Senior Threat Modelling & Application Security Engineer

Project overview

Senior Threat Modelling & Application Security Engineer

Project details

Up to £450 - £500 (Inside IR35)

London/ Hybrid - 4 days a week onsite

6 months (Initial)

A major organsiation is seeking a Senior Threat Modelling & Application Security Engineer to help drive secure-by-design practices across cloud and application environments.

Key Responsibilities

Required Experience

Desirable

Certifications

What You'll Bring

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.

• Conduct threat modelling using STRIDE, PASTA, ATT&CK and Attack Trees.
• Identify vulnerabilities and define mitigating security controls.
• Review technical architectures and support secure SDLC processes.
• Develop security automation tooling and Python-based applications.
• Partner with engineering teams to embed security best practices.
• Track threats and controls through to remediation and closure.
• 6+ years in IT, including 4+ years within Cyber Security.
• Strong threat modelling and application security experience.
• Knowledge of OWASP, CWE, authentication, authorisation, encryption and infrastructure security.
• Experience with Terraform/CloudFormation, CI/CD and Jira.
• Strong Python skills, including FastAPI and Pytest.
• Experience within a regulated environment.
• Docker, Kubernetes, Helm, Serverless, GitOps and CDK.
• Penetration testing exposure.
• Snowflake, MongoDB, Databricks, GitHub and Terraform Cloud.
• Associate-level cloud certification (AWS, Azure, GCP or equivalent).
• Cyber security certification such as CySA+, CISA, GSEC, SSCP or Microsoft Security certifications.
• Strong analytical and problem-solving skills.
• Excellent communication and stakeholder management.
• An adversarial mindset and passion for continuous learning.
• Ability to work independently and collaboratively across teams.
• Start: flexible
• Location: London, Hybrid, GB
• Rate: 56-63 EUR/h