Principal Threat Modeling Architect in Edinburgh

Principal Threat Modeling Architect We are looking for a Principal Threat Modeling Architect. You will be responsible for leading the enterprise Threat Modeling program, establishing threat modeling standards, methodologies, and governance, and building a high‑performing team of threat modeling professionals. You will partner with application development, cloud engineering, cybersecurity, and business stakeholders to proactively identify and mitigate security risks across the software development lifecycle, cloud environments, and emerging technology initiatives. Why This Role Is Important To Us The team you will be joining is part of the Security Architecture organization, a function that is critical to the firm's ability to design and deliver secure technology solutions. As cyber threats continue to evolve, threat modeling serves as a foundational security practice that enables the organization to identify architectural weaknesses early, reduce risk, strengthen security‑by‑design practices, and improve the resilience of applications, cloud platforms, and critical business services. What You Will Be Responsible For Lead and mature the enterprise Threat Modeling program, including methodologies, standards, tooling, governance, and metrics. Build, lead, and mentor a team of threat modelers responsible for conducting threat assessments across enterprise applications, cloud platforms, APIs, and emerging technologies. Partner with Security Architecture, Application Security, Cloud Security, Engineering, and Development teams to embed threat modeling throughout the software development lifecycle. Conduct and oversee threat modeling exercises for critical business applications, cloud‑native services, AI solutions, and strategic transformation initiatives. Define actionable risk mitigation strategies and architectural recommendations to address identified threats and security weaknesses. Establish security architecture patterns, guidance, and best practices related to application security, cloud security, and secure‑by‑design principles. Drive adoption of automated and scalable threat modeling capabilities while measuring program effectiveness through meaningful metrics and reporting. Evaluate emerging threats, attack techniques, and technology trends to continuously enhance the firm's threat modeling capabilities. What We Value Deep expertise in threat modeling methodologies such as STRIDE, MITRE ATT