Threat Modeling Associate — Hybrid London | Cloud Security

Dianaduggan; Greater London; Hybrid; GBP 83,000 - 92,000; Full time

Job summary

Big Four client is seeking Threat Modelling Associates to join our security team in London. Hybrid role: four days in-office, one day remote. 6-month contract with potential extension. Day rate £450–£500 inside IR35 via umbrella.

Responsibilities include threat modeling with a documented process, development of automation tools, and maintaining high standards in identifying threats and mitigating controls.

You will train and supervise junior members and help deliver the threat model service.

Qualifications

• Experience in Cyber-Security/Information Security is essential.
• Threat Modelling using STRIDE, PASTA, Attack trees and ATT&CK.
• Security practices for authentication, authorization, logging/monitoring, encryption, infrastructure security, and network segmentation.
• Knowledge of CI/CD, Pipelines, SDLC concepts.
• Familiarity with Infrastructure as Code (Terraform, CloudFormation).
• Understanding of Docker, Kubernetes, Serverless, and Helm.
• Strong programming skills in Python (async) and FastAPI.
• Experience with Pytest for unit testing.
• Ensure software platforms adhere to security standards and SDLC processes.

Responsibilities

• Threat Modelling using a documented process.
• Develop automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigations.
• Attend to the lifecycle of identified threats and controls.
• Deliver threat models and supporting tasks within timeframes.
• Provide feedback, support, and improvements to the threat modelling process.
• Train newer team members and supervise juniors.
• Run parts of the threat model service.
• Work with minimal supervision to complete tasks.
• Develop, test, and deploy secure Python-based applications following SDLC.

Skills

Threat Modeling

Python

FastAPI

Unit Testing

CI/CD

Terraform

CloudFormation

Docker/K8s

Security SDLC

Async programming

Tools

Terraform

CloudFormation

Docker

Kubernetes

Pytest

FastAPI

AWS

GCP

Azure

Python

Job description

Big Four client is seeking Threat Modelling Associates to join our security team in London. Hybrid role: four days in-office, one day remote. 6-month contract with potential extension. Day rate £450–£500 inside IR35 via umbrella.

Responsibilities include threat modeling with a documented process, development of automation tools, and maintaining high standards in identifying threats and mitigating controls.

You will train and supervise junior members and help deliver the threat model service.