Deloitte - Recruitment
Threat Modeler
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Threat Modeler
Role: Threat Modeler Locations: London / Belfast Duration: 6 Months (ASAP Start Date) Pay: Competitive daily rate (Inside IR35) via Rockford Payroll Payroll Provider: Rockford Payroll Info for Contingent Workers
About the Role
A 6-month fixed-term program where you will undertake threat modeling, automation tool development, and ** tocarry forward cybersecurity improvements** for our growing team. The successful candidate will be able to work independently while consistently delivering high-value outcomes and collaborating with technical teams.
Responsibilities
- Perform Threat Modeling using a documented process (STRIDE, PASTA, Attack Trees, MITRE ATT&CK, tooling)
- Build and develop automation tools to streamline security processes
- Maintain a strategic framework in identifying threats and specifying mitigating controls
- Oversee the entire lifecycle of threats and controls (from discovery to remediation)
- Deliver threat models and related documentation within tight deadlines
- Provide continuous feedback and improvements to existing threat modeling frameworks
- Present findings to senior stakeholders, technical teams, and cross-functional groups
- Operate with minimal supervision, ensuring tasks are completed to rigorous security standards
- Design, test, and deploy secure Python applications (FastAPI, async) compliant with SDLC and regulatory standards
- Develop unit tests (Pytest) to ensure code reliability and integrity
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements
Education
- A Bachelor’s degree in a computer-related field or equivalent work experience
Certifications
- Associate-level cloud certification (AWS, GCP, or Azure):
- AWS: Developer / Solutions Architect / SysOps Administrator
- GCP: Associate Cloud Engineer (or Professional GCP certification)
- Azure: Developer / Architect Associate
- Cybersecurity associate or professional certification (verified through examples like):
- ISACA CISA
- GIAC GSEC
- ISC² SSCP
- CompTIA CySA+
- Microsoft SC-200, SC-300
Technical Experience (Must-Have)
- ≥6 years IT experience, with minimum 4 years in cybersecurity/information security
- Threat modeling expertise (STRIDE, PASTA, Attack Trees, tooling, MITRE ATT&CK)
- Vulnerability analysis using CWE or OWASP frameworks
- Security best practices covering:
- Authentication, authorization, SLA/ logging, encryption
- Infrastructure and network hardening
- Operating system hardening
- Scripting languages (Python preferred), Terraform (IaC), CDK and GitOps
- Cloud-based development (AWS/GCP/Azure) + serverless architectures
- SDN K8S (Docker, Kubernetes, Helm) experience
- Basic or full-stack software development (with focus on SDLC/DevSecOps)
- Unit Testing knowledge (Pytest)
- Jira or similar ticketing management
- FastAPI, asynchronous programming
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Skills
- Regulated environment experience (e.g., healthcare, fintech jurisdictions)
- Penetration testing (ethical hacking) knowledge
- Snowflake, MongoDB, or Databricks exposure
- Servicenow familiarity
Skills & Attributes
- Analytical mindset with an adversary nous and abstract problem-solving ability
- Strong attention to detail for documentation and security protocol validation
- Research agility – 🔍 consistently questions facts and vendor resources
- Seek continent learning of emerging threats alongside methodologies & tools
- Communication & collaboration across diverse teams including dev, ops, and regulatory stakeholders
- Proven relationship-builder in cross-functional environments
Why Join Us?
- Short-term but impactful – Immediate opportunity with clear impact
- Career multiplier – Work alongside security leaders and advisors
- Competitive pay and IR35 clarity – No agency overhead
- Flexible remote & commutable locations (London/Belfast)
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills