126 to 150 of 532 Threat Modelling Jobs in the UK

first step in engaging our clients, helping to influence the board and CxO with top-down buy-in and understanding.* Providing insight for threat modelling, risk management and security overlay approaches by conducting security maturity assessments.* Providing a business understanding of technical domains and tailoring these to help ...

native security controls. Practical experience with Infrastructure as Code (Terraform), CI/CD pipelines, DevSecOps principles and security automation. Knowledge of SSDLC practices and threat modelling. Ability to review cloud architectures and technical designs from a security perspective. Understanding of authentication and authorization patterns. Strong communication and collaboration skills ...

Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance. Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security. Design secure architectures across Azure, AWS, Google Cloud, SaaS, and on-premises environments. Lead integration of identity, security … consultancy and managed service opportunities. Qualification & Experience Experience in Security Architecture, Enterprise Architecture, or Cyber Security Consulting. Strong expertise in Zero Trust, security governance, threat modelling, risk management, and cloud security. Advanced Microsoft security experience across Entra ID, Defender, Sentinel, Purview, Intune, Azure Security, and Microsoft 365 Security. ...

Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance. Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security. Design secure architectures across Azure, AWS, Google Cloud, SaaS, and on-premises environments. Lead integration of identity, security … consultancy and managed service opportunities. Qualification & Experience Experience in Security Architecture, Enterprise Architecture, or Cyber Security Consulting. Strong expertise in Zero Trust, security governance, threat modelling, risk management, and cloud security. Advanced Microsoft security experience across Entra ID, Defender, Sentinel, Purview, Intune, Azure Security, and Microsoft 365 Security. ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

Help reduce cyber risk across technology programmes by identifying, defining, and assuring appropriate security requirements, controls, and risk treatments throughout the project lifecycle. Conduct threat modelling exercises using industry frameworks such as MITRE ATT&CK to identify credible threats and recommend proportionate security controls. Design and advise … more of the following domains: Cloud security (Azure, AWS, GCP)Network securityIdentity and Access Management (IAM)Application security/DevSecOpsInfrastructure and platform securityContinuous Threat Exposure ManagementAbility to analyse technical risks and communicate recommendations to both technical and non-technical stakeholders. Strong written, verbal, and presentation skills. Demonstrated ability ...

role in helping to shape our client’s transformation journeys. Identify business objectives, user needs, risk appetite and cyber security obligations Identify vulnerabilities, perform threat modelling, undertake risk assessment, evaluate the effectiveness of security controls Verify and evidence alignment to ‘Secure by Design’ principles, corporate security policy/… some practice within Cloud platforms (AWS and/or Microsoft Azure) Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence. A understanding of security testing and vulnerability management is important (including pen testing/ITHC, CVSS/CVE) Some experience working with security standards ...

business and security requirements, and translate them into practical architectural solutions. Working knowledge of architectural frameworks such as SABSA and TOGAF. Strong understanding of threat modelling, risk assessment, and secure-by-design principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards ...

business and security requirements, and translate them into practical architectural solutions. Working knowledge of architectural frameworks such as SABSA and TOGAF. Strong understanding of threat modelling, risk assessment, and secure-by-design principles, with the ability to apply outputs to architectural decisions. Experience interpreting and applying security standards ...

delivery cycles. Work closely with solution and technical architects to design secure systems and review architectural decisions. Produce and maintain security architecture documentation, including threat models, risk assessments, and security patterns. Take accountability for ensuring security controls meet organisational, regulatory, and industry standards. Conduct security spikes and technical investigations ...

ephemer­al, high-compute workloads. Hands-on experience operating and securing an HPC scheduler; our cluster runs SLURM. Kubernetes is a plus. The ability to threat-model against sophisticated adversaries and build systems robust against them. A pragmatic approach to software supply-chain security and to the specific risks … importance. Experience with strongly segmented or air-gapped model-weight handling, hardware security modules, or FIPS-validated cryptographic controls. Experience running continuous threat-hunting or red-team exercises against cloud and cluster infrastructure, or designing compartmentalised research environments where teams work behind separately-credentialed boundaries. Your first year ...

