476 to 500 of 532 Threat Modelling Jobs in the UK

excellent opportunity for individuals looking to grow their expertise in information security within a supportive and dynamic environment. Key Accountabilities: Assist in conducting threat and risk assessments for change activities, ensuring security controls are embedded within project requirements. Support the review of requirements, solution designs, and test plans … initiatives and projects. Experience: Strong experience in information security or a related role, preferably within a corporate environment. Basic understanding of cybersecurity principles, including threat modeling, risk assessment, and vulnerability management. Familiarity with security technologies such as firewalls, IDS/IPS systems, and endpoint protection. Exposure to both ...

cross‐program initiatives, and collaborate closely with senior leadership across the firm. The core of the role is hands‐on security risk management, threat modeling, security risk assessments, and security design and architecture reviews, paired with the governance and process work that scales the program. You will partner … start as a senior individual‐contributor and grow into broader leadership, including people’s leadership, as the function scales. Responsibilities Security Risk Management Lead threat modeling across products, infrastructure, and new initiatives, identifying and prioritizing risks, attack surfaces, and vulnerabilities. Conduct security risk assessments and translate findings into pragmatic ...

security into airborne mission systems across the engineering lifecycle and work with cross-disciplinary teams to deliver robust security solutions. The role focuses on threat modelling, security requirements, and accreditation support, with a flexible hybrid working arrangement across office and home-based hours. #J-18808-Ljbffr ...

daily with software developers, testers and product owners to ensure secure design, code quality and dependable delivery. The role combines hands-on engineering with threat modelling, risk assessment and secure delivery practices to elevate our security posture. #J-18808-Ljbffr ...

Cyber Project Specialist to join its Security Solutions team in the UK. The role supports Secure by Design across change and delivery programmes, offering threat modelling and guidance on security best practices and regulatory requirements. This is a 6 month secondment with hybrid working and a Glasgow-based ...

integrated in designs, code, and delivery, across our Bristol base with occasional travel to Cardiff and Bath in a hybrid setup. The role emphasizes threat modelling, secure coding, and risk-based decision making, with opportunities to grow into leadership of product security capability #J-18808-Ljbffr ...

based primarily from our Bristol office with occasional travel to Cardiff and Bath, offering hybrid working arrangement. You will embed secure development practices, perform threat modelling and risk assessments, and work closely with developers to ensure security is built into our products from design to delivery. #J ...

Cyber Security Engineer The Cyber Security Engineer joins our client's Proactive Security team, focusing on developing security technology stacks to ensure threat mitigation through offensive and preventive measures. The role offers the opportunity to work within a high-calibre security environment dedicated to safeguarding information assets. Our client … proactive risk management and employs advanced security technologies to stay ahead of emerging threats. Role Overview The Cyber Security Engineer will develop and maintain threat models, assess security controls, and build tools for proactive detection, configuration drift monitoring, and automated remediation. You will be responsible for managing SIEM systems ...

Apollo Research · London & San Francisco · Full-time Security and control role supporting threat modeling, attack design, red-teaming, and product security for an AI agent security product. Independent aggregation of a publicly posted role. AI Compliance Index is not affiliated with, endorsed by, or recruiting for Apollo Research. ...

platform from London, three days a week in office. You will own end-to-end features, evolve the distributed platform, and tackle an unusual threat model with an AI-first mindset. As a Founding Senior Engineer, you will help define engineering culture, establish standards, and build for scale with ...

scale. You’ll work across our AWS and Cloudflare estate, harden our secure SDLC, run pen testing efforts end‐to‐end, and threat‐model the features powering our connectors, OAuth flows, and agent execution paths. It’s a hands‐on, DevSecOps‐heavy role: you write code, ship tooling … testing end‐to‐end: scope and coordinate engagements with both AI‐driven scanners and human researchers, then drive findings through fix and retest. Threat‐model product features before they ship, new Auth provider, expanded multi‐tenant APIs, connector executions, agent tool‐calling paths etc. Build detection and response capability ...

scanner findings with engineering teams, tracked to closure and reported monthly. Support the S‐SDLC day to day: run the tooling, help teams threat model, sit on design reviews for security‐relevant changes, and coach the security champions. SOC operations and Microsoft Sentinel … contain incidents on the platform, coordinate engineering and the architect, run post‐incident reviews, and turn lessons into detections and controls. Run regular threat hunts against the platform's telemetry and bring threat intelligence into detections. Analytics and monitoring Own the logging and telemetry standard with the architect ...

delivery methodologies Assess security risks across client product portfolios and recommend remediation strategies while balancing business and technical requirements Advice on strategies around coding, threat modeling, and security testing for embedded systems, IoT devices while ensuring compliance with industry regulations Work alongside client R&D teams to lead … secure code reviews, threat modeling, security risk assessments, vulnerability assessments and validation and verification of controls Monitor emerging cybersecurity threats in the IoT and medical device landscape and write though leadership to showcase PA’s point of view on these Build strong stakeholder relationships across our clients Foster team ...

following areas: IP networking & OT On-premises architecture and Virtualization cloud platforms and Containerization Databases and LLMs Mobile Technologies & Application security Threat modeling techniques to identify security threats to systems, leading to the definition of Security requirements. Managing security requirements through the delivery and operational life cycle … system Provision of authoritative specialist security advice in Risk and threat-based mitigation to system designs Control frameworks such as NIST, ISO, CIS Protective monitoring, Authentication and authorization best practices. Develop excellent working relationships with key stakeholders, peers and subordinates. Communicating effectively verbally and in writing, demonstrated through: Effectively ...

