Senior Threat Modelling & Application Security Engineer

Sanderson Plc · Clifton, Bristol

Senior Threat Modelling & Application Security Engineer at Sanderson Plc, based in Clifton, Bristol, paying £450 - £500 per day. This is a permanent role with hybrid working.

Salary
£450 - £500 per day
Location
Clifton, Bristol · Hybrid
Contract
Permanent
Posted
2 hours ago
Closes
17 Nov 2026
Sector
IT & Software

9% below the typical rate for it & software

Reference job/senior-threat-modelling-application-security-engineer-23546_1789125900

About the role

Senior Threat Modelling & Application Security Engineer

Day rate: Up to £450 – £500 (Inside IR35)

Location: London/ Hybrid – 4 days a week onsite

Duration: 6 months (Initial)

A major organsiation is seeking a Senior Threat Modelling & Application Security Engineer to help drive secure-by-design practices across cloud and application environments.

Key Responsibilities

  • Conduct threat modelling using STRIDE, PASTA, ATT&CK and Attack Trees.
  • Identify vulnerabilities and define mitigating security controls.
  • Review technical architectures and support secure SDLC processes.
  • Develop security automation tooling and Python-based applications.
  • Partner with engineering teams to embed security best practices.
  • Track threats and controls through to remediation and closure.

Required Experience

  • 6+ years in IT, including 4+ years within Cyber Security.
  • Strong threat modelling and application security experience.
  • Knowledge of OWASP, CWE, authentication, authorisation, encryption and infrastructure security.
  • Experience with Terraform/CloudFormation, CI/CD and Jira.
  • Strong Python skills, including FastAPI and Pytest.
  • Experience within a regulated environment.

Desirable

  • Docker, Kubernetes, Helm, Serverless, GitOps and CDK.
  • Penetration testing exposure.
  • Snowflake, MongoDB, Databricks, GitHub and Terraform Cloud.

Certifications

  • Associate-level cloud certification (AWS, Azure, GCP or equivalent).
  • Cyber security certification such as CySA+, CISA, GSEC, SSCP or Microsoft Security certifications.

What You’ll Bring

  • Strong analytical and problem-solving skills.
  • Excellent communication and stakeholder management.
  • An adversarial mindset and passion for continuous learning.
  • Ability to work independently and collaboratively across teams.

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.

Reference: job/senior-threat-modelling-application-security-engineer-23546_1789125900 · Posted 2 hours ago · Closes 17 Nov 2026 · Listed via Sanderson Plc

Know someone who'd be great for this? Get a shareable card

Apply for this job

This role is listed via Sanderson Plc. Applications are handled on the employer's site.

Apply on employer site

Opens the employer's website in a new tab.

Safe applying: a genuine employer will never ask you to pay for a DBS check, training or equipment, or move you onto WhatsApp before you are