101 to 125 of 541 Threat Modelling Jobs in the UK

risk within technology projects by ensuring appropriate security requirements, controls, monitoring, and assurance activities are identified, specified, and evidenced throughout the project lifecycle. Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls. Define monitoring … Skills and Experience Strong technical knowledge in at least one of the following areas: Public cloud, Application security, Networking, On-premises infrastructure. Understanding of threat modelling, security controls, and risk analysis principles. Ability to assess risks and recommend proportionate security controls and monitoring measures, rather than relying solely ...

risk within technology projects by ensuring appropriate security requirements, controls, monitoring, and assurance activities are identified, specified, and evidenced throughout the project lifecycle. Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls. Define monitoring … following skills: Strong technical knowledge in at least one of the following areas: Public cloud Application security Networking On-premises infrastructure Understanding of threat modelling, security controls, and risk analysis principles. Ability to assess risks and recommend proportionate security controls and monitoring measures, rather than relying solely ...

they’re effectively configured, maintained, and scaled as the business grows Embed secure-by-design practices into the development lifecycle — from secure coding and threat modelling to design reviews and CI/CD hardening Monitor systems for irregular behaviour and proactively design detection and prevention mechanisms Ensure infrastructure … like OWASP and AWS Well-Architected to real-world scenarios Have experience reviewing and improving product and infrastructure security, including secure SDLC practices (e.g. threat modelling, secure code review, CI/CD hardening) Are familiar with compliance frameworks like ISO 27001 or SOC 2 , and can translate technical ...

Accenture is seeking a cybersecurity professional to help reduce risk across technology projects in the UK. You will drive threat modelling, design security controls, and ensure monitoring and evidence-based decisions throughout the project lifecycle. You will work across cloud, hybrid, and on-premises environments, translating complex security ...

Build for long-running, concurrent offensive-security workloads, owning the reliability, capacity, latency and cost characteristics that come with them. Engineer for an unusual threat model. Our platform intentionally runs offensive tooling against customer environments. Authorisation, tenant isolation, secrets, controlled execution, threat modelling and auditability are fundamental … reliable afterwards. You're comfortable across containers, cloud infrastructure and infrastructure-as-code. You have strong security instincts. You understand authorisation, secrets, isolation and threat modelling, and know when a design deserves suspicion. AI is already part of how you engineer software. You've gone beyond autocomplete ...

safety-critical airborne mission systems. In this role you will: Develop and maintain security requirements for complex airborne electronic and mission-computing systems Undertake threat modelling, vulnerability analysis and security risk assessments throughout the engineering lifecycle Support the development of security architectures and secure-by-design solutions Produce … Secure by Design principles and relevant product and systems security standards, with experience embedding security throughout an engineering lifecycle Experience undertaking security risk assessments, threat modelling, vulnerability analysis or security requirements development Ability to interpret technical designs and communicate security risks and mitigations to multidisciplinary engineering teams Experience ...

product-security architecture for complex airborne mission systems Define the security strategy, requirements and secure-by-design approach across the programme lifecycle Lead threat modelling, vulnerability analysis, security risk assessment and accreditation activities Provide technical authority and informed security advice across systems, software and hardware engineering Make … aerospace or another safety-critical engineering environment Strong experience defining security requirements and secure-by-design approaches at system or product level Experience leading threat modelling, security risk assessment and vulnerability-analysis activities Experience providing technical leadership and making security architecture decisions across multidisciplinary engineering teams Knowledge ...

Performance: Design solution‐wide UI resilience (graceful degradation, back‐pressure, retry strategies) and own performance standards across web and mobile. Quality, Security & Compliance: Own threat modelling and security hardening for tribe front‐end products; maintain high standards through code review, secure coding practices, and risk management. External Representation … zero‐downtime deployments, observability, performance budgets). Experience with Azure development and cloud‐based infrastructure , including CI/CD and pipeline observability. Experience owning threat modelling and security hardening for front‐end products; strong grasp of OWASP and secure coding practices. Track record of originating and shepherding cross ...

client is a global investment management company. Job Title Cyber Threat Intelligence Analyst The Role The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business … leadership, and external organizations such industry peers and intelligence sharing partners. In this role you will Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sources Actively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholders Conduct tactical ...

help reduce cyber risk across client technology projects within the UK health, public sector, Defence and Central Government. You will define security requirements, perform threat modelling, and ensure effective controls and monitoring throughout the project lifecycle. You will work on cutting‐edge security challenges and collaborate with ...

London/GlasgowThe AI Security Engineer is responsible for securing AI platforms and systems against adversarial threats. The role focuses on technical security controls, threat modelling, red teaming, and continuous monitoring of AI systems. Responsibilities: Design and implement security controls for AI and LLM systemsPerform AI-specific threat modelling and risk analysisLead red team and blue team testing of AI platformsConduct prompt injection and adversarial testingImplement monitoring, logging, and alerting for AI behaviourSecure AI pipelines, APIs, and orchestration layersSupport secure deployment and CI/CD practicesSkills & Experience: Strong background in security engineering and cloud securityHands ...

