Deloitte - Recruitment
Threat Modeling and Cybersecurity Specialist

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Role: Threat Modeling and Cybersecurity Specialist
Location: London
Start Date: September 2026
End Date: 6 months
Daily Rate: up to £450 depending on experience - Inside IR35
Payroll provider – Rockford Payroll
Info for Contingent Workers – Rockford Pay
This is an exciting opportunity to join Deloitte Operations for an engagement with one of our clients.
The Role
As a Threat Modeling and Cybersecurity Specialist, you will play a critical role in identifying potential threats, developing mitigation strategies, and delivering secure, efficient Python-based applications. You will work closely with cross-functional teams, presenting your findings and improvements to senior leadership and technical teams, while operating with minimal supervision.
Key Responsibilities
- Conduct threat modeling using documented processes such as STRIDE, PASTA, and Attack Trees.
- Develop and maintain automation tools to enhance threat identification and mitigation.
- Maintain high standards in identifying threats and specifying mitigating controls.
- Manage the lifecycle of identified threats and controls, ensuring timely delivery within set timeframes.
- Provide feedback and continuous improvements to the existing threat modeling process.
- Develop, test, and deploy secure Python-based applications adhering to established SDLC processes and quality standards.
- Collaborate with diverse teams, presenting work clearly and effectively.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Experience & Skills Required
- Minimum of 6 years IT experience with at least 4 years in Cybersecurity or Information Security roles.
- Proven expertise in threat modeling methodologies (STRIDE, PASTA, Attack Trees, ATT&CK).
- Strong knowledge of vulnerability identification using CWE or OWASP standards.
- Hands-on experience with security practices including authentication, authorization, logging/monitoring, encryption, infrastructure security, and network segmentation.
- Proficiency in Python programming, including asynchronous programming and FastAPI framework.
- Experience with unit testing frameworks such as Pytest.
- Familiarity with development concepts like CICD, pipelines, SDLC, and Infrastructure as Code (Terraform, CloudFormation).
- Experience working in DevOps or agile team environments.
- Proficient with Jira or other ticketing systems.
- Strong analytical skills, attention to detail, and a problem-solving mindset.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Preferred Skills and Tools
- Experience with Docker, Kubernetes, serverless architectures, and Helm.
- Knowledge of Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks.
- Ability to design and review technical architectures.
- Experience supporting or performing penetration testing.
Required Qualifications / Certifications
- Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
- Associate level cloud certification from AWS, GCP, or Azure (e.g., AWS Certified Developer, Google Associate Cloud Engineer, Microsoft Certified Azure Developer Associate).
- Associate or professional cybersecurity certification (e.g., CISA, GSEC, SSCP, CompTIA CySA+, Microsoft Security Operations Analyst Associate).
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills