51 to 75 of 541 Threat Modelling Jobs in the UK

Azure, Entra ID, Defender XDR, Sentinel and Purview Building modern security controls around Zero Trust, secure-by-design and automation Leading architecture reviews and threat modelling for major projects and new technologies Taking a lead role in the secure adoption of Microsoft 365 Copilot, AI agents and custom … engineering and incident response Supporting complex and high‐severity security incidents alongside internal teams and external SOC partners Strengthening vulnerability and exposure management using threat intelligence, exploitability and business risk Automating security processes using Python, PowerShell, Logic Apps, Azure Functions and APIs Supporting technical controls and evidence ...

governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps … Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications ...

governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps … Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications ...

stakeholders on Secure by Design principles and security best practices. Reviewing and assuring solution designs against established security standards, patterns and architectural frameworks. Leading threat modelling, risk assessments and security design reviews. Identifying security risks and recommending effective mitigation strategies. Supporting cloud-first solutions across Azure and wider … engineering, assurance and risk teams to validate security controls. Producing high-quality security architecture artefacts, standards and blueprints. Monitoring emerging cyber threats and incorporating threat intelligence into security decision-making. Experience Required Extensive experience in Security Architecture within Central Government or the wider Public Sector. Strong understanding ...

team to take it even further. About the Role We are seeking a Principal Product Cybersecurity Assurance Engineer with deep expertise in product security, threat modelling, and risk assurance for highly regulated electromechanical systems. In this role, you will lead the delivery of product cybersecurity across Humanoid … inference pipeline and cloud-to-robot communication architecture. Own and maintain key security artefacts for audit-ready cybersecurity documentation including Security Management Plans, Threat Analysis and Risk Assessment (TARA) reports, Risk Assessments, and Remediation Action Plans across both platforms. Security Assurance & Certification Drive security assurance through the full product ...

cloud and security assurance within a highly confidential, multi-tenant SaaS environment. Key Responsibilities: Lead product and application security across the development lifecycle, including threat modelling, secure code review, vulnerability management and CI/CD security controlsWork closely with engineering and cloud teams to secure AWS environments, including … 7+ years' experience in cyber security or security engineeringStrong experience securing cloud-native SaaS platforms, ideally within AWS environmentsHands-on application security experience across threat modelling, OWASP and secure software developmentGood understanding of cloud security, identity, access controls, encryption and monitoringExperience delivering or implementing SOC 2 and/ ...

software and product development lifecycle. Key Responsibilities Maintain and improve the Information Security Management System (ISMS), policies, procedures and controls. Lead cybersecurity risk assessments, threat modelling and security reviews. Oversee penetration testing, vulnerability management and remediation activities. Advise on secure design, cloud security, mobile security, authentication, encryption … Information Security, Cybersecurity or Product Security. Strong experience with ISO 27001 and recognised frameworks such as NIST and OWASP. Experience conducting risk assessments, threat modelling and vulnerability management. Experience integrating security into software development lifecycles. Strong cloud security knowledge, ideally AWS. Experience supporting audits, regulatory reviews or compliance ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

services and integrations, including authentication, authorisation, session management and firm-level data separation AWS security , covering IAM, network controls, secrets, encryption and workload isolation Threat modelling and security review for new systems, financial workflows, external integrations and AI capabilities, joining projects early enough to change their design Vulnerability … security. Hands-on experience securing AWS or another major cloud platform, including IAM, network security and cloud-native controls Secure design. You have run threat modelling and architecture reviews, and you recommend proportionate controls that fit the system and its stage rather than the textbook answer You build ...

help teams understand and remediate their exposure. You will collaborate closely with platform engineers, product squads, and risk and governance teams. Job responsibilities Perform threat modelling of platform services and cloud infrastructure, translating findings into clear, actionable remediation guidance for engineering teams Design and implement cloud security guardrails … concepts and proficient applied experience Hands‐on experience in a DevSecOps, cloud security, or compliance platform engineering role operating in AWS Practical experience with threat modelling methodologies (e.g., STRIDE or equivalent) applied to cloud services or distributed systems Good working knowledge of AWS cloud security services including Identity ...

design options, manage risk-based trade-offs and produce clear architecture decision records. Review and assure solution designs, integrations and third-party components. Conduct threat modelling and identify proportionate remediation where designs do not meet required standards. Represent Littlefish Group at CAB and design authority forums, assessing changes … implementing controls for external customers. Strong knowledge of Zero Trust, identity and access management, Entra ID, Azure and Microsoft 365 security. Experience of threat modelling and using MITRE ATT&CK to inform detection and control design. Working knowledge of recognised frameworks and guidance, including NCSC CAF, NIST ...

Java, C, C++ and other relevant languages. Integrate security controls and automated testing into CI/CD pipelines , including SAST, DAST and SCA. Support threat modelling and vulnerability management across products and services. Work closely with developers, architects, DevOps teams and product owners to embed security into their … major language such as Java, C, C++, C#, Python or similar. Knowledge of secure software development lifecycles and shift-left security practices. Experience with threat modelling , such as STRIDE or similar approaches. Understanding of application, API and web security. Experience interpreting security findings, identifying false positives and prioritising ...

/SAE 21434, ISO 24882, IEC 62443, and the Cyber Resilience Act (CRA) Review the adequacy of key cybersecurity work products such as threat modelling/TARA outputs, requirements, architecture evidence, verification and validation strategies, and residual risk statements Drive closure of findings with stakeholders across systems, embedded … Excellent technical writing, communication, and stakeholder management skills, with the ability to present risk clearly and pragmatically Knowledge or experience of TARA and threat modelling approaches, including review of threat artefacts such as attack trees, is a plus Background in vulnerability management and post‐production monitoring/ ...

technical designs. Working across areas such as cloud, infrastructure, networks, integration, applications and enterprise security. Producing and reviewing security architecture and design documentation. Conducting threat modelling and identifying security risks within proposed solutions. Applying Secure by Design principles throughout the technology lifecycle. Working closely with Solution Architects, Engineers … architecture or solution-design experience. Relevant experience could include: Security Architecture or security solution design. Designing or reviewing HLDs/LLDs and technical architectures. Threat modelling and Secure by Design. Cloud security across AWS, Azure and/or GCP. Security architecture across infrastructure, networks, applications or integration environments. ...

service documentation. Supporting development teams with the adoption and integration of security tooling and best practices. Contributing to wider cyber security initiatives, including threat modelling and compliance activities. What we are looking for: Previously worked as a Senior Application Security Engineer, Lead Application Security Engineer, Principal Application Security …/CD tools such as GitHub and GitHub ActionsHighly skilled in Terraform and PythonStrong understanding of Azure security controls and cloud security governanceExperience with threat modelling in software engineering contextsKnowledge of ISO 27001 and its relevance to secure engineeringFamiliar with Agile and DevSecOps methodologiesEligible to work ...

secure‐by‐design culture across the business. Key responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers … software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility Please note ...

secure‐by‐design culture across the business. Key responsibilities include: Driving application and product security initiatives across multiple engineering teams Conducting security reviews, threat modelling and risk assessments Implementing and improving vulnerability management processes Embedding security tooling into CI/CD pipelines and development workflows Partnering with developers … software development practices Experience working closely with software engineering teams Hands‐on experience securing cloud environments (AWS, GCP or Azure) Experience with vulnerability management, threat modelling and security reviews Knowledge of CI/CD security and modern development practices Excellent stakeholder management and communication skills Eligibility Please note ...

help teams understand and remediate their exposure. You will collaborate closely with platform engineers, product squads, and risk and governance teams. Job responsibilitiesPerform threat modelling of platform services and cloud infrastructure, translating findings into clear, actionable remediation guidance for engineering teamsDesign and implement cloud security guardrails and policy … software engineering concepts and proficient applied experienceHands-on experience in a DevSecOps, cloud security, or compliance platform engineering role operating in AWSPractical experience with threat modelling methodologies (e.g., STRIDE or equivalent) applied to cloud services or distributed systemsGood working knowledge of AWS cloud security services including Identity ...

bank of the future from the ground up, offering you the chance to join us and make a significant impact. Job Responsibilities Perform threat modelling of platform services and cloud infrastructure, translating findings into clear, actionable remediation guidance for engineering teams Design and implement cloud security guardrails … concepts and proficient applied experience Hands-on experience in a DevSecOps, cloud security, or compliance platform engineering role operating in AWS Practical experience with threat modelling methodologies (e.g., STRIDE or equivalent) applied to cloud services or distributed systems Good working knowledge of AWS cloud security services including Identity ...

trusted subject matter expert, collaborating closely across our product groups to foster a proactive, risk-conscious security culture. Through continuous mentorship and forward-thinking threat modelling, you’ll help us securely scale and drive a digital revolution in the global insurance market. What you will be doing: Provide … implementation advice and guidance on securing AI-powered applications, aligning with frameworks like OWASP ASVS and the OWASP Top 10 for LLM Applications. Lead threat modelling sessions for AI and agentic systems during the technical design phase using STRIDE and AI-specific frameworks. Establish secure guardrails, allowlists, telemetry ...

complex enterprise IT and operational technology environments. Work with technical and solution architects to embed security throughout the design and delivery lifecycle. Apply threat modelling techniques to identify threats and define appropriate security requirements. Provide specialist advice on security risks, threat-based mitigation and system design. Manage … premises architecture and virtualisation Cloud platforms and containerisation Databases and LLM technologies Mobile technologies and application security Security architecture and secure-by-design principles Threat modelling, risk assessment and security requirements Security controls, protective monitoring and IAM Previous experience working specifically as a Security Architect is desirable ...

programmes Producing technical security evidence including risk assessments and vulnerability analysis Supporting programme teams, architects, and engineers to embed cyber security best practice Conducting threat modelling and cyber risk assessments using recognised frameworks Developing risk treatment plans and implementing mitigation strategies This role is full time, standard … Royal Dockyard. Essential experience of the Cyber Security Lead Strong experience delivering secure by design or cyber security assurance activities Proven ability to conduct threat modelling and risk assessments In-depth knowledge of cyber security frameworks such as NIST, ISO 27001, and ISO 27005 Experience influencing multidisciplinary teams ...

lifetime. We need someone who can fix them and make sure they stay fixed. You’ll lead security across our client engagements, from threat modelling to cloud infrastructure hardening, application security, and compliance. No theatre, no ticking boxes. Real security that works. What you’ll do Conduct security … compliance frameworks (SOC2, ISO 27001, Cyber Essentials) Develop security policies, runbooks, and incident response plans Mentor the team on security best practices Lead threat modelling sessions with client engineering teams What we’re looking for 5+ years of security engineering or InfoSec experience Deep knowledge of AWS security ...