Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Join a dynamic team to enhance security through threat modelling and architecture reviews.
- Company: Publicis Sapient drives digital transformation for top organisations, blending strategy with innovative engineering.
- Benefits: Enjoy a hybrid work model, flexible hours, and a commitment to diversity and inclusion.
- Why this job: Make a real impact in cybersecurity while collaborating with talented professionals in a supportive culture.
- Qualifications: 5+ years in Cybersecurity with strong GCP knowledge and experience in threat modelling methodologies.
- Other info: We value continuous learning and offer support for professional certifications.
The predicted salary is between 43200 - 72000 £ per year.
Publicis Sapient is a digital transformation partner helping established organisations get to their future, digitally-enabled state, both in the way they work and the way they serve their customers. We help unlock value through a start-up mindset and modern methods, fusing strategy, consulting and customer experience with agile engineering and problem-solving creativity.
As a Senior Engineer - Threat Modelling you will be a part of a smart cross-functional team delivering digital business transformation solutions to our clients. This position entails an individual contributor role focused on Security Architecture and Threat Modelling, encompassing governance, evaluation of public cloud services, and conducting security reviews for Public Cloud Providers. Collaboration and partnership with Engineering, Information Security, Program Management, and Development teams are essential. The candidate will conduct technical architecture reviews to pinpoint security opportunities, identify exploitable threats, and propose mitigation strategies.
Your Impact
- Conduct thorough threat modeling exercises utilizing established methodologies and frameworks.
- Maintain a rigorous standard of excellence in identifying potential threats and specifying effective mitigation controls.
- Manage the lifecycle of identified threats and associated controls, ensuring timely updates and adjustments as necessary.
- Deliver comprehensive threat models and related tasks within specified timeframes.
- Offer constructive feedback, support, and suggestions for enhancing the existing threat modeling process.
- Present findings and progress updates to senior leadership, team members, and relevant technical stakeholders.
Qualifications
Your Skills & Experience
- Proficiency in GCP - essential
- Strong knowledge of security architecture principles, frameworks, and best practices
- Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.
- Overall experience in Cybersecurity: 5+ years
- Security practices encompassing authentication, authorization, logging/monitoring, encryption, infrastructure security, and network/segmentation
- Knowledge of cloud security frameworks
- Knowledge of Rest API
- Knowledge in scripting languages and Infrastructure as Code (Terraform, CloudFormation)
- Familiarity with Jira or other ticketing systems - essential
- Technical architecture design and review skills - essential
- Ability to identify vulnerabilities using CWE or OWASP
- Knowledge of operating systems and their hardening techniques
- Understanding of development concepts such as CICD, Pipelines, and SDLC
- Penetration testing knowledge is also super useful
- Familiarity with Cloud Development Kit (CDK) and GitOps
- Experience operating in a DevOps/agile team environment
- Understanding of docker, Kubernetes, serverless architecture, and Helm
- Exposure to platforms like Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks
- Strong analytical skills, diligence, and attention to detail
- Willingness to conduct research using vendor documentation
- Capability to create and maintain high-quality documentation
- Possession of an adversary mindset
- Continuous learning attitude towards new technologies and methodologies
- Strong problem-solving skills
- Excellent communication and collaboration abilities
- Ability to build and nurture relationships across cross-functional teams
Set Yourself Apart With Professional Security Certifications:
- CISSP, CCSP, CISA, CISM, ITIL
- Relevant GCP certifications are highly desirable: GCP Professional Cloud Architect, GCP Professional Cloud Security Engineer.
- Strong knowledge of industry standards as they relate to Cloud and Application security management to include ISO, NIST, and Cloud Security Alliance (CSA)
- Experience working in regulated environments
- Exposure to agile development, DevOps, SecOps and scrum teams
- Hands-on-experience with cloud security designs on Azure
- Development experience (python, Node)
- Strong desire to learn and contribute solutions and ideas to broader team
Our hybrid work policy requires employees to be present in the office or at client sites for a minimum of 3 days per week (4 days for VP+). We trust our employees to determine what a reasonable commute is for their individual circumstances. Whilst we embrace flexibility, it’s essential that this commute allows you to comfortably fulfil the in-office/client site expectations of the policy. We encourage you to consider your personal circumstances and commute when evaluating if this work arrangement is a good fit for you.
