3 of 3 Threat Modelling Jobs in Yorkshire

expertise to help security and engineering teams across the enterprise embed security into the product development lifecycles. This role is the key advisor on AppSec standards, secure development practices, threat modelling, and security tooling (e.g. SAST, DAST, SCA, IaC scanning, container security, etc.), ensuring consistency and maturity in how applications are built and maintained. By aligning teams with … e.g. vulnerability MTTR, scan coverage, risk acceptance trends) and report findings to leadership and the Global Cyber Council. Coordinate secure architecture reviews for critical application initiatives and provide consultative threat modelling support to large cross brand projects. Continuous Improvement & Innovation: Know the latest on emerging application security technologies, industry best practices, and threat trends. Evaluate new tools More ❯

programmes and new product initiatives Engage in security reviews of third-party vendors, cloud providers, and SaaS platforms to validate compliance with the client’s security standards Assist in threat modelling, risk assessments, and documenting security controls across infrastructure and application layers Participate in incident response efforts and support the identification of root causes and mitigation strategies Requirements … technical stakeholders Exposure to security architecture frameworks (e.g., TOGAF, SABSA) Hands-on experience with CI/CD security, container security, or secure application design Familiarity with vulnerability management and threat modelling techniques Security certifications such as CISSP, CISA, or equivalent (or working towards) Why join us Career coaching, mentoring and access to upskilling throughout your entire FDM career More ❯

of experience in security architecture to shape and secure cloud environments at scale. Key Responsibilities Architect secure, scalable cloud solutions on AWS aligned with business and compliance needs. Conduct threat modelling, risk assessments, and security reviews across cloud-native platforms. Collaborate with DevOps, engineering, and compliance teams to embed security best practices. Define and maintain security policies, standards More ❯