Threat Modeling – Cyber Security

We are recruiting Threat Modelling Associates to join our client, one of the big four.

You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences.

• Role: Threat Modeling
• Day rate: £450 – 500 per day (inside IR35)
• Pay framework: Umbrella Company
• Start date: ASAP
• Contract duration: 6 months initially (with scope to extend)
• Location: Hybrid – 4 days a week in London office, 1 day working from home.

Key Responsibilities

• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Train newer members of the team
• Supervise junior members of the team
• Run parts of our threat model service
• Work with little supervision to complete work
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.

Certification Requirements

• You must have a cloud certification and from either AWS, GCP or Azure.
• You must have cloud security certification from either AWS, GCP or Azure.
• You must have a cyber-security certification

Essential experience

• Experience working in Cyber-Security/Information Security – must
• Threat Modelling (STRIDE, PASTA, Attack trees, tooling, Att&ck)
• Experience in security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation
• Development concepts (such as: CICD, Pipelines, SDLC)
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation)
• Understanding of docker/K8S/serverless/helm – must.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality
• Ensure all software platforms adhere to security standards and Software Development Life Cycle (SDLC) processes

Send your CV in today!