Senior Threat Modelling & Application Security Engineer

• Conduct threat modelling using STRIDE, PASTA, ATT&CK and Attack Trees.
• Identify vulnerabilities and define mitigating security controls.
• Review technical architectures and support secure SDLC processes.
• Develop security automation tooling and Python-based applications.
• Partner with engineering teams to embed security best practices.
• Track threats and controls through to remediation and closure.

• 6+ years in IT, including 4+ years within Cyber Security.
• Strong threat modelling and application security experience.
• Knowledge of OWASP, CWE, authentication, authorisation, encryption and infrastructure security.
• Experience with Terraform/CloudFormation, CI/CD and Jira.
• Strong Python skills, including FastAPI and Pytest.
• Experience within a regulated environment.

Desirable

• Docker, Kubernetes, Helm, Serverless, GitOps and CDK.
• Penetration testing exposure.
• Snowflake, MongoDB, Databricks, GitHub and Terraform Cloud.

Certifications

• Associate-level cloud certification (AWS, Azure, GCP or equivalent).
• Cyber security certification such as CySA+, CISA, GSEC, SSCP or Microsoft Security certifications.

What You’ll Bring

• Strong analytical and problem-solving skills.
• Excellent communication and stakeholder management.
• An adversarial mindset and passion for continuous learning.
• Ability to work independently and collaboratively across teams.