176 to 200 of 534 Threat Modelling Jobs in the UK

define risk appetite and make informed decisions about whether an initiative is ready to progress. Alongside engineers, you'll get into the technical detail - threat-modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes. From POC to production, you'll bring the two sides … implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review AI architectures, guardrails, evaluations ...

response capabilities for AI-related threats and misuse scenarios. Identify opportunities to use AI to enhance cyber security operations, such as alert triage, threat analysis, playbook automation, knowledge retrieval, and workflow optimisation. Stay current on evolving risks, attack techniques, regulations, and industry practices related to AI security … systems, including prompt injection, data exfiltration, insecure model access, supply chain risks, model poisoning, and sensitive data exposure. Experience conducting architecture reviews, threat modelling, and security assessments for complex technical solutions. Ability to translate technical risk into clear, practical guidance for both engineering and non-technical stakeholders. Strong ...

operation. Review security architecture, tooling coverage, integration dependencies and control gaps. Assess capabilities including SAST, SCA, DAST, secrets scanning, IaC scanning, API security, threat modelling and CI/CD security. Map controls against frameworks including NIST SSDF, OWASP SAMM and OWASP DSOMM. Review security tooling and integrations across ...

forums, governance boards and design authorities. Supporting solution architects and engineering teams in defining clear security and non-functional requirements. Leading or contributing to threat modelling, vulnerability assessments and penetration testing activities. Additional requirements specific to the role: Occasional travel across our client sites and operational locations. Participation ...

Grafana, Datadog or CloudWatch . Relevant Google Cloud certifications , such as Developer, Solutions Architect or Security. Experience implementing cloud security practices including secure coding, threat modelling, compliance and incident response. Open-source contributions or a strong track record of technical knowledge sharing. Experience leading multi-team initiatives spanning ...

solving skills, with the ability to assess complex security risks and develop effective mitigation strategies. Further Experienced in: Identifying security flaws in solutions through threat modelling, risk analysis, architectural assessments and design reviewsCurrent security vulnerabilities and threats specific to AI/ML, MITRE ATLAS framework and OWASPIdentity ...

needs to product leadership and engineers Broad experience with information, system, and network security concepts and components Demonstrated experience with architecture and security reviews, threat modeling applications and identifying areas of risk Experience implementing strategies to support secure and compliant architectures Deep understanding of the OWASP Top 10 application ...

products long into the future. What you’ll do Provide security leadership and guidance within our product engineering teams through developer-led threat modeling and education on security and privacy best practices that prevent the authoring of vulnerabilities. Coordinate security requirements and standards throughout the product life cycle ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape.The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape.* Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape.The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape.* Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape.The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape.* Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

secured. Define security requirements for endpoint, email, Microsoft 365, data, application and network architectures . Establish appropriate requirements for security logging, monitoring, alerting, threat detection and incident response. Review technical architecture and solution designs, identifying security weaknesses, control gaps, dependencies and areas requiring further assurance. Assess migration strategies … policies, information-security standards, data-protection obligations and relevant regulatory or assurance requirements. Maintain appropriate security architecture documentation, including HLDs, security principles, control matrices, threat models, risk assessments, exception records and architecture decision records . Provide clear security recommendations and risk-based advice to programme leadership and senior stakeholders. ...

into our products. Responsibilities: Owns the development and maturation of security features for Anduril's productsAuthors and maintains security documentation including System Security Plans, Threat Analysis and Risk Assessments, and compliance evidenceCollaborates and builds solutions with engineering teams to meet and exceed industry-standard security goalsCollaborates with manufacturing … firmware, applications, network, or embedded systemsExperience building, testing, and delivering production-ready systems, especially for embedded and/or Linux systemsExperience with structured threat modelling and risk assessment methodologiesExperience in building and security autonomous systems and their unique threat modelExperience in any previous military or defence domain ...

