Sanderson
Cyber Security Engineer, Threat Modelling

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Engineer, Threat Modelling
Day rate: £450 - £500 (Inside IR35)
Location: London/Hybrid - 4 days a week onsite
Duration: 6 months (Initial)
A major organisation is seeking a Cyber Security Engineer to help drive secure-by-design practices across cloud and application environments.
Key Responsibilities
- Conduct threat modelling using STRIDE, PASTA, ATT&CK and Attack Trees.
- Identify vulnerabilities and define mitigating security controls.
- Review technical architectures and support secure SDLC processes.
- Develop security automation tooling and Python-based applications.
- Partner with engineering teams to embed security best practices.
- Track threats and controls through to remediation and closure.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Required Experience
- 6+ years in IT, including 4+ years within Cyber Security.
- Strong threat modelling and application security experience.
- Knowledge of OWASP, CWE, authentication, authorisation, encryption and infrastructure security.
- Experience with Terraform/CloudFormation, CI/CD and Jira.
- Strong Python skills, including FastAPI and Pytest.
- Experience within a regulated environment.
Desirable
- Docker, Kubernetes, Helm, Serverless, GitOps and CDK.
- Penetration testing exposure.
- Snowflake, MongoDB, Databricks, GitHub and Terraform Cloud.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Certifications
- Associate-level cloud certification (AWS, Azure, GCP or equivalent).
- Cyber security certification such as CySA+, CISA, GSEC, SSCP or Microsoft Security certifications.
What You'll Bring
- Strong analytical and problem-solving skills.
- Excellent communication and stakeholder management.
- An adversarial mindset and passion for continuous learning.
- Ability to work independently and collaboratively across teams.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location