Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Join a dynamic team to enhance security through threat modelling and architecture reviews.
- Company: Publicis Sapient drives digital transformation for top organisations, blending strategy with innovative tech solutions.
- Benefits: Enjoy flexible work options, professional growth opportunities, and a vibrant company culture.
- Why this job: Make a real impact in cybersecurity while collaborating with talented professionals in a supportive environment.
- Qualifications: 5+ years in Cybersecurity with expertise in GCP, threat modelling, and security architecture principles.
- Other info: Professional certifications like CISSP or GCP are a plus; continuous learning is encouraged.
The predicted salary is between 48000 - 72000 £ per year.
Publicis Sapient is a digital transformation partner helping established organisations get to their future, digitally-enabled state, both in the way they work and the way they serve their customers. We help unlock value through a start-up mindset and modern methods, fusing strategy, consulting and customer experience with agile engineering and problem-solving creativity.
As a Senior Engineer - Threat Modelling you will be a part of a smart cross-functional team delivering digital business transformation solutions to our clients. This position entails an individual contributor role focused on Security Architecture and Threat Modelling, encompassing governance, evaluation of public cloud services, and conducting security reviews for Public Cloud Providers. Collaboration and partnership with Engineering, Information Security, Program Management, and Development teams are essential. The candidate will conduct technical architecture reviews to pinpoint security opportunities, identify exploitable threats, and propose mitigation strategies.
Your Impact
- Conduct thorough threat modeling exercises utilizing established methodologies and frameworks.
- Maintain a rigorous standard of excellence in identifying potential threats and specifying effective mitigation controls.
- Manage the lifecycle of identified threats and associated controls, ensuring timely updates and adjustments as necessary.
- Deliver comprehensive threat models and related tasks within specified timeframes.
- Offer constructive feedback, support, and suggestions for enhancing the existing threat modeling process.
- Present findings and progress updates to senior leadership, team members, and relevant technical stakeholders.
Qualifications
Your Skills & Experience
- Proficiency in GCP - essential
- Strong knowledge of security architecture principles, frameworks, and best practices
- Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.
- Overall experience in Cybersecurity: 5+ years
- Security practices encompassing authentication, authorization, logging/monitoring, encryption, infrastructure security, and network/segmentation
- Knowledge of cloud security frameworks
- Knowledge of Rest API
- Knowledge in scripting languages and Infrastructure as Code (Terraform, CloudFormation)
- Familiarity with Jira or other ticketing systems - essential
- Technical architecture design and review skills - essential
- Ability to identify vulnerabilities using CWE or OWASP
- Knowledge of operating systems and their hardening techniques
- Understanding of development concepts such as CICD, Pipelines, and SDLC
- Penetration testing knowledge is also super useful
- Familiarity with Cloud Development Kit (CDK) and GitOps
- Experience operating in a DevOps/agile team environment
- Understanding of docker, Kubernetes, serverless architecture, and Helm
- Exposure to platforms like Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks
- Strong analytical skills, diligence, and attention to detail
- Willingness to conduct research using vendor documentation
- Capability to create and maintain high-quality documentation
- Possession of an adversary mindset
- Continuous learning attitude towards new technologies and methodologies
- Strong problem-solving skills
- Excellent communication and collaboration abilities
- Ability to build and nurture relationships across cross-functional teams
Set Yourself Apart With
- Professional Security Certifications: CISSP, CCSP, CISA, CISM, ITIL
- Relevant GCP certifications are highly desirable: GCP Professional Cloud Architect, GCP Professional Cloud Security Engineer.
- Strong knowledge of industry standards as they relate to Cloud and Application security management to include ISO, NIST, and Cloud Security Alliance (CSA)
- Experience working in regulated environments
- Exposure to agile development, DevOps, SecOps and scrum teams
- Hands-on experience with cloud security designs on Azure
- Development experience (Python, Node)
- Strong desire to learn and contribute solutions and ideas to broader team
Threat Modelling Engineer - GCP (Senior Associate, Technology) employer: Publicis Groupe Holdings B.V
Contact Detail:
Publicis Groupe Holdings B.V Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Threat Modelling Engineer - GCP (Senior Associate, Technology)
✨Tip Number 1
Familiarise yourself with the specific threat modelling methodologies mentioned in the job description, such as MITRE ATT&CK and STRIDE. Being able to discuss these frameworks confidently during your interactions will demonstrate your expertise and alignment with the role.
✨Tip Number 2
Engage with current trends and updates in GCP security practices. Follow relevant blogs, forums, or webinars to stay informed about the latest developments, which can help you bring fresh insights to discussions with the team.
✨Tip Number 3
Network with professionals in the cybersecurity field, especially those who have experience in threat modelling and cloud security. Attend industry events or join online communities to build connections that could provide valuable insights or referrals.
✨Tip Number 4
Prepare to showcase your problem-solving skills by discussing past experiences where you identified vulnerabilities and proposed effective mitigation strategies. Real-world examples will help illustrate your capabilities and fit for the role.
We think you need these skills to ace Threat Modelling Engineer - GCP (Senior Associate, Technology)
Some tips for your application 🫡
Understand the Role: Before applying, make sure to thoroughly read the job description for the Threat Modelling Engineer position. Understand the key responsibilities and required skills, especially those related to GCP and security architecture.
Tailor Your CV: Customise your CV to highlight relevant experience in cybersecurity, threat modelling methodologies, and cloud security frameworks. Emphasise your proficiency in GCP and any professional certifications you hold.
Craft a Compelling Cover Letter: Write a cover letter that showcases your passion for digital transformation and your understanding of the company's mission. Mention specific experiences that align with the role's requirements and how you can contribute to their goals.
Highlight Collaboration Skills: Since the role involves working with cross-functional teams, be sure to include examples of past collaborations in your application. Demonstrating strong communication and teamwork abilities will set you apart.
How to prepare for a job interview at Publicis Groupe Holdings B.V
✨Showcase Your GCP Expertise
Make sure to highlight your proficiency in Google Cloud Platform during the interview. Be prepared to discuss specific projects where you've implemented GCP solutions, and how you utilised its features to enhance security architecture.
✨Familiarise Yourself with Threat Modelling Methodologies
Brush up on threat modelling methodologies like MITRE ATT&CK, STRIDE, and PASTA. Be ready to explain how you've applied these frameworks in past roles, and provide examples of how they helped identify and mitigate threats.
✨Demonstrate Your Problem-Solving Skills
Prepare to discuss complex security challenges you've faced and how you approached solving them. Use the STAR method (Situation, Task, Action, Result) to structure your responses and showcase your analytical thinking.
✨Communicate Effectively with Cross-Functional Teams
Since collaboration is key for this role, be ready to share experiences where you've worked with different teams, such as Engineering or Development. Highlight your communication skills and how you build relationships to achieve common goals.
