Threat Modeling IT Cyber Security Consultant

Telstra Associates; Greater London; Hybrid; GBP 24,000 - 60,000; Full time

Job summary

Telstra Associates in London is seeking a Threat Modeling IT Cyber Security Consultant to support a new project. The role is hybrid with a day rate of £450-£500+ per day inside, focusing on threat modeling, secure Python development, and process improvements in collaboration with senior stakeholders.

The position requires cloud and cybersecurity certifications, extensive IT experience, and strong knowledge of OWASP, STRIDE, PASTA, and ATT&CK frameworks.

Qualifications

• Minimum 6 years IT experience including 4+ years in Cyber Security/Info Security.
• Experience in a cyber-security role.
• Experience with threat modeling tools and methods (STRIDE, PASTA, attack trees, ATT&CK).
• Experience identifying vulnerabilities using CWE/OWASP.
• Knowledge of authentication, authorization, logging/monitoring, encryption, infrastructure security, and network segmentation.
• Experience with operating systems and hardening.
• 2–5 years across listed technical areas.

Responsibilities

• Threat modeling using documented process.
• Develop automation tools as required.
• Maintain high standard in identifying threats and mitigating controls.
• Manage lifecycle of identified threats and controls.
• Deliver threat models and tasks within agreed timeframes.
• Provide feedback and improvements to threat modeling process.
• Present work to seniors, team, and technical peers.
• Work with little supervision to complete tasks.
• Develop, test, and deploy secure Python applications per SDLC and quality standards.

Skills

Threat modeling

Python

Security practices

Automation

OS hardening

Cloud concepts

Education

Associate cloud certification (AWS/GCP/Azure)

Associate or professional cybersecurity certification

Tools

STRIDE

PASTA

ATT&CK

Job description

Salary: £24,000 - 60,000 per year

Requirements:

• We expect an associate-level cloud certification from AWS, GCP, or Azure.
• We expect an associate or professional cybersecurity certification.
• We require a minimum of 6 years of IT experience, including at least 4 years in Cyber Security/Information Security.
• We require experience in a cyber-security role.
• We require experience with threat modeling tools and methods such as STRIDE, PASTA, attack trees, tooling, and ATT&CK.
• We require experience identifying vulnerabilities using CWE or OWASP.
• We require knowledge of security practices related to authentication, authorization, logging/monitoring, encryption, infrastructure security, and network segmentation.
• We require experience with operating systems and hardening.
• We value two to five years of experience across the listed technical areas.

Responsibilities:

• We carry out threat modeling using a documented process.
• We develop automation tools as required.
• We maintain a high standard of work in identifying threats and specifying mitigating controls.
• We manage the lifecycle of identified threats and controls.
• We deliver threat models and supporting tasks within agreed timeframes.
• We provide feedback, support, and improvements to our existing threat modeling process.
• We present our work to seniors, our team, and other technical teams.
• We work with little supervision to complete assigned work.
• We develop, test, and deploy secure and efficient Python-based applications in line with established SDLC processes and quality standards.

Technologies:

• AWS
• Azure
• Cloud
• GCP
• Support
• Network
• OWASP
• Python
• Security

More:

We are hiring for a Threat Modeling IT Cyber Security Consultant for a new project in London. This is a hybrid role with a day rate of £450-£500+ per day inside. We are looking for a strong consultant to support our threat modeling work and contribute to improvements in our process while collaborating with senior stakeholders and technical teams.

last updated 38 week of 2026