76 to 100 of 541 Threat Modelling Jobs in the UK

from unsupported assurance claims and identify the limitations of the evidence available. You will work alongside senior engineers and security specialists to develop the threat model, risk methodology, research measures, evaluation scenarios and interpretation of results. This is not a conventional compliance or governance-only position. We need someone … work across the wider programme, with greater involvement during early research design and later security evaluation. What you’ll do Develop and challenge the threat model for consequential AI-agent actions. Identify credible threat scenarios, security assumptions and important failure conditions. Define practical consequence and exposure categories relevant ...

Java, C, C++ and other relevant languages. Integrate security controls and automated testing into CI/CD pipelines , including SAST, DAST and SCA. Support threat modelling and vulnerability management across products and services. Work closely with developers, architects, DevOps teams and product owners to embed security into their … major language such as Java, C, C++, C#, Python or similar. Knowledge of secure software development lifecycles and shift-left security practices. Experience with threat modelling , such as STRIDE or similar approaches. Understanding of application, API and web security. Experience interpreting security findings, identifying false positives and prioritising ...

reviewing designs for technical soundness and integration before they reach the review board Produce designs and low-level detail sufficient to pass IT Security threat modelling and review Contribute to the technical design authority (TDA) process Own the cross-business-unit backlog of architecture work, resourcing, and demand … premises (VMware), and hybrid environments Exposure to enterprise SaaS platforms such as Workday, SAP, or equivalent Strong knowledge of solution design, architecture governance, threat modelling, and security-led design review Experience with modelling approaches such as ArchiMate or UML Commercial awareness - cost-benefit analysis, TCO, FinOps Interest ...

Tektora Limited is seeking a Cyber Security Consultant with active SC Clearance to deliver threat modelling and secure design across complex client environments. The role requires hybrid travel to Bristol, Manchester, the North West England and London as needed. You will engage stakeholders, run workshops, review architectures ...

expertise across a complex digital environment. Key responsibilities: Deliver detailed cyber security risk assessments and assurance across complex digital environments. Apply cyber risk management, threat modelling and secure-by-design principles. Provide security advice across cloud, SaaS and emerging technologies, including AI . Apply relevant security standards, regulatory … cyber security risk management and assurance . Experience working in large, complex and fast-moving digital environments. Deep understanding of secure by design, threat modelling and cyber risk . Experience with cloud and SaaS security . Strong stakeholder management and communication skills. CISP and CISM qualifications. Active ...

Lead the adoption of reusable global components and shared platforms where they meet UK product and regulatory needs Security, compliance and operational integrity Ensure threat modelling, secure design, privacy by design, vulnerability management and data protection controls are integrated into engineering ways of working. Work with security, risk … automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

engineering, platform, and central architecture/governance teams, they run design and governance forums and influence without authority. They'll bring genuine cybersecurity expertise-threat modelling, security controls, identity and access, encryption, logging, and secure SDLC-so CSA's platforms and products can be trusted in production … cloud platforms and traditional on‐premise hosting; hands‐on experience with Azure, AWS and/or GCP is beneficial. Proven security architecture expertise, including: Threat modelling and secure‐by‐design practices IAM (RBAC/ABAC), privileged access concepts, and service‐to‐service authentication Encryption in transit/ ...

Architect for remote UK work with Active SC clearance. You will guide security design across delivery and engineering, review designs for compliance, and lead threat modelling and risk assessments. The role focuses on Azure security services and cloud-native controls within regulated government contexts. The position requires strong ...

What youll be doing Define security architecture for complex technology solutions. Work across areas including cloud, networking, OT, virtualisation, applications, databases and containerisation. Use threat modelling to identify risks and define security requirements. Provide technical security advice across the design and delivery lifecycle. Apply frameworks including NIST … more of: Cloud and container security IP networking/OT On-premises architecture and virtualisation Application and mobile security Databases and LLMs Threat modelling and security requirements Security risk and control frameworks Protective monitoring, authentication and authorisation Whats in it for you? UK-wide opportunities Associate Manager level ...

