Cyber Security Engineer (Threat Modelling)
We are seeking a Cyber Security Engineer (Threat Modelling) to help identify, assess and reduce security risks across applications, platforms and services. You will work closely with software engineers, architects, product teams and security specialists to embed threat modelling into the design and delivery lifecycle. The role will involve analysing systems and data flows, identifying potential attack paths, assessing threats and vulnerabilities, and recommending practical security controls that support both business and technical objectives.
Your responsibilities will include creating and maintaining threat models using established methodologies, such as STRIDE, attack trees or similar approaches; facilitating threat-modelling workshops; documenting security requirements and assumptions; and translating findings into prioritised remediation actions. You will review proposed architectures, APIs, cloud services and changes to existing systems, providing clear, risk-based guidance throughout the development lifecycle. You will also contribute to security reviews, technical assurance activities, vulnerability management and the continuous improvement of threat-modelling standards, tooling and processes. Where appropriate, you will support teams in validating mitigations and tracking risks through to closure.
The successful candidate will have experience in cyber security, application security, security architecture or a related engineering discipline, with practical knowledge of threat-modelling techniques and secure software development principles. You should be comfortable understanding complex technical environments, including cloud infrastructure, networks, APIs, identity and access management, containers or distributed systems. Strong analytical, communication and stakeholder-management skills are essential, as you will need to explain technical risks clearly to both technical and non-technical audiences. Familiarity with vulnerability assessment, penetration testing, DevSecOps, risk management frameworks and relevant security standards would be advantageous. Professional security certifications or equivalent practical experience are welcome. The role requires curiosity, sound judgement and a collaborative approach to solving security challenges.
Cyber Security Engineer (Threat Modelling)
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- IT Security Manager
- Security Consultant
- SOC Analyst
- Identity Access Management IAM
- Cyber Security Consultant
- Cloud Security
- Application Security
- Incident Response
- Penetration Tester
LATEST JOBS
- Security Engineer (Contractor)
- Vice President, Field CISO Com...
- Microsoft 365 & Security Infra...
- Senior ICT Security Designer
- Data Protection Expert
- Data Protection Officer: Schoo...
- Data Protection Officer
- IT CONSULTANT (IT Management,...
- Technology and Cyber Employee...
- Cyber Security Consultant
- Cyber Security Consultant (Pen...
- Platform and Services Engineer...