51 to 75 of 169 Threat Modelling Jobs in the UK excluding London

security solutions across network, application, data and endpoint layersLead security architecture reviews and technical security assessmentsDesign zero-trust security models and continuous verification frameworksCyber Threat & Risk ManagementAssess cyber threat landscape and design threat-informed security architecturesLead security risk assessments and vulnerability management programmesDesign incident response, threat … complianceArchitect compliance and audit capabilities for regulatory reportingLead security standards implementation and controls frameworksSecurity Solutions & IntegrationArchitect endpoint protection, data loss prevention (DLP) and advanced threat protection solutionsDesign cloud security architectures supporting hybrid and multi-cloud environmentsArchitect application security, API security and secure SDLC integrationDesign security operations centre (SOC) capabilities ...

/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience ...

code best practices. Automating remediation, compliance checks and policy enforcement through cloud-native tooling and policy-as-code approaches. Supporting secure solution design and threat modelling across engineering teams. Owning and improving vulnerability management processes, ensuring remediation targets are achieved. Configuring and maintaining cloud security controls, including ...

challenges that span multiple technology domains. Job responsibilities Cultivate a security culturewith your product technology and business colleagues by performing secure design reviews and threat modelling with application teams so they adopt our control products and create products that are secure by design. Know your productacross its breadth ...

critical role in strengthening and maturing Reapit’s cloud security posture. Your work will span hands on security engineering, deep incident response, proactive threat detection, and collaboration with global teams. Security Engineering & Cloud Security Design, implement, and enhance secure Cloud infrastructure, services, and applications in collaboration with DevOps teams. … outsourced SOC Lead and participate in global incident response activities, including investigation, containment, eradication, and recovery. Perform advanced log analysis, digital forensics, and threat validation using AWS native and third party tooling. Monitor AWS/Azure and application security alerts, responding quickly and decisively. Participate ...

define risk appetite and make informed decisions about whether an initiative is ready to progress. Alongside engineers, you'll get into the technical detail - threat-modelling AI and agentic architectures, assessing guardrails, data access, identity and failure modes. From POC to production, you'll bring the two sides … implement practical AI governance frameworks, policies and controls. Support clients with EU AI Act, UK GDPR, DPIA, NIST AI RMF and ISO 42001 requirements. Threat-model GenAI and agentic AI systems. Assess risks including prompt injection, data leakage, excessive agency and tool-use escalation. Review AI architectures, guardrails, evaluations ...

forums, governance boards and design authorities. Supporting solution architects and engineering teams in defining clear security and non-functional requirements. Leading or contributing to threat modelling, vulnerability assessments and penetration testing activities. Additional requirements specific to the role: Occasional travel across our client sites and operational locations. Participation ...

needs to product leadership and engineers Broad experience with information, system, and network security concepts and components Demonstrated experience with architecture and security reviews, threat modeling applications and identifying areas of risk Experience implementing strategies to support secure and compliant architectures Deep understanding of the OWASP Top 10 application ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape.The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape.* Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

lead and shape the strategic and operational cyber digital vision, whilst driving continuous improvements and keeping one step ahead of the current global threat landscape.The Senior Digital Security Manager will lead this organisation, supporting the operational and commercial security leads, working in partnership with clients, stakeholders, BT colleagues … Digital Cyber Security Strategy and Digital Security Roadmaps. Embed transformation and change to maintain a suitable security posture against a continuous evolving threat landscape.* Accountable for the Digital Security Architecture across the business unit, defining best practice, driving the deployment, integration and configuration of security solutions and enhancements ...

/CD pipelines, build tools, artifact repositories and developer platforms Expertise in secure software delivery, vulnerability management and platform security Experience with threat modelling, security frameworks and maturity assessments Strong knowledge of application security, network security and cloud security principles More details available on successful application. ...

stakeholders, capture business and security requirements, and translate them into practical architectural solutions.Working knowledge of architectural frameworks such as SABSA and TOGAF.Strong understanding of threat modelling, risk assessment, and secure-by-design principles, with the ability to apply outputs to architectural decisions.Experience interpreting and applying security standards, frameworks ...