responding to security alerts and performing data-based investigations. Experienced in alert rule creation and development (SNORT, YARA, SIEM). Experienced in environment threat modeling. Experienced in identifying and handling security incidents. Preferred Qualifications (Desired Skills/Experience): Experience researching current threats and vulnerabilities to Information Technology systems. Experience … practical threat hunting experience in a high value information/high threat processing environment dealing with persistent threats. Information Security qualification, Degree-level education in Information Security or related area CISSP Certification CREST – Intrusion Analyst, Cyber Threat Intelligence SANS GNFA, GCIA, GCIH Comptia Security+ CySA+ Splunk Enterprise ...

development life cycle. This role will provide you with challenging leadership and technical opportunities and the chance to grow Amazon's Bug Bounty and Threat Intelligence programs into the best on planet Earth. You will be in direct contact with teams in a variety of business verticals, giving … following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits ...

serve as an incident commander alongside other senior analysts. When not responding to threats, you'll be asking questions of our data sets, conducting threat hunting and data normalization operations across the organization to understand user behavior and identify anomalies. WHAT YOU'LL DOTriage and respond to alerts/… code principlesAs the frontline of DNR, you will lead the feedback loop for detections, ensuring alerts are fine tuned to reduce false positivesParticipate in threat modeling scenarios with cross-functional partners to understand weaknesses across Cloud, Mobile, Endpoints, and other environments incorporating findings into security controls and/ ...

working closely with engineering teams, bid teams, customer stakeholders, internal cyber assurers and MOD-related security groups to ensure secure-by-design delivery, robust threat and risk assessment, effective security requirements management, and the production of cybersecurity artefacts required to support accreditation and assurance.This is a customer-facing role … activity. Create, estimate and maintain cyber engineering plans for projects and bids, including activities, artefacts, assumptions, dependencies and delivery effort. Generate, iterate and maintain threat models and cyber risk assessments throughout the project lifecycle, using appropriate frameworks and methods such as NIST RMF. Identify and define proportionate risk treatments ...

stood up an IT and security function from scratch and can operate with autonomy in an early-stage, ambiguous environment. You understand the threat model of a high-stakes research organization — phishing, account takeover, off-boarding gaps, vendor compromise, business-email compromise, and the targeted attention that comes with … safety expert, but you should care about the work and be motivated by its importance. Experience designing or operating an insider-threat or personnel-security programme — background screening, separation of duties, and need-to-know access — in research, government-adjacent, or IP-sensitive environments. Background in mature SOC operations ...

becoming shelfware. Input to vendor risk assessments fits here too, particularly on how vendors handle your data in their own models. Understanding the AI threat landscape They need a working knowledge of AI-specific attack techniques and should be fluent in the reference frameworks, mainly the OWASP … understand how attackers use AI against the organisation (more convincing phishing, deepfake-enabled fraud, faster reconnaissance and exploit development) and how that changes your threat model. Shadow AI, meaning unsanctioned use of AI tools by staff, is a practical, near-term issue they should be able to discover ...

becoming shelfware. Input to vendor risk assessments fits here too, particularly on how vendors handle your data in their own models. Understanding the AI threat landscape They need a working knowledge of AI-specific attack techniques and should be fluent in the reference frameworks, mainly the OWASP … understand how attackers use AI against the organisation (more convincing phishing, deepfake-enabled fraud, faster reconnaissance and exploit development) and how that changes your threat model. Shadow AI, meaning unsanctioned use of AI tools by staff, is a practical, near-term issue they should be able to discover ...

supporting junior analysts through knowledge sharing and technical guidanceParticipating in the on-call escalation rota for out-of-hours incidentsImproving CSIRT processes, playbooks and threat modelsWho are we looking for? The ideal candidate will have the following skills and experience: Significant experience in cyber incident response, detection engineering … containerised environments and cloud-native infrastructure securityProgramming or scripting experience, preferably in Python, and exposure to automation platformsStrong understanding of modern attack techniques, threat actors and the MITRE ATT&CK frameworkExperience mentoring or leading within a security operations environmentStrong analytical skills with the ability to investigate complex threats, identify ...

analysts through knowledge sharing and technical guidance Participating in the on-call escalation rota for out-of-hours incidents Improving CSIRT processes, playbooks and threat models Who are we looking for? The ideal candidate will have the following skills and experience: Significant experience in cyber incident response, detection engineering … environments and cloud-native infrastructure security Programming or scripting experience, preferably in Python, and exposure to automation platforms Strong understanding of modern attack techniques, threat actors and the MITRE ATT&CK framework Experience mentoring or leading within a security operations environment Strong analytical skills with the ability to investigate ...

Engineer to join our Proactive Security team, focusing on building security tech stacks to mitigate threats with offensive and preventive measures. You will develop threat models, manage SIEM systems, and implement detection use cases while collaborating with incident response to protect information assets in a hybrid UK workplace. ...

solutions, and email sandboxing tools. You will support Sec Dev Ops and secure development automation initiatives. You will define and implement a company-wide threat modeling framework to ensure consistent risk assessment across all business units. You will lead the end-to-end Vulnerability Management lifecycle, including risk prioritization … rules, and access controls. About you Experience in security architecture, risk analysis, and security countermeasures. Experience managing advanced security solutions, including EDR and email threat protection tools. Proven expertise in performing threat modeling to identify and mitigate architectural security risks. Experience designing and overseeing an enterprise-wide Vulnerability ...