Life Leading threat modelling and design reviews for new products and infrastructure, and defining the security invariants every team builds against: tenant isolation, authentication and authorisation ...

edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security is engineered into everyday work - from threat modelling and architecture at design time to hardened, monitored systems in production. You'll build trusted relationships with client engineering leads, platform teams, and senior stakeholders … Report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal engineering rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles — building the tooling and automation that make ...

edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security is engineered into everyday work - from threat modelling and architecture at design time to hardened, monitored systems in production. You'll build trusted relationships with client engineering leads, platform teams, and senior stakeholders … Report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal engineering rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles — building the tooling and automation that make ...

that process. This role exists to embed security expertise directly into how our engineering teams build and ship software: setting the standards, running the threat modelling, and making the judgement calls that keep pace with delivery instead of slowing it down. About Redgate Redgate brings together people … scanner tells you. It's a role built on trust: teams will come to you for guidance, and the judgement you bring to triage, threat modelling, and governance decisions will shape how security actually gets done here. Partner directly with engineering and product teams to define and operationalise ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

dayLondon, England Contract Threat Intelligence Analyst594 per day (Umbrella) | Inside IR35 ð Remote with occasional client site visits ð Active SC Clearance Required ð Contract until March 2027Threat Intelligence Analyst | Cyber Security | Enterprise SecurityWe are currently recruiting for an experienced Threat Intelligence Analyst to join a major cybersecurity … programme supporting critical business and technology operations. This is an exciting opportunity for a security professional with strong experience in Threat Intelligence, Enterprise Security Architecture, Platform Security, and Security Architecture Design to help identify, analyse, and mitigate emerging cyber threats across complex environments. Working within a highly skilled cybersecurity ...

/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. … Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting. This role offers hybrid/remote working options, a salary range of 60,000 - 80,000 and benefits. You will be responsible for: Designing and implementing threat ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

Lead security architecture reviews across new products, platforms, APIs, applications, integrations and data solutions, translating threats and risks into practical engineering requirements. Drive a threat-led approach to security , using threat modelling, attacker behaviour and frameworks such as MITRE ATT&CK to inform architecture decisions and prioritise … including end-to-end ownership of security architecture for modern software products and solutions. Strong knowledge of product and application security , including secure SDLC, threat modelling, vulnerability management and security testing. Strong understanding of cloud and platform security , alongside the ability to work with on‐premise and legacy ...