Job Search

We are seeking a Cloud Information Specialist Threat Modeler to strengthen the security and resilience of cloud-based platforms, applications, and information services. In this role, you will identify and assess threats across cloud environments, translate business and technical risks into practical security requirements, and support teams in designing effective controls. You will work closely with architects, developers, engineers, governance specialists, and operational stakeholders to ensure that security is embedded throughout the solution lifecycle.

Your responsibilities will include conducting structured threat modelling and risk assessments for cloud services, data flows, APIs, applications, and infrastructure; documenting attack paths, vulnerabilities, assumptions, and recommended mitigations; and maintaining threat models as systems, technologies, and risks evolve. You will review solution designs and security architectures, advise on identity and access management, encryption, network segmentation, logging, monitoring, and data protection, and help prioritise remediation activities. You will also contribute to security standards, design patterns, assurance processes, and clear reporting for both technical and non-technical audiences.

The successful candidate will have experience in cloud security, information security, threat modelling, security architecture, or a related discipline. Practical knowledge of major cloud concepts, shared responsibility models, secure software development, and common threat modelling frameworks such as STRIDE, attack trees, or data flow analysis is required. Familiarity with cloud-native services, DevSecOps, infrastructure as code, vulnerability management, and relevant data protection or security standards would be advantageous. You should be analytical, collaborative, and confident challenging assumptions constructively, with the ability to explain complex risks clearly and recommend proportionate, achievable solutions. Relevant professional certifications or equivalent experience are welcome.