Threat Modelling & Security Automation Engineer

AMS CWS; Greater London; On-site; GBP 50,000 - 70,000; Full time

Job summary

AMS CWS is seeking a Cybersecurity Engineer to lead threat modelling and security assessments for a six-month London contract. You will develop Python-based security tools and drive secure design decisions across cloud and DevOps environments.

The role requires experience with AWS/Azure, Kubernetes, CI/CD, and IaC, delivering work in a regulated setting with minimal supervision. Three days per week in the office, umbrella or PAYE engagement models supported.

Qualifications

• Experience in cyber security or information security in an enterprise context.
• Ability to perform threat modelling using established methodologies.
• Strong security controls across authentication, logging, encryption and network segmentation.
• Development and DevOps knowledge including IaC and container technologies.
• Proficient Python programming with asynchronous patterns and testing.

Responsibilities

• Lead threat-modelling activities to identify and mitigate risks.
• Develop Python-based tools to improve security processes and delivery.
• Manage threat lifecycles with remediation tracking and validation.
• Deliver security assessments within agreed timelines and accuracy.
• Improve threat-modelling frameworks, tooling and best practices.
• Present findings to technical and cross-functional audiences.
• Mentor junior team members and support day-to-day operations.

Skills

Threat modelling

Security assessment

Python programming

DevOps practices

CI/CD pipelines

MITRE ATT&CK

Documentation

Stakeholder communication

Tools

AWS

Azure

Databricks

Docker

Kubernetes

GitHub

JIRA

Helm

Terraform

Pytest

Snowflake

MongoDB

Terraform Cloud

GitOps

Job description

AMS CWS is seeking a Cybersecurity Engineer to lead threat modelling and security assessments for a six-month London contract. You will develop Python-based security tools and drive secure design decisions across cloud and DevOps environments.

The role requires experience with AWS/Azure, Kubernetes, CI/CD, and IaC, delivering work in a regulated setting with minimal supervision. Three days per week in the office, umbrella or PAYE engagement models supported.