Senior Threat Modelling & Application Security Engineer
Sanderson Plc · Clifton, Bristol
Senior Threat Modelling & Application Security Engineer at Sanderson Plc, based in Clifton, Bristol, paying £450 - £500 per day. This is a permanent role with hybrid working.
- Salary
- £450 - £500 per day
- Location
- Clifton, Bristol · Hybrid
- Contract
- Permanent
- Posted
- 2 hours ago
- Closes
- 17 Nov 2026
- Sector
- IT & Software
9% below the typical rate for it & software
Reference job/senior-threat-modelling-application-security-engineer-23546_1789125900
About the role
Senior Threat Modelling & Application Security Engineer
Day rate: Up to £450 – £500 (Inside IR35)
Location: London/ Hybrid – 4 days a week onsite
Duration: 6 months (Initial)
A major organsiation is seeking a Senior Threat Modelling & Application Security Engineer to help drive secure-by-design practices across cloud and application environments.
Key Responsibilities
- Conduct threat modelling using STRIDE, PASTA, ATT&CK and Attack Trees.
- Identify vulnerabilities and define mitigating security controls.
- Review technical architectures and support secure SDLC processes.
- Develop security automation tooling and Python-based applications.
- Partner with engineering teams to embed security best practices.
- Track threats and controls through to remediation and closure.
Required Experience
- 6+ years in IT, including 4+ years within Cyber Security.
- Strong threat modelling and application security experience.
- Knowledge of OWASP, CWE, authentication, authorisation, encryption and infrastructure security.
- Experience with Terraform/CloudFormation, CI/CD and Jira.
- Strong Python skills, including FastAPI and Pytest.
- Experience within a regulated environment.
Desirable
- Docker, Kubernetes, Helm, Serverless, GitOps and CDK.
- Penetration testing exposure.
- Snowflake, MongoDB, Databricks, GitHub and Terraform Cloud.
Certifications
- Associate-level cloud certification (AWS, Azure, GCP or equivalent).
- Cyber security certification such as CySA+, CISA, GSEC, SSCP or Microsoft Security certifications.
What You’ll Bring
- Strong analytical and problem-solving skills.
- Excellent communication and stakeholder management.
- An adversarial mindset and passion for continuous learning.
- Ability to work independently and collaboratively across teams.
Reasonable Adjustments:
Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.
If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.
Reference: job/senior-threat-modelling-application-security-engineer-23546_1789125900 · Posted 2 hours ago · Closes 17 Nov 2026 · Listed via Sanderson Plc
Apply for this job
This role is listed via Sanderson Plc. Applications are handled on the employer's site.
Apply on employer siteOpens the employer's website in a new tab.
Safe applying: a genuine employer will never ask you to pay for a DBS check, training or equipment, or move you onto WhatsApp before you are hired. If this listing does, report it and do not pay anything.