226 to 250 of 533 Threat Modelling Jobs in the UK

that integrate seamlessly into CI/CD pipelines. Analyse complex cloud and Kubernetes architectures to identify and document potential attack vectors, mapping them against threat models to prioritise security improvements. Support defensive hardening efforts by providing actionable insights and telemetry from security validation exercises, ensuring continuous improvement of detection ...

build security tools and guardrails that integrate directly into our infrastructure and products Partner with Engineering and Infrastructure teams to review application architectures, develop threat models and build in secure by default patterns throughout the software development lifecycle Identify, prioritise and remediate security vulnerabilities, working directly with engineers ...

with Engineering to embed secure‐by‐design principles into development workflows Build, manage, and continuously improve security policies, standards, and controls Lead risk management, threat modeling, and vulnerability management processes Oversee incident detection, response, and recovery planning Drive security awareness and training across the company Establish and manage identity ...

software development lifecycle—helping us embed security directly into our code and architecture while exploring next-generation defensive strategies like AI/LLM threat modeling. Unlike security roles where you're isolated or acting as a gatekeeper, here you'll be a genuine security champion. You'll partner closely … practices, and mentor developers to build naturally resilient systems. As one of our Application Security Engineers, you'll: Provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation. Promote a security-first mindset across development teams, acting as a supportive technical mentor. Integrate security assessments ...

acting as a point of escalation for your team and providing services directly into customers. 1. TechnicalDelivery(OT Cyber Security) Perform OT risk assessments, threat modelling, and vulnerability assessments. Assess and/or assure compliance withtheNIS Regulations, NCSC CAF, NIST CSF, IEC 62443, ISO 27001, and sector-specific … consultants,includingmentoring, coaching, performance management, and career development support. Support the ongoing development of other Bridewell capabilities in areassuch as OT security architecture,GRC, threat intelligence, or incident response. Oversee training pathways,success planningand technical competency development forconsultants ranging from Senior Lead to Consultant level. 5. Strategic & Organisational Contribution ...

designed and secured Define security requirements for endpoint, email, Microsoft 365, data, application and network architectures Establish appropriate requirements for security logging, monitoring, alerting, threat detection and incident response Review technical architecture and solution designs, identifying security weaknesses, control gaps, dependencies and areas requiring further assurance Assess migration strategies … policies, information-security standards, data-protection obligations and relevant regulatory or assurance requirements Maintain appropriate security architecture documentation, including HLDs, security principles, control matrices, threat models, risk assessments, exception records and architecture decision records Provide clear security recommendations and risk-based advice to programme leadership and senior stakeholders Support ...

SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. You'll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/ ...

patterns. This will include areas such as LLMs, RAG, AI agents, vector databases, prompt injection, data leakage, identity, tool/API integration and AI threat modelling, alongside broader cloud and enterprise security architecture. The successful candidate will have a strong security architecture background combined with genuine AI/ ...

patterns. This will include areas such as LLMs, RAG, AI agents, vector databases, prompt injection, data leakage, identity, tool/API integration and AI threat modelling, alongside broader cloud and enterprise security architecture. The successful candidate will have a strong security architecture background combined with genuine AI/ ...

SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling and security gap assessments. Troubleshoot and optimise Zero Trust deployments, telemetry and access controls. Provide technical guidance, mentorship and architectural governance. ...

SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling and security gap assessments. Troubleshoot and optimise Zero Trust deployments, telemetry and access controls. Provide technical guidance, mentorship and architectural governance. ...

architectures Ability to capture business and security requirements and translate them into practical architectural solutions Working knowledge of SABSA and TOGAF Strong understanding of threat modelling, risk assessment and secure-by-design principles Experience applying standards and regulatory requirements, including NIST, ISO 27001, JSP 440, the HMG Security ...

Experience Cloud security testing exposure (particularly Azure). Vulnerability management tooling such as Tenable, Pentera or similar. Experience with SSDLC, SAST and DAST processes. Threat modelling experience. Security certifications such as OSCP, CEH, CISSP, CREST or equivalent technical certifications. Equivalent certifications will be considered. Why This Role ...

security — designing solutions that let customers move fast and stay secure. As a trusted technical advisor, you will guide customers through security architecture decisions, threat modelling, and the implementation of security controls across multi-account environments. You will lead by building — producing working code, reusable patterns, and reference ...

SABSA and Zero Trust principles. Ensure systems are secure by design, proportionate, and aligned to mission objectives. Own risk and assurance outcomes. Lead threat modelling, risk identification, and mitigation strategies across programmes. Provide authoritative guidance on risk trade-offs and security posture. Oversee security assurance, accreditation, and compliance ...

SABSA and Zero Trust principles* Ensure systems are secure by design, proportionate, and aligned to mission objectivesOwn risk and assurance outcomes* Lead threat modelling, risk identification, and mitigation strategies across programmes* Provide authoritative guidance on risk trade-offs and security posture* Oversee security assurance, accreditation, and compliance activities ...

groundedness and task‐quality measures, failure‐mode analysis, monitoring and cost or latency optimisation. Working knowledge of responsible AI and secure AI delivery, including threat modelling, privacy and PII controls, access control, auditability, model risk, GDPR and EU AI Act considerations. Credibility with senior client stakeholders under technical ...

groundedness and task-quality measures, failure-mode analysis, monitoring and cost or latency optimisation. Working knowledge of responsible AI and secure AI delivery, including threat modelling, privacy and PII controls, access control, auditability, model risk, GDPR and EU AI Act considerations. Credibility with senior client stakeholders under technical ...

modern Enterprise technologiesincluding Cloud and AI. Exposure to contemporary architectures e.g. RESTful APIs and containerisedmicroservices. Up-to date on emerging threats and experienced with threat modellingframeworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply toEnterprise business environments e.g. endpoint, network, cryptography ...

tailored solutionsDevelop and maintain security policies, standards and procedures for cloud environmentsAdvise clients on best practices for cloud security and complianceConduct risk analysis and threat modeling for cloud platformsStay up to date with the latest cloud security trends and technologiesMentor junior team members and contribute to knowledge sharing initiativesProven ...

maintain security policies, standards and procedures for cloud environments Advise clients on best practices for cloud security and compliance Conduct risk analysis and threat modeling for cloud platforms Stay up to date with the latest cloud security trends and technologies Mentor junior team members and contribute to knowledge sharing ...

financial services experience) Good deep understanding of Generative AI and Agentic security risks such as prompt injection, data poisoning etc. Experience working with either threat modeling, risk assessing or auditing cloud technologies (AWS, Google and Azure), Generative AI/agentic systems and tool integrations (A2A, MCP) Recognized cloud security ...

financial services experience) Good deep understanding of Generative AI and Agentic security risks such as prompt injection, data poisoning etc. Experience working with either threat modeling, risk assessing or auditing cloud technologies (AWS, Google and Azure), Generative AI/agentic systems and tool integrations (A2A, MCP) Recognized cloud security ...

cloud platforms (Azure, AWS) and cloud-native architectures Experience with containerization (Docker, Kubernetes) and CI/CD pipelines Familiarity with security architecture principles and threat modeling Experience in the cybersecurity, forensics, or defense technology sectors Understanding of database design and data architecture patterns Experience with API design and RESTful ...

implementing enterprise security architecture and controls. Strong knowledge of information security frameworks, standards, and best practices. Experience conducting security risk assessments, vulnerability analysis, and threat modelling. Experience working with cloud platforms and supporting cloud transformation programmes. Ability to engage effectively with both technical and non-technical stakeholders. Strong documentation ...