What youll be doing Define security architecture for complex technology solutions. Work across areas including cloud, networking, OT, virtualisation, applications, databases and containerisation. Use threat modelling to identify risks and define security requirements. Provide technical security advice across the design and delivery lifecycle. Apply frameworks including NIST … more of: Cloud and container security IP networking/OT On-premises architecture and virtualisation Application and mobile security Databases and LLMs Threat modelling and security requirements Security risk and control frameworks Protective monitoring, authentication and authorisation Whats in it for you? UK-wide opportunities Associate Manager level ...

doing Define security architecture for complex technology solutions. Work across areas including cloud, networking, OT, virtualisation, applications, databases and containerisation. Use threat modelling to identify risks and define security requirements. Provide technical security advice across the design and delivery lifecycle. Apply frameworks including NIST, ISO and CIS. Support … more of: Cloud and container security IP networking/OT On-premises architecture and virtualisation Application and mobile security Databases and LLMs Threat modelling and security requirements Security risk and control frameworks Protective monitoring, authentication and authorisation What's in it for you? UK-wide opportunities Associate Manager ...

What You'll Be Doing Owning the software security strategy and roadmap across the product line Defining security architecture, standards and best practices Embedding threat modelling and security requirements into product development Working closely with software and product teams to drive secure-by-design principles Leading architecture reviews … maturity across the organisation What We're Looking For You'll likely bring experience in: Security Architecture Product Security Secure Software Development Lifecycle (SDLC) Threat Modelling Vulnerability Management Security Testing & Assurance Secure CI/CD Pipelines Risk Assessment & Security Governance Software Architecture and Engineering Leadership Desirable Experience Embedded ...

sharing tools and integrations. Machine learning infrastructure. Training and inference workloads running in a 3rd party datacentre. Responsibilities Continuously red team our product stack: threat modelling, penetration testing, code and configuration review, and adversarial thinking applied across devices, cloud, applications and ML infrastructure. Highlight findings and their impact. … evidence and customer security assurance, without you having to run that process. Raise the bar across the team through code review, threat modelling sessions and mentoring, so that security knowledge spreads rather than bottlenecking on you. We want someone who is comfortable ranging across cloud, embedded ...

Trainline Security Team Our Security team is dedicated to designing, implementing and monitoring the controls that keep Trainline resilient in a fast-evolving threat landscape. As part of our ongoing mission to mature Trainline's security capabilities, you'll help protect the digital channels that power billions of pounds … remediate (MTTR) by severity and security testing coverage to give leadership clear visibility of risk Work with teams across the business to carry out threat modelling for our web, mobile and API services, identifying risks and putting effective countermeasures in place Assess the security posture of our applications ...

standards, reference architectures, control patterns and assessment methodologies for AI models, LLM and agentic AI systems and AI development platforms. Lead security architecture reviews, threat modelling and technical assurance for high-risk AI systems, products and material changes. Establish and improve model-assurance requirements for third-party … security initiatives from assessment and design through implementation, validation and operational handover, with measurable adoption and risk-reduction outcomes. Experience leading security architecture reviews, threat modelling and remediation through the software or product development lifecycle. Strong understanding of AI security threats and mitigations. Experience designing or assessing security ...

include: Provide security assurance and governance across enterprise AI and cloud initiatives, ensuring solutions are secure by design. Conduct security reviews, risk assessments, and threat modelling activities for AI platforms, applications, and services. Partner with architects, engineering teams, and business stakeholders to challenge designs and ensure appropriate security … related threats and controls. Excellent stakeholder management and communication skills, with the ability to influence senior leaders, architects, and delivery teams. Strong background in threat modelling, security governance, risk assessment, IAM, network security, cryptography, and security monitoring. Passion for technology and innovation, with an interest in AI, cloud ...

performed by the IS Security team Supports IS Security achieve regulatory and statutory compliance requirements Complete cyber risk assessments, including third party suppliers Apply threat modelling principles to complex system and solution designs to identify security risks and appropriate mitigations Supports, monitors and recommends improvements to cyber incident … governance requirements and identifying suitable controls. (essential) Experience of delivering cloud focused security solutions with a solid understanding of modern cyber threats and threat modelling techniques (preferred) Good understanding of security frameworks (NIST CSF, Mitre ATT & CK) (essential) At Sword, our core values and culture are based ...