As part of our dedication to an inclusive and diverse workforce, Publicis Sapient is committed to Equal Employment Opportunity without regard for race, colour, national origin, ethnicity, gender, age, disability, sexual orientation, gender identity, or religion. Publicis Sapient UK is a disability confident employer and is dedicated to fostering an inclusive and accessible work environment. We encourage individuals with disabilities and long-term conditions to apply for this position and we will provide adjustments where possible throughout the recruitment process. If you require any adjustments at any point on the process, please get in touch as soon as possible by emailing hiringuk@publicissapient.com. Publicis Sapient UK will then work with you explore and implement adjustments as and where these are possible. If you have any questions regarding adjustments, please email us: hiringuk@publicissapient.com.
Publicis Sapient fosters an inclusive environment through our inspirational business resource groups.
Threat Modelling Engineer - GCP employer: Publicis Groupe Holdings B.V
Contact Detail:
Publicis Groupe Holdings B.V Recruiting Team
hiringuk@publicissapient.com
StudySmarter Expert Advice 🤫
We think this is how you could land Threat Modelling Engineer - GCP
✨Tip Number 1
Familiarise yourself with the specific threat modelling methodologies mentioned in the job description, such as MITRE ATT&CK and STRIDE. Being able to discuss these frameworks in detail during your interview will demonstrate your expertise and alignment with the role.
✨Tip Number 2
Showcase your experience with GCP by preparing examples of past projects where you implemented security architecture principles. Highlighting your hands-on experience will help you stand out as a candidate who can hit the ground running.
✨Tip Number 3
Brush up on your knowledge of cloud security frameworks and industry standards like ISO and NIST. Being well-versed in these areas will not only prepare you for potential technical questions but also show your commitment to best practices in cybersecurity.
✨Tip Number 4
Prepare to discuss your experience working in cross-functional teams, particularly in agile environments. Emphasising your collaboration skills and ability to communicate effectively with various stakeholders will be crucial in demonstrating your fit for the team-oriented culture at Publicis Sapient.
We think you need these skills to ace Threat Modelling Engineer - GCP
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights your experience with GCP and security architecture principles. Use specific examples from your past roles that demonstrate your proficiency in threat modelling methodologies like MITRE ATT&CK or STRIDE.
Craft a Compelling Cover Letter: In your cover letter, express your passion for cybersecurity and digital transformation. Mention how your skills align with the role and how you can contribute to Publicis Sapient's mission of helping clients thrive in their digital journey.
Showcase Relevant Certifications: If you have any professional security certifications such as CISSP, CCSP, or relevant GCP certifications, make sure to include them prominently in your application. This will help you stand out as a qualified candidate.
Highlight Collaboration Skills: Since the role requires collaboration with cross-functional teams, emphasise your communication and teamwork abilities. Provide examples of how you've successfully worked with different departments to achieve common goals.
How to prepare for a job interview at Publicis Groupe Holdings B.V
✨Showcase Your GCP Expertise
Make sure to highlight your proficiency in Google Cloud Platform during the interview. Be prepared to discuss specific projects where you've implemented GCP solutions, as well as any relevant certifications you hold.
✨Familiarise Yourself with Threat Modelling Methodologies
Brush up on threat modelling methodologies such as MITRE ATT&CK, STRIDE, and PASTA. Be ready to explain how you've applied these frameworks in past roles and how they can be beneficial in identifying and mitigating threats.
✨Demonstrate Your Problem-Solving Skills
Prepare to discuss real-world scenarios where you've identified vulnerabilities and proposed effective mitigation strategies. Use the STAR method (Situation, Task, Action, Result) to structure your responses.
✨Communicate Effectively
Since collaboration is key in this role, practice articulating your thoughts clearly and concisely. Be ready to present your findings and updates to both technical and non-technical stakeholders, showcasing your ability to bridge communication gaps.