into actionable design controls and implementation guidance. Evaluate emerging technologies, products, and platforms for alignment with enterprise security strategy. Conduct architecture risk assessments and threat modelling to identify potential exposures. Collaborate with infrastructure, application, and data teams to ensure secure solution design and integration. Document and maintain security … across workforce, privileged, service, application and machine identities; identity governance, modern authentication, access lifecycle management, conditional access, PAM/PIM, federation, SSO, MFA, identity threat detection, and zero trust identity control design. AI & Blockchain Architecture: Secure architecture and governance for AI, machine learning, generative AI, agentic solutions, distributed ledger ...

with NIST, ISO 27001 and CSA STAR compliance frameworks. Experience engaging with Information Security, Risk, Control & Compliance, Architecture and Project teams. Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS. Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security ...

secure coding training, workshops and awareness sessions. Mentor development teams and promote security-first engineering practices. Drive adoption of secure development standards and methodologies. Threat & Vulnerability Management Support application vulnerability management activities. Assist development teams with vulnerability triage and remediation planning. Identify recurring weaknesses and opportunities for continuous improvement. … into CI/CD pipelines. Strong understanding of OWASP Top 10 and common vulnerability classes. Experience with API and web application security. Knowledge of threat modelling techniques and methodologies. Experience working closely with software engineering teams in enterprise environments. Ability to read and understand code in languages such ...

cloud environments Partner with software engineers to embed security throughout the Software Development Life Cycle (SDLC) Drive Application Security initiatives including secure code reviews, threat modelling, and vulnerability remediation Build and improve DevSecOps capabilities within CI/CD pipelines Lead vulnerability management activities, including scanning, prioritisation, risk assessment ...

Infrastructure as Code and cloud-native engineering practices Drive cloud security governance, architecture assurance, security remediation and control optimisation initiatives Conduct security architecture reviews, threat modelling, risk assessments and cloud security maturity assessments Contribute to business development, thought leadership and the continued growth of the Cloud Security practice ...

cloud environments Partner with software engineers to embed security throughout the Software Development Life Cycle (SDLC) Drive Application Security initiatives including secure code reviews, threat modelling, and vulnerability remediation Build and improve DevSecOps capabilities within CI/CD pipelines Lead vulnerability management activities, including scanning, prioritisation, risk assessment ...

other cloud environmentsPartner with software engineers to embed security throughout the Software Development Life Cycle (SDLC)Drive Application Security initiatives including secure code reviews, threat modelling, and vulnerability remediationBuild and improve DevSecOps capabilities within CI/CD pipelinesLead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation ...

such as Docker and Kubernetes. Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2. Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews. Strong troubleshooting, documentation, and cross-functional communication skills. Personal Team player with strong communication skills Competent ...

reference patternsIntegrate security tooling and automated controls into CI/CD pipelines, including SAST/DAST tooling, secrets scanning, and policy-as-code enforcementConduct threat modelling exercises, cloud security posture reviews, and risk assessments for cloud platforms and workloadsWork within scaled agile delivery teams, contributing security requirements ...

appropriate to accelerate research, analysis and insight Lead the design of secure systems, networks and applications across on-premise, cloud and hybrid environments Conduct threat modelling and risk assessments, define remediation strategies, and explore responsible AI and automation to improve the efficiency and quality of security analysis while ...

/63).* Define and maintain technical roadmaps, standards, and reference architectures; mentor engineers and review develop/runbooks.* Lead security assessments, threat modeling, and control efficacy reviews; partner with risk/compliance and audit functions on evidence and remediation.* Solve complex issues end-to-end, including proxy/ ...

risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. Responsibilities Effective business acumen and an understanding … analysis for specific domains, identify gaps in existing capabilities, service maturity. Identify missing cybersecurity and cyber-resiliency capabilities in alignment with changing business needs, threat land scape and technical requirements to increase the quality of the selected solutions also including topics such as products’ convergence over time and products ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches. You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture … building trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements. Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies. Understand threat modelling, attack ...