part of a bigger team, working with a group of a Senior Security Architects and Digital Engineering stakeholders to produce security architecture artifacts, threat modelling, design assurance, and reusable patterns that strengthen the programmes security posture. Key Responsibilities: You will lead and deliver core security architecture outputs including … Digital Engineering Security Artifacts and Engagement Report Security Requirements Specification Security Principles Framework Infrastructure Mapping Document & Security Architecture Design Pack Threat Modelling Report Reusable Security Pattern Library Knowledge Transfer Pack (training materials, handover content, recorded walkthroughs) We are looking for someone with: Extensive Security Architecture/Security Consulting ...

production deployment. Provide cyber security guidance and best practises for various AI initiatives, including Generative AI, Business Intelligence, and advanced analytics platforms. Conduct threat modelling activities using IriusRisk. Identify security risks, vulnerabilities, and devise mitigation strategies throughout the development lifecycle. Ensure solutions meet internal cyber security standards, governance … with stakeholders via Jira, Jira Align, and Confluence. Required Skills & Experience: A strong background in Cyber Security within complex enterprise environments. Experience in conducting threat modelling and security risk assessments. Familiarity with AI, Machine Learning, Data, or Advanced Analytics platforms. Knowledge of cloud security principles, especially within Google ...

architectures and control patterns for AI agents, including identity, permissions, tool use, data access, memory, human oversight, logging and containment. Lead security risk assessments, threat modelling and assurance reviews for high-risk agentic AI use cases, platforms and material design changes. Develop and apply test scenarios for agentic … meetings and collaboration. Qualifications: Demonstrated experience delivering security controls from design through implementation, validation and operational handover across cross-functional engineering teams. Experience with threat modelling, security assessment and remediation for applications, cloud services, APIs or AI-enabled systems. Strong understanding of agentic AI security risks and controls ...

Senior Security Engineer - AI, you will: Design and develop security solutions for AI-driven and agentic systems. Conduct both traditional and AI-specific threat modelling and risk assessments. Support the embedding of security controls throughout the end-to-end agentic SDLC, including design, testing, release and governance. Develop … ideally with a hands-on background in Application Security or Infrastructure Security. Strong understanding of core security principles, controls and architectures. Proven experience in: Threat modelling Secure system design Embedding security within the Software Development Lifecycle (SDLC) Exposure to AI and agentic systems, either through practical implementation ...

automation that prevent material weaknesses reaching production Secure the software supply chain through trusted dependencies, SBOMs, artefact signing, provenance and workload identity Lead threat modelling and security design reviews for complex products and platforms Diagnose vulnerabilities and misconfigurations, reduce false positives and work directly with engineers on prevention … application testing, dependency analysis, secrets detection, container and cloud posture tooling Ability to write maintainable code, scripts, integrations and policy-as-code Experience leading threat modelling and resolving complex security design trade-offs Ability to assess emerging AI and agentic engineering practices pragmatically and establish proportionate controls Ability ...

backend services and cloud platforms. You will define secure development standards and guide teams to build defensible architectures without slowing delivery. Lead threat modelling across authentication, data protection and public interfaces, implement SAST/DAST/SBOM tooling, and drive encryption and runtime defenses. #J-18808-Ljbffr ...

Here are some of the areas you could work in: Application Security: Learn how we build security into applications, including vulnerability management, penetration testing, threat modelling and security reviews. Cloud Security: Gain experience of how we protect cloud environments, identify security weaknesses and help teams apply appropriate security … recover. Vulnerability Management: Help identify and track security vulnerabilities, understand the risks they present and work with teams as they are addressed. Threat Modelling & Security Testing: Support security specialists in understanding what could go wrong with new systems and services and how those risks can be reduced. Risk ...

guardrails, and governance. You’ll work closely with development teams, architects, product owners, and third‐party suppliers to implement secure‐by‐design principles, conduct threat modelling and security reviews, and ensure appropriate controls are built into delivery processes. This role combines technical application security expertise with strong stakeholder … responsibilities Own and develop the organisation's application security practice, embedding secure‐by‐design principles and security controls throughout the software development lifecycle Lead threat modelling exercises and security design reviews for new applications, APIs, integrations, and significant technology changes Select, implement, and manage application security tooling including ...