At a Glance
- Tasks: Lead threat modelling activities and mitigate security risks in AI-driven systems.
- Company: Dynamic cybersecurity firm focused on innovation and collaboration.
- Benefits: Hybrid work model, competitive perks, and strong career development opportunities.
- Why this job: Tackle cutting-edge cybersecurity challenges and influence secure design practices.
- Qualifications: Experience with STRIDE methodology and understanding of modern cybersecurity threats.
- Other info: Join a global team passionate about continuous learning and improvement.
The predicted salary is between 60000 - 80000 £ per year.
An opportunity for an experienced Senior Threat Modelling Analyst to lead end-to-end threat modelling activities within a complex enterprise environment. This role focuses on identifying, assessing, and mitigating security risks across modern systems, including AI-enabled architectures, while embedding secure design practices across product and engineering teams.
Key Responsibilities
- Lead and deliver end-to-end threat modelling using the STRIDE methodology
- Conduct threat modelling for AI-driven systems (including LLMs and agent-based architectures)
- Identify risks related to autonomy, tool usage, memory, and orchestration layers
- Define secure design patterns, controls, and mitigation strategies with engineering and product teams
- Facilitate workshops and promote cybersecurity best practices across the business
- Mentor and support junior team members
- Collaborate with internal stakeholders and external partners on security initiatives
- Ensure alignment with regulatory and compliance frameworks (e.g. GDPR, PCI, SWIFT)
- Contribute to continuous improvement of cybersecurity capabilities and practices
Requirements
- Proven experience performing end-to-end threat modelling using STRIDE in enterprise environments
- Strong understanding of modern cybersecurity threats, including AI-specific risks (e.g. prompt injection, data leakage, model abuse)
- Experience working within cybersecurity or information security functions
- Knowledge of key security domains (e.g. cloud, identity & access management, data protection, monitoring)
- Strong analytical thinking, decision-making, and communication skills
- Ability to work independently and collaborate across cross-functional teams
- Passion for cybersecurity and continuous learning
What’s Offered
- Exposure to cutting-edge cybersecurity challenges, including AI and emerging technologies
- Opportunity to influence secure design across large-scale digital products
- Hybrid working model with flexibility
- Competitive benefits including healthcare, pension, and employee perks
- Collaborative, global team environment with strong career development opportunities
Senior Cyber Security Analyst | Threat Modelling | Cloud & AI Security in Edinburgh employer: SoTalent
Contact Detail:
SoTalent Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Senior Cyber Security Analyst | Threat Modelling | Cloud & AI Security in Edinburgh
✨Network Like a Pro
Get out there and connect with folks in the cybersecurity space! Attend industry meetups, webinars, or even local events. You never know who might have the inside scoop on job openings or can put in a good word for you.
✨Show Off Your Skills
When you land that interview, be ready to demonstrate your expertise in threat modelling and AI security. Bring examples of your past work or even a mini case study to showcase how you tackle real-world problems. We love seeing practical skills in action!
✨Tailor Your Approach
Make sure to tailor your discussions to the specific role and company. Research their current projects and challenges, especially around AI and cloud security. This shows you’re genuinely interested and ready to contribute from day one.
✨Apply Through Our Website
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re keen on joining our team and ready to dive into the exciting world of cybersecurity with us.
We think you need these skills to ace Senior Cyber Security Analyst | Threat Modelling | Cloud & AI Security in Edinburgh
Some tips for your application 🫡
Tailor Your CV: Make sure your CV speaks directly to the role of Senior Threat Modelling Analyst. Highlight your experience with STRIDE and any relevant projects you've worked on, especially those involving AI-driven systems.
Craft a Compelling Cover Letter: Use your cover letter to tell us why you're passionate about cybersecurity and how your skills align with our needs. Mention specific experiences that showcase your ability to identify and mitigate security risks.
Showcase Your Analytical Skills: In your application, emphasise your analytical thinking and decision-making abilities. We want to see how you approach complex problems, especially in the context of modern cybersecurity threats.
Apply Through Our Website: We encourage you to apply through our website for a smoother process. It helps us keep track of your application and ensures you don’t miss out on any important updates!
How to prepare for a job interview at SoTalent
✨Master the STRIDE Methodology
Make sure you have a solid grasp of the STRIDE methodology before your interview. Be ready to discuss how you've applied it in past roles, especially in complex enterprise environments. Prepare examples that showcase your ability to identify and mitigate security risks effectively.
✨Showcase Your AI Knowledge
Given the focus on AI-driven systems, brush up on the latest cybersecurity threats related to AI, such as prompt injection and data leakage. Be prepared to discuss how these risks can be addressed in threat modelling and secure design practices.
✨Highlight Collaboration Skills
This role requires collaboration with various teams, so be ready to share experiences where you've successfully worked with cross-functional teams. Discuss how you facilitated workshops or mentored junior members, as this will demonstrate your leadership and teamwork abilities.
✨Understand Regulatory Frameworks
Familiarise yourself with relevant regulatory and compliance frameworks like GDPR and PCI. Be prepared to discuss how you’ve ensured alignment with these standards in your previous roles, as this knowledge is crucial for the position.