1 to 25 of 64 Remote/Hybrid Threat Modelling Jobs in the UK excluding London

play a critical role in designing, assuring, and delivering secure solutions across our client engagements. You will champion Secure by Design principles and lead threat modelling activities to ensure risks are identified and mitigated early in the lifecycle. Working closely with stakeholders, you will define security architectures, ensure … Design – Embed security into every stage of the solution lifecycle, ensuring systems are designed with security controls from the outset rather than retrofitted. Threat Modelling – Lead and facilitate threat modelling exercises (e.g. STRIDE), identifying vulnerabilities and defining mitigations early in delivery Risk Assessment – Identify, assess ...

business-critical platforms and services. Working closely with architecture, engineering, cloud and infrastructure teams, you will provide security leadership, conduct architecture reviews, perform threat modelling, and define security controls across complex enterprise environments. Key Responsibilities Define and maintain secure architecture principles, standards and reference architectures. Conduct security architecture … design reviews across cloud, infrastructure, applications and network environments. Perform threat modelling and security risk assessments. Design secure-by-design solutions across cloud, hybrid infrastructure, applications, identity and network environments. Support the implementation of Zero Trust security principles. Provide architectural guidance across AWS and Azure environments. Define security ...

/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services and architecture changes. Validate fixes and identify root causes to reduce recurring vulnerabilities. … prioritise and remediate security issues. Hands-on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting knowledge to understand unfamiliar code and contribute to automation. The confidence to work independently ...

Engineer on Mystra, you'll own application security end-to-end across multi-tenant, trillion-row-scale, AI-enabled data platforms. You'll lead threat modelling and design review with product teams, build the tooling and patterns that make secure codet, and find and fix the vulnerabilities that … steered by your own expert judgement and intuition, to keep Genomics secure against state-of-the-art threats. A Day in the Life Leading threat modelling and design reviews for new products and infrastructure, and defining the security invariants every team builds against: tenant isolation, authentication and authorisation ...

edge of delivery reviewing outputs. You'll be embedded in multidisciplinary teams, shaping how security is engineered into everyday work - from threat modelling and architecture at design time to hardened, monitored systems in production. You'll build trusted relationships with client engineering leads, platform teams, and senior stakeholders … Report programme KPIs (MTTR by severity, backlog age, coverage, recurrence rate) to senior stakeholders. Drive security into the team's normal engineering rhythm. Embed threat modelling, secure code review, SAST, SCA, dependency policy, and container scanning into design and delivery cycles — building the tooling and automation that make ...

that process. This role exists to embed security expertise directly into how our engineering teams build and ship software: setting the standards, running the threat modelling, and making the judgement calls that keep pace with delivery instead of slowing it down. About Redgate Redgate brings together people … scanner tells you. It's a role built on trust: teams will come to you for guidance, and the judgement you bring to triage, threat modelling, and governance decisions will shape how security actually gets done here. Partner directly with engineering and product teams to define and operationalise ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

role is a dedicated security role focused on the security of how we develop our products. It combines technical depth - reviewing designs and code, threat modelling, assessing risk pragmatically - with the credibility and communication skills to bring experienced developers along. It offers a genuine opportunity to grow into … Embed secure development practices across the software development lifecycle, including secure coding standards, code review, testing, CI/CD and related controls. Carry out threat modelling, secure design reviews and technical risk assessments for new and existing product capabilities, so that security is designed in from the start. ...

introduced by AI systems that can reason, retrieve data, call tools and take action. You will work with clients to assess AI security risks, threat model agentic workflows, design practical controls, and identify where AI can safely improve cyber security operations. This may include supporting secure AI adoption, reviewing … risks such as prompt injection, excessive agency, data leakage, insecure tool use, unsafe output handling, model supply chain exposure and weak human oversight. Support threat modelling for agentic systems, including how agents access tools, call APIs, retrieve data, make decisions and trigger actions. Advise on secure patterns ...

partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. You'll translate threat landscapes, compliance obligations, and business constraints into practical security architectures, working across the full engagement lifecycle, from threat modelling, security options analysis, through …/DAST tooling, API security, and container security in agile delivery contexts. Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling, and build consensus around security approaches. You communicate clearly with both technical teams and non-technical leadership. Highly DesirableGOV.UK and public sector ...

governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps … Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications ...

cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC … NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups ...

Lead the adoption of reusable global components and shared platforms where they meet UK product and regulatory needs Security, compliance and operational integrity Ensure threat modelling, secure design, privacy by design, vulnerability management and data protection controls are integrated into engineering ways of working. Work with security, risk … automated testing, code quality controls, observability, incident diagnosis, reliability engineering and DevSecOps practices. Knowledge of application security, identity and access management, OWASP guidance, threat modelling, privacy by design and relevant compliance requirements. Experience producing high‐quality architecture artefacts, including context and container views, integration diagrams, data‐flow diagrams ...

engineering, platform, and central architecture/governance teams, they run design and governance forums and influence without authority. They'll bring genuine cybersecurity expertise-threat modelling, security controls, identity and access, encryption, logging, and secure SDLC-so CSA's platforms and products can be trusted in production … cloud platforms and traditional on‐premise hosting; hands‐on experience with Azure, AWS and/or GCP is beneficial. Proven security architecture expertise, including: Threat modelling and secure‐by‐design practices IAM (RBAC/ABAC), privileged access concepts, and service‐to‐service authentication Encryption in transit/ ...

