1 to 25 of 174 Threat Modelling Jobs in the UK excluding London

teams by embedding security-by-design principles throughout the software development lifecycle. Define and document security patterns, reference architectures, and reusable security artefacts. Lead threat modelling activities and identify appropriate mitigation strategies. Collaborate with stakeholders across business, product, operations, and engineering teams to drive secure decision-making. Advise … facing and/or consultancy environments. Demonstrated experience designing and implementing enterprise security architectures. Strong understanding of security architecture methodologies and frameworks. Experience conducting threat modelling and security risk assessments. Experience supporting security assurance activities within regulated environments. Proven ability to balance security requirements with operational and business ...

influence architecture, automate security controls, strengthen detection & response, and drive a measurable uplift in our security posture. You’ll define our standards, lead threat modelling, and champion secure‐by‐design practices across an engineering organisation that’s modernising rapidly and ready for your expertise.Key responsibilities:Security architecture & design … Collaborate with engineering and platform teams to design secure solutions, perform threat modelling and review designs for cloud, container and service‐based architectures.Cloud security: Define and enforce secure configurations, network segmentation, identity and access controls for public cloud (primarily AWS).Application & infrastructure hardening: Implement secure coding practices, vulnerability ...

everything they build. Key Responsibilities Define and evolve Product Security strategy across the Secure SDLC. Embed Secure-by-Design principles into software engineering. Lead threat modelling and security architecture reviews. Build scalable security tooling and automation that integrates into developer workflows. Partner with Engineering and Product teams … security controls. Built Secure SDLC frameworks developers genuinely adopted. Strong software engineering background with the technical credibility to influence engineers. Hands-on experience with threat modelling, Secure-by-Design, security architecture and developer enablement. Experience building security tooling, automation or integrating security into CI/CD pipelines. Remained ...

edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security assurance is woven into everyday engineering work - from threat modelling at design time to control testing in production. You'll build trusted relationships with client security teams, senior stakeholders, and government security communities … report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles - making security a shared engineering responsibility rather than ...

roadmap, backlog and design decisions. Work with colleagues across product, development, and networks & infrastructure to embed security across the product lifecycle. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities. Assign pragmatic risk levels and support sensible prioritisation of remediation … software-led environment. Good understanding of how product and development teams operate, including how security considerations are balanced alongside product delivery. Strong experience of threat modelling, secure design review, vulnerability assessment and remediation prioritisation. The judgement to assess exploitability and business impact pragmatically Practical experience applying security across ...

roadmap, backlog and design decisions. Work with colleagues across product, development, and networks & infrastructure to embed security across the product lifecycle. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities. Assign pragmatic risk levels and support sensible prioritisation of remediation … software-led environment. Good understanding of how product and development teams operate, including how security considerations are balanced alongside product delivery. Strong experience of threat modelling, secure design review, vulnerability assessment and remediation prioritisation. The judgement to assess exploitability and business impact pragmatically Practical experience applying security across ...

roadmap, backlog and design decisions. Work with colleagues across product, development, and networks & infrastructure to embed security across the product lifecycle. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities. Assign pragmatic risk levels and support sensible prioritisation of remediation … software-led environment. Good understanding of how product and development teams operate, including how security considerations are balanced alongside product delivery. Strong experience of threat modelling, secure design review, vulnerability assessment and remediation prioritisation. The judgement to assess exploitability and business impact pragmatically Practical experience applying security across ...

part of a multi-disciplinary Agile team, you will implement DevSecOps practices throughout the software development lifecycle, embedding security practices (e.g. vulnerability management, threat modelling etc.) and automating security artifact generation (e.g. secret scanning, container security, SAST, DAST etc.). You will provide subject matter expertise in application … delivery teams. Verifying the implementation of security principles, architectural patterns, and requirements. Driving the adoption of cyber security practices (e.g. vulnerability management, threat modelling etc.) within Agile delivery teams. Putting people first & developing others Youll help coach and develop more junior members of the team. Minimum (essential) requirements ...

part of a multi-disciplinary Agile team, you will implement DevSecOps practices throughout the software development lifecycle, embedding security practices (e.g. vulnerability management, threat modelling etc.) and automating security artifact generation (e.g. secret scanning, container security, SAST, DAST etc.). You will provide subject matter expertise in application … actioned by the delivery teams.Verifying the implementation of security principles, architectural patterns, and requirements.Driving the adoption of cyber security practices (e.g. vulnerability management, threat modelling etc.) within Agile delivery teams.Putting people first & developing others – You’ll help coach and develop more junior members of the team.Minimum (essential) requirements ...

Newcastle, offering the opportunity to work with a diverse portfolio of clients, helping them strengthen their security posture and manage risk in an evolving threat landscape.You will play a key role in delivering security advisory services, conducting assessments, and supporting organisations in aligning with industry standards and best practices. … role will also involve supporting clients with modern security challenges, including threat modelling, secure-by-design practices and emerging AI security considerations. Key Responsibilities Provide expert guidance on information security strategies, frameworks and best practices. Conduct security risk assessments, gap analyses and audits. Support clients in achieving ...

Newcastle, offering the opportunity to work with a diverse portfolio of clients, helping them strengthen their security posture and manage risk in an evolving threat landscape. You will play a key role in delivering security advisory services, conducting assessments, and supporting organisations in aligning with industry standards and best … practices. The role will also involve supporting clients with modern security challenges, including threat modelling, secure-by-design practices and emerging AI security considerations. Key Responsibilities Provide expert guidance on information security strategies, frameworks and best practices. Conduct security risk assessments, gap analyses and audits. Support clients ...

that process. This role exists to embed security expertise directly into how our engineering teams build and ship software: setting the standards, running the threat modelling, and making the judgement calls that keep pace with delivery instead of slowing it down. About Redgate Redgate brings together people … scanner tells you. It's a role built on trust: teams will come to you for guidance, and the judgement you bring to triage, threat modelling, and governance decisions will shape how security actually gets done here. Partner directly with engineering and product teams to define and operationalise ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

detection, response, and automation. This pivotal role requires deep expertise in IBM QRadar, with a strong focus on playbook development, analytical rule creation, and threat modelling. The Senior SOC Engineer will play a key role in building and optimising detection and response strategies, ensuring robust protection against evolving threats. … configure, and maintain the QRadar SIEM platform. Onboard and normalise log sources across on-premises and cloud environments. Develop and optimise analytical rules for threat detection, anomaly detection, and behavioural analysis. Playbook Development & Automation Design and implement incident response playbooks for scenarios such as phishing, lateral movement, and data ...

aligned to business requirements Translate security, compliance and regulatory requirements into practical security designs Develop and maintain security architecture patterns, standards and frameworks Conduct threat modelling, security assessments and risk reviews Advise clients on security governance, compliance and risk management strategies Support cloud security initiatives across AWS, Azure … governance, risk and compliance frameworks Experience designing and reviewing secure cloud architectures Knowledge of AWS, Azure and/or GCP security services Experience conducting threat modelling and risk assessments Strong stakeholder engagement and communication skills Experience working with enterprise security technologies and controls Ability to balance strategic architecture ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through … SAST/DAST tooling, API security, and container security in agile delivery contexts.Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through … SAST/DAST tooling, API security, and container security in agile delivery contexts.Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through … SAST/DAST tooling, API security, and container security in agile delivery contexts.Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through … SAST/DAST tooling, API security, and container security in agile delivery contexts.Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through … SAST/DAST tooling, API security, and container security in agile delivery contexts.Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership.Highly DesirableGOV.UK and public sector compliance ...

with software engineering teams to identify vulnerabilities, improve security throughout the SDLC and build secure-by-design solutions. What you'll be doing Conduct threat modelling, risk assessments and security architecture reviews Assess security across cloud and Kubernetes/container environments Embed SAST, DAST, SCA, SBOM and secret … Strong Kubernetes and Docker/container security knowledge Experience integrating SAST, DAST, SCA and security tooling into CI/CD Strong understanding of threat modelling, IAM, cryptography and application security Experience with Go and/or C# development Knowledge of HTTP, REST, TLS and TCP/IP Strong ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

purpose solutions. Supporting the security triage of proposed solutions and identifying the resources, timescales and expertise required. Conducting security risk assessments using recognised threat-modelling techniques. Producing high-level and low-level security designs for high-security-impact workstreams. Defining security requirements based on risk-assessment findings, organisational … secure solutions across varied technology environments. You will also have: Experience providing security architecture and assurance support to enterprise-scale programmes. Strong knowledge of threat-modelling techniques such as STRIDE, DREAD and MITRE ATT&CK. The ability to translate risk assessments into structured, high-quality security requirements ...

Regulations - feeding posture data into governance and risk reporting rather than treating it as a point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme … structuring reports around the decisions people need to make, not just the controls you've tested. Embed security as a continuous engineering concern , supporting threat modelling and security reviews throughout delivery, challenging designs that create unnecessary risk, and mentoring colleagues on secure-by-default practices. Support and assess ...