Threat Modeling IT Cyber Security Consultant

Salary: £24,000 - 60,000 per year

Requirements:

• We expect an associate-level cloud certification from AWS, GCP, or Azure.
• We expect an associate or professional cybersecurity certification.
• We require a minimum of 6 years of IT experience, including at least 4 years in Cyber Security/Information Security.
• We require experience in a cyber-security role.
• We require experience with threat modeling tools and methods such as STRIDE, PASTA, attack trees, tooling, and ATT&CK.
• We require experience identifying vulnerabilities using CWE or OWASP.
• We require knowledge of security practices related to authentication, authorization, logging/monitoring, encryption, infrastructure security, and network segmentation.
• We require experience with operating systems and hardening.
• We value two to five years of experience across the listed technical areas.

Responsibilities:

• We carry out threat modeling using a documented process.
• We develop automation tools as required.
• We maintain a high standard of work in identifying threats and specifying mitigating controls.
• We manage the lifecycle of identified threats and controls.
• We deliver threat models and supporting tasks within agreed timeframes.
• We provide feedback, support, and improvements to our existing threat modeling process.
• We present our work to seniors, our team, and other technical teams.
• We work with little supervision to complete assigned work.
• We develop, test, and deploy secure and efficient Python-based applications in line with established SDLC processes and quality standards.

Technologies:

• AWS
• Azure
• Cloud
• GCP
• Support
• Network
• OWASP
• Python
• Security

More:

We are hiring for a Threat Modeling IT Cyber Security Consultant for a new project in London. This is a hybrid role with a day rate of £450-£500+ per day inside. We are looking for a strong consultant to support our threat modeling work and contribute to improvements in our process while collaborating with senior stakeholders and technical teams.

last updated 37 week of 2026