infrastructure, and CI/CD environment, and you'll build much of it yourself. This is a hands-on role: expect to read code, threat model new services, reproduce and triage vulnerabilities, dig through infrastructure configuration and build the automation that closes gaps. You'll also set direction … rest. Key responsibilities include: Product & Infrastructure Security Design - Design security features into the product itself and strengthen defence-in-depth across the platform. Threat model new services before they ship, and make the architectural calls that are expensive to reverse later. Security Review & Risk Assessment - Review code, architecture ...

operations. Assisting teams integrating with security tooling and ensuring smooth onboarding to security services. Supporting wider security initiatives including ISO 27001 activities and threat modelling. What you won’t be doing Working in a siloed environment with no freedom to make decisions. Working in a place where … Experience working directly with software engineering best practices including source control, unit testing, code reviews, design documentation and strong debugging and troubleshooting. Experience in threat modelling within engineering teams. Exposure to Agile working and DevSecOps. Knowledge of ISO 27001 and its relevance to secure engineering. Desire ...

/CD pipelines, build tools, artifact repositories and developer platforms Expertise in secure software delivery, vulnerability management and platform security Experience with threat modelling, security frameworks and maturity assessments Strong knowledge of application security, network security and cloud security principles More details available on successful application. ...

capability. Essential Skills & Experience Strong experience delivering cyber security risk assessments and assurance within large, complex digital environments. Excellent knowledge of cyber risk management, threat modelling and security architecture . Strong cloud security experience, ideally including AWS, SaaS environments and cloud governance. Experience applying cyber security standards, regulatory ...

stakeholders, capture business and security requirements, and translate them into practical architectural solutions.Working knowledge of architectural frameworks such as SABSA and TOGAF.Strong understanding of threat modelling, risk assessment, and secure-by-design principles, with the ability to apply outputs to architectural decisions.Experience interpreting and applying security standards, frameworks ...

Design & Regulated Environments:** Proven experience delivering solutions within highly regulated, security-sensitive or compliance-driven environments. Strong understanding of secure-by-design principles, OWASP, threat modelling, identity and access management, least-privilege principles and non-functional requirements.* **Software Engineering Authority:** Extensive software engineering background with mastery of modern ...

Design & Regulated Environments:** Proven experience delivering solutions within highly regulated, security-sensitive or compliance-driven environments. Strong understanding of secure-by-design principles, OWASP, threat modelling, identity and access management, least-privilege principles and non-functional requirements.* **Software Engineering Authority:** Extensive software engineering background with mastery of modern ...

requirements for production services, using incident reviews to drive continuous improvement. Embed proportionate security into engineering workflows and cloud environments, including platform security reviews, threat modelling, access and secrets management, automated scanning, and vulnerability remediation Monitor cloud security posture across Azure and GCP, helping teams prioritise misconfigurations, vulnerabilities ...

large, complex enterprise environments. Proficient communication skills in English, both written and verbal. Relevant certifications and engagement with the security community is a plus. Threat Modelling experience is a plus. Proven track record of successfully managing and driving security engagements for various organizations with differing operational and technical ...

knowledge of SIEM, EDR/XDR, SOAR, and common log sources (CloudTrail, Okta, endpoint telemetry, etc.) Familiarity with detection frameworks (MITRE ATT&CK) and threat modeling Comfort with APIs, scripting (Python, Bash), and query languages (KQL, SPL, SQL) Able to clearly explain complex technical and security concepts to both ...

architecture, ideally with exposure to cloud/SaaS security and vendor risk Working knowledge of LLM and generative AI architectures, data flows and associated threat models, including prompt injection, data leakage, model access control and agentic tool-use risk Familiarity with regulatory frameworks relevant to the sector, including DORA ...

architecture, ideally with exposure to cloud/SaaS security and vendor risk Working knowledge of LLM and generative AI architectures, data flows and associated threat models, including prompt injection, data leakage, model access control and agentic tool-use risk Familiarity with regulatory frameworks relevant to the sector, including DORA ...