Design & Regulated Environments:** Proven experience delivering solutions within highly regulated, security-sensitive or compliance-driven environments. Strong understanding of secure-by-design principles, OWASP, threat modelling, identity and access management, least-privilege principles and non-functional requirements.* **Software Engineering Authority:** Extensive software engineering background with mastery of modern ...

architecture, ideally with exposure to cloud/SaaS security and vendor risk Working knowledge of LLM and generative AI architectures, data flows and associated threat models, including prompt injection, data leakage, model access control and agentic tool-use risk Familiarity with regulatory frameworks relevant to the sector, including DORA ...

current and emerging technologies to select or recommend the best solutions for the future state architecture. Knowledge of application security, MITRE ATT&CK and Threat Modelling. Broad knowledge of controls in the industry (NIST, ISO, PCI, SOC, CSF, ISO27001, SABSA and TOGAF) Identity and Access Management (SAML, OAuth, certs … Identifying security flaws in solutions through threat modelling, architectural assessments and design reviews Identity and Access Management, Data Leakage Prevention, Network and Infrastructure Security Cryptography, Encryption and Key Management, Secrets Management, TLS, IPSec, Ciphers, X509 Application Security Design, DevSecOps, Agile practices, Shift Left concepts and automation You have ...

cyber security into OT system architecture and lifecycle. Develop and maintain the Information Assurance Framework tailored to OT environments. Conduct OT-specific risk assessments, threat modelling, and vulnerability analysis. Oversee cyber resilience testing and incident response planning for OT systems. Compliance & Standards Ensure alignment with nuclear ...

cloud platforms (Azure, AWS) and cloud‐native architectures Experience with containerisation (Docker, Kubernetes) and CI/CD pipelines Familiarity with security architecture principles and threat modelling Experience in the cybersecurity, forensics, or defence technology sectors Understanding of database design and data architecture patterns Experience with API design ...

traditional on-premise hosting; hands-on experience with Azure, AWS and/or GCP is beneficial. Proven security architecture expertise is beneficial, including: Threat modelling and secure-by-design practices IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication Encryption in transit/at rest ...

creating actionable alerts, defining SLOs and SLIs, and leading incident response and post‐incident improvement activities. Embed security by design through secure coding practices, threat modelling, role‐based access control and least privilege, secrets management including Key Vault integration, and modern identity patterns using OAuth2 and OIDC. Coach ...

applications, platforms, APIs, cloud solutions, and data services using the Shift left methodology Provide expert security guidance and assurance across the wider business Lead threat modelling activities and support informed decision-making around security risks, controls, and trade offs Define and maintain security patterns covering areas such ...

NSGs, and network segmentation. Maintain platform hardening standards, identity and access management controls, encryption standards, and privileged access models. Lead technical security reviews, infrastructure threat modelling, and remediation activities for cloud platform changes. Implement policy-based guardrails and preventative controls using native cloud governance capabilities. Infrastructure as Code ...

cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities and remedial action plans. Coordinating with product ...

cyber domain. Decomposing cyber and security requirements down to the system control level. Conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigations, including technical understanding. Scoping and managing security verification and validation activities and remedial action plans. Coordinating with product ...

patterns. This will include areas such as LLMs, RAG, AI agents, vector databases, prompt injection, data leakage, identity, tool/API integration and AI threat modelling, alongside broader cloud and enterprise security architecture. The successful candidate will have a strong security architecture background combined with genuine AI/ ...

SOAR and endpoint security platforms . Support migration from legacy VPN, proxy and firewall technologies to modern Zero Trust models. Conduct POCs, technical validation, threat modelling and security gap assessments. Troubleshoot and optimise Zero Trust deployments, telemetry and access controls. Provide technical guidance, mentorship and architectural governance. ...