. The mission is a scalable, proactive approach to securing the bank's mobile apps so engineers can operate with confidence in an evolving threat landscape. You will help build, deliver, and drive the security of the mobile platform, including the design and delivery of a world-class security … security framework for the mobile platform and associated services (penetration testing, research, consultancy) Conduct regular hands-on reviews of mobile application security posture Apply threat modelling and mitigation techniques across the mobile channel Develop and maintain pen-testing security tools, scripts, policies, and procedures Research emerging technologies ...

security within the product. Key Responsibilities and Technologies Championing security throughout the FortiDLP product. Help maintain up-to-date and vulnerability-free dependencies. Threat modelling, design and code review. Maintaining and tuning automatic vulnerability checks within Continuous Integration systems. Triage findings of scanning tools and ensure prompt remediations. … least 3-5 years of software engineering experience. Familiarity with computer science fundamentals and backend development concepts. Experience in Golang. Experience with threat modelling and security concepts. Some familiarity with Checkmarx/Trivy/Kics or similar tools, as well as DAST tooling in general. Communication and Collaboration ...

applied to architectures, technical decisions, and third-party integrations. Your work will involve maintaining and prioritizing the product's security backlog, coordinating risk assessments, threat modelling, and vulnerability assessments, and ensuring that required security controls (e.g., access control, encryption, secure configuration) are implemented and evidenced. You will monitor … ensure "security by design and by default" across architectures, user stories, technical decisions, and third-party integrationsProficiency in coordinating product-level security risk assessments, threat modelling, and vulnerability assessments, as well as maintaining a prioritized security backlogExperience interpreting and cascading central security policies, standards, and regulatory requirements into ...

applied to architectures, technical decisions, and third-party integrations. Your work will involve maintaining and prioritizing the product’s security backlog, coordinating risk assessments, threat modelling, and vulnerability assessments, and ensuring that required security controls (e.g., access control, encryption, secure configuration) are implemented and evidenced. You will monitor … security by design and by default” across architectures, user stories, technical decisions, and third-party integrations Proficiency in coordinating product-level security risk assessments, threat modelling, and vulnerability assessments, as well as maintaining a prioritized security backlog Experience interpreting and cascading central security policies, standards, and regulatory requirements ...

influencing projects from inception through to deployment while providing practical, pragmatic security guidance. Key Experience Secure by Design & Security Assurance Security Architecture & Design Reviews Threat Modelling & Risk Identification Microsoft Security Stack (Identity, Endpoint, Cloud & Monitoring) Security Platform Configuration & Support Security Standards, Controls & Governance Vendor & Security Tool Management Stakeholder … Across Engineering & Delivery Teams What You'll Be Doing Embed security into projects and programmes from day one Conduct security design reviews and lightweight threat modelling Drive security assurance throughout the delivery lifecycle Enhance configuration, adoption and effectiveness of security platforms Support onboarding and implementation of new security ...

security requirements and features within embedded software and firmware Develop secure embedded software using C/C++ and contribute to secure product architecture Perform threat modelling, security risk assessments, vulnerability assessments and design reviews Support compliance with relevant product security standards including IEC 62443 and emerging cybersecurity requirements … architectures, RTOS environments and bootloaders Hands‐on experience implementing cybersecurity controls within embedded products, devices or firmware Good understanding of secure software development, threat modelling, vulnerability assessment and security testing Experience working within a product development environment and translating security requirements into practical engineering solutions Particularly Relevant Experience ...

continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

demonstrate continuous compliance with stringent standards such as PCI DSS and 3DSDrive security infrastructure deployments across our growing environmentsPerform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actionsLead … implementation (CKA, CKS qualifications are a plus)Experience with Infrastructure as Code and infrastructure provisioning tools, particularly TerraformExperience configuring GCP-native security posture and threat management with Security Command CenterExperience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact AnalysisExperience with key and secret management ...

continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective … qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management ...

financial services organisation is seeking a Cyber Security Engineer to join its Proactive Security function. This role will focus on strengthening security capabilities through threat detection, security engineering, automation, and proactive defence initiatives across a complex enterprise environment. Permanent (£70k - £80k) London/Hybrid Must have UK citizenship/… Visa/EU settled status Key Responsibilities Threat Modelling & Security Engineering Develop and maintain threat models for business-critical systems and services. Assess security risks and recommend controls during project design and implementation. Build and maintain capabilities for proactive detection, configuration monitoring, and automated remediation. Lead security ...

Help reduce cyber risk across technology programmes by identifying, defining, and assuring appropriate security requirements, controls, and risk treatments throughout the project lifecycle. Conduct threat modelling exercises using industry frameworks such as MITRE ATT&CK to identify credible threats and recommend proportionate security controls. Design and advise … following domains: Cloud security (Azure, AWS, GCP) Network security Identity and Access Management (IAM) Application security/DevSecOps Infrastructure and platform security Continuous Threat Exposure Management Ability to analyse technical risks and communicate recommendations to both technical and non-technical stakeholders. Strong written, verbal, and presentation skills. Demonstrated ability ...

both technical and non-technical stakeholders. Develop security principles, controls and approaches aligned to client requirements, industry standards and regulatory frameworks. Conduct security assessments, threat and risk assessments, vulnerability assessments and security audits. Advise clients on security controls, emerging technologies and appropriate technical solutions. Work with technology vendors … systems integrator or professional services environment . Strong understanding of security frameworks and standards such as ISO 27001, NIST or CIS . Experience with threat modelling and risk assessment . Strong knowledge of network security, encryption, authentication and access control. Experience across security technologies such as firewalls, SIEM ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to: Identify business objectives, user needs, risk appetite and cyber security obligations Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...

Enterprise Security Architecture or Security Solutions Architecture to Contribute to:- Identify business objectives, user needs, risk appetite and cyber security obligations- Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls- Verify and evidence alignment to 'Secure by Design' principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...