We are recruiting Threat Modelling Associates to join our client, one of the big four.

You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences.

• Role: Threat Modeling
• Day rate: £450 – 500 per day (inside IR35)
• Pay framework: Umbrella Company
• Start date: ASAP
• Contract duration: 6 months initially (with scope to extend)
• Location: Hybrid – 4 days a week in London office, 1 day working from home.

Key Responsibilities

• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Train newer members of the team
• Supervise junior members of the team
• Run parts of our threat model service
• Work with little supervision to complete work
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.

Certification Requirements

• You must have a cloud certification and from either AWS, GCP or Azure.
• You must have cloud security certification from either AWS, GCP or Azure.
• You must have a cyber-security certification

Essential experience

• Experience working in Cyber-Security/Information Security – must
• Threat Modelling (STRIDE, PASTA, Attack trees, tooling, Att&ck)
• Experience in security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation
• Development concepts (such as: CICD, Pipelines, SDLC)
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation)
• Understanding of docker/K8S/serverless/helm – must.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality
• Ensure all software platforms adhere to security standards and Software Development Life Cycle (SDLC) processes

Send your CV in today!