part of a bigger team, working with a group of a Senior Security Architects and Digital Engineering stakeholders to produce security architecture artifacts, threat modelling, design assurance, and reusable patterns that strengthen the programmes security posture. Key Responsibilities: You will lead and deliver core security architecture outputs including … Digital Engineering Security Artifacts and Engagement Report Security Requirements Specification Security Principles Framework Infrastructure Mapping Document & Security Architecture Design Pack Threat Modelling Report Reusable Security Pattern Library Knowledge Transfer Pack (training materials, handover content, recorded walkthroughs) We are looking for someone with: Extensive Security Architecture/Security Consulting ...

Here are some of the areas you could work in: Application Security: Learn how we build security into applications, including vulnerability management, penetration testing, threat modelling and security reviews. Cloud Security: Gain experience of how we protect cloud environments, identify security weaknesses and help teams apply appropriate security … recover. Vulnerability Management: Help identify and track security vulnerabilities, understand the risks they present and work with teams as they are addressed. Threat Modelling & Security Testing: Support security specialists in understanding what could go wrong with new systems and services and how those risks can be reduced. Risk ...

guardrails, and governance. You’ll work closely with development teams, architects, product owners, and third‐party suppliers to implement secure‐by‐design principles, conduct threat modelling and security reviews, and ensure appropriate controls are built into delivery processes. This role combines technical application security expertise with strong stakeholder … responsibilities Own and develop the organisation's application security practice, embedding secure‐by‐design principles and security controls throughout the software development lifecycle Lead threat modelling exercises and security design reviews for new applications, APIs, integrations, and significant technology changes Select, implement, and manage application security tooling including ...

safety-critical airborne mission systems. In this role you will: Develop and maintain security requirements for complex airborne electronic and mission-computing systems Undertake threat modelling, vulnerability analysis and security risk assessments throughout the engineering lifecycle Support the development of security architectures and secure-by-design solutions Produce … Secure by Design principles and relevant product and systems security standards, with experience embedding security throughout an engineering lifecycle Experience undertaking security risk assessments, threat modelling, vulnerability analysis or security requirements development Ability to interpret technical designs and communicate security risks and mitigations to multidisciplinary engineering teams Experience ...

product-security architecture for complex airborne mission systems Define the security strategy, requirements and secure-by-design approach across the programme lifecycle Lead threat modelling, vulnerability analysis, security risk assessment and accreditation activities Provide technical authority and informed security advice across systems, software and hardware engineering Make … aerospace or another safety-critical engineering environment Strong experience defining security requirements and secure-by-design approaches at system or product level Experience leading threat modelling, security risk assessment and vulnerability-analysis activities Experience providing technical leadership and making security architecture decisions across multidisciplinary engineering teams Knowledge ...

client is a global investment management company. Job Title Cyber Threat Intelligence Analyst The Role The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business … leadership, and external organizations such industry peers and intelligence sharing partners. In this role you will Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sources Actively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholders Conduct tactical ...

security requirements and features within embedded software and firmware Develop secure embedded software using C/C++ and contribute to secure product architecture Perform threat modelling, security risk assessments, vulnerability assessments and design reviews Support compliance with relevant product security standards including IEC 62443 and emerging cybersecurity requirements … architectures, RTOS environments and bootloaders Hands‐on experience implementing cybersecurity controls within embedded products, devices or firmware Good understanding of secure software development, threat modelling, vulnerability assessment and security testing Experience working within a product development environment and translating security requirements into practical engineering solutions Particularly Relevant Experience ...

Microsoft security stack, including Defender, Sentinel, Purview, Intune, Security Copilot, Azure Security, and Microsoft 365 Security & Compliance. Develop reusable security patterns for identity, threat, data protection, monitoring, compliance, and AI security. Design secure architectures across Azure, AWS, Google Cloud, SaaS, and on-premises environments. Lead integration of identity, security … consultancy and managed service opportunities. Qualification & Experience Experience in Security Architecture, Enterprise Architecture, or Cyber Security Consulting. Strong expertise in Zero Trust, security governance, threat modelling, risk management, and cloud security. Advanced Microsoft security experience across Entra ID, Defender, Sentinel, Purview, Intune, Azure Security, and Microsoft 365 Security. ...

frameworks Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements Performing threat modelling and risk assessments to develop a holistic picture of threat Ensuring security principles are applied during solution planning, design, test, deployment ...

code best practices. Automating remediation, compliance checks and policy enforcement through cloud-native tooling and policy-as-code approaches. Supporting secure solution design and threat modelling across engineering teams. Owning and improving vulnerability management processes, ensuring remediation targets are achieved. Configuring and maintaining cloud security controls, including ...

define risk appetite and make informed decisions about whether an initiative is ready to progress. Alongside engineers, you'll get into the technical detail - threat-modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes. From POC to production, you'll bring the two sides … implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review AI architectures, guardrails, evaluations ...