251 to 275 of 508 Threat Modelling Jobs in the UK

across our software development lifecyclehelping us embed security directly into our code and architecture while exploring next-generation defensive strategies like AI/LLM threat modeling. Unlike security roles where youre isolated or acting as a gatekeeper, here youll be a genuine security champion. Youll partner closely with engineering … DevSecOps practices, and mentor developers to build naturally resilient systems. As one of our Application Security Engineers, youll: Provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation. Promote a security-first mindset across development teams, acting as a supportive technical mentor. Integrate security assessments ...

across our software development lifecyclehelping us embed security directly into our code and architecture while exploring next-generation defensive strategies like AI/LLM threat modeling. Unlike security roles where youre isolated or acting as a gatekeeper, here youll be a genuine security champion. Youll partner closely with engineering … DevSecOps practices, and mentor developers to build naturally resilient systems. As one of our Application Security Engineers, youll: Provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation. Promote a security-first mindset across development teams, acting as a supportive technical mentor. Integrate security assessments ...

software development lifecycle—helping us embed security directly into our code and architecture while exploring next-generation defensive strategies like AI/LLM threat modeling. Unlike security roles where you’re isolated or acting as a gatekeeper, here you’ll be a genuine security champion. You’ll partner closely … practices, and mentor developers to build naturally resilient systems. As one of our Application Security Engineers, you’ll: Provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation. Promote a security-first mindset across development teams, acting as a supportive technical mentor. Integrate security assessments ...

governance of AI, LLM, and Agentic systems Develop and embed AI security standards, policies, and best practices across the organisation Conduct and maintain threat models and risk assessments for AI systems, informing key business decisions Act as the Subject Matter Expert (SME) for AI Security , supporting architecture boards, risk … committees, and senior stakeholders Provide guidance on secure AI adoption , including threat mitigation, governance, and compliance Collaborate cross-functionally with engineering, security, and business teams to ensure secure, scalable delivery Evaluate and implement emerging AI security technologies to reduce enterprise risk Required Experience Minimum 7+ years' experience in Security ...

defending core infrastructure, enterprise networks, and critical data against modern cyber threats. Working closely with the Head of IT Security, you will oversee threat detection, manage security appliances, enforce compliance frameworks, and ensure that robust defensive postures are embedded across the technology stack. Key Responsibilities Security Operations: Oversee network … telemetry for suspicious activities, execute rapid threat detection and response, tune perimeter defenses (firewalls and virtual private networks), and direct proactive patch management cycles. Compliance & Audits: Drive internal control testing and maintain alignment with structured information security standards such as ISO 27001, supporting both internal evaluations and external auditor ...

exposure management maturity by identifying, prioritizing, and reducing exploitable risks across cloud, identity, endpoint, application, and data environments, using Microsoft Security technologies and modern threat-informed approaches.You will also be part of the Avanade Security presales and Architecture function supporting the development of proposals, solution options, and architecture inputs … opportunities.Build trusted relationships with client security, cloud, and operations stakeholders during delivery and pre-sales engagements.• Design, implement, and integrate cloud security, exposure management, threat detection, and security operations capabilities, including Microsoft Sentinel, Defender for Cloud, Defender XDR, and related Microsoft Security technologies.• Understand threat modelling, attack ...

national security, the UK’s Defence landscape is undergoing its most significant transformation in recent history. The convergence of digital, physical and information-based threat demands the UK employ a proactive, and adaptive approach to cyber resilience and security assurance. To support, we are rapidly expandingour Defence portfolio, bringing … beyond delivering traditional risk assurance assessments. You will play a key role in helping our clients understand and respond to their increasingly complex threat landscape by shaping secure and resilient solutions for some of the UK’s “next generation” defence capabilities. You will combine technical expertise with strategic insight ...

standards and regulations, including the Cyber Resilience Act (CRA).**Your Responsibilities*** Specify, design, review, and evolve system software security architectures and implementations.* Conduct threat analysis, attack surface analysis, and security risk assessments for embedded systems and software platforms.* Define security requirements and establish traceability from security objectives … software development using C, Rust, and/or assembly language.* Strong understanding of SoC software stacks, middleware, firmware, operating systems, and applications.* Experience with threat modelling, security risk assessment, and secure system design.* Familiarity with security technologies such as: + Secure Boot + Cryptography and Key Management + ...

Design Review & Assessment Conduct detailed security reviews of IT architecture and design documentation Assess security controls and identify gaps against MOD security requirements Evaluate threat models and security assumptions underlying IT designs Review security specifications for completeness and MOD compliance Identify residual security risks and recommend mitigation strategies Support … design principles Technical Knowledge Comprehensive understanding of IT security controls and security frameworks Strong knowledge of network, infrastructure, application and data security Understanding of threat modelling and risk assessment methodologies Familiarity with MOD security requirements, Classification Guides and security policy Knowledge of ITAR regulations and export control requirements ...

etc. - Knowledge of typical cyber security attack vectors (e.g. OWASP Top 10, SQL, XSS, XXE, MITM etc.) and can articulate threats and risk via threat modelling exercises/workshops - Excellent communication skills, with the ability to convey security complexities to audiences of various technical abilities. - We are passionate ...

Security AutomationAbility to embed security controls into CI/CD pipelines through automation and policy enforcement.Application & Infrastructure SecurityStrong understanding of secure development practices, threat modelling, and vulnerability management.Desirable Skills/ExperienceLinux Administration & Systems EngineeringStrong Linux knowledge with experience supporting and troubleshooting production environments.Infrastructure as Code (Terraform, Pulumi)Experience ...

product and industry best practice. What You'll Do Product Security Own product security for the Geordie platform, with secure by design, threat modelling and security architecture review embedded throughout the SDLC, enabling rapid development safely. Drive vulnerability management, penetration testing, and remediation across the product. ...

SABSA and Zero Trust principles Ensure systems are secure by design, proportionate, and aligned to mission objectives Own risk and assurance outcomes Lead threat modelling, risk identification, and mitigation strategies across programmes Provide authoritative guidance on risk trade-offs and security posture Oversee security assurance, accreditation, and compliance ...

including:Deliver current-state assessments (maturity, governance, lifecycle controls, using SOC-CMM) and define target-state capabilities, operating model, and controls frameworkConduct and review threat modelling of IT/OT or organisationsAdvise and manage Security Operations transformation projects (related to Log Management, Detection, Operating model, Governance and reporting ...

M365 Consultant/Senior Consultant, you will help transform clients’ cybersecurity posture by designing and implementing advanced Microsoft Threat Protection technologies. You will work directly with clients in a consulting capacity, supporting medium to large enterprise environments and contributing to robust Cyber Defence strategies across endpoints, identities, cloud … cyber defence use cases, correlation rules, and attack chain detections across disparate systems.Design, implement, and integrate SIEM solutions—particularly Microsoft Sentinel—into Security Operations.Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem.Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools.Support incident ...

risks, leading the design of mitigating security architectures. The CyberSecurity Architect will deliver 1st Line Security Architecture and be involved in activities such as threat model, security impact assessments, risk assessments, security architecture (Within HLD, LLD), DPIA, CHECK ITHC scoping. SKILLS REQUIRED Expertise in security architecture and applied security ...

financial services experience) Good deep understanding of Generative AI and Agentic security risks such as prompt injection, data poisoning etc. Experience working with either threat modeling, risk assessing or auditing cloud technologies (AWS, Google and Azure), Generative AI/agentic systems and tool integrations (A2A, MCP) Recognized cloud security ...

deliver security artefacts such as, but not limited to, Security Management Plans, Risk Registers and Risk Assessments, Security Requirements Documents, Security Aspects Letters, Threat Models and Vulnerability Assessments, Security Architecture Documents, Compliance & Audit Reports, and Incident & Recovery PlansExperience in the assurance or implementation of information or cybersecurity management systems ...

deliver security artefacts such as, but not limited to, Security Management Plans, Risk Registers and Risk Assessments, Security Requirements Documents, Security Aspects Letters, Threat Models and Vulnerability Assessments, Security Architecture Documents, Compliance & Audit Reports, and Incident & Recovery Plans Experience in the assurance or implementation of information or cybersecurity management ...

deliver security artefacts such as, but not limited to, Security Management Plans, Risk Registers and Risk Assessments, Security Requirements Documents, Security Aspects Letters, Threat Models and Vulnerability Assessments, Security Architecture Documents, Compliance & Audit Reports, and Incident & Recovery Plans Experience in the assurance or implementation of information or cybersecurity management ...

that integrate seamlessly into CI/CD pipelines. Analyse complex cloud and Kubernetes architectures to identify and document potential attack vectors, mapping them against threat models to prioritise security improvements. Support defensive hardening efforts by providing actionable insights and telemetry from security validation exercises, ensuring continuous improvement of detection ...

relevant financial services experience)Good deep understanding of Generative AI and Agentic security risks such as prompt injection, data poisoning etc.Experience working with either threat modeling, risk assessing or auditing cloud technologies (AWS, Google and Azure), Generative AI/agentic systems and tool integrations (A2A, MCP)Recognized cloud security ...

that integrate seamlessly into CI/CD pipelines. Analyse complex cloud and Kubernetes architectures to identify and document potential attack vectors, mapping them against threat models to prioritise security improvements. Support defensive hardening efforts by providing actionable insights and telemetry from security validation exercises, ensuring continuous improvement of detection ...

effective and efficient use of security technologies related to the protection of Rackspace and Rackspace Customer systems and data. Leads in requirements gathering, threat modeling, planning, development, and implementation of data and system security controls and practices. Consults on security direction, maintaining a vigil over prudent assurance ...

with Engineering to embed secure‐by‐design principles into development workflows Build, manage, and continuously improve security policies, standards, and controls Lead risk management, threat modeling, and vulnerability management processes Oversee incident detection, response, and recovery planning Drive security awareness and training across the company Establish and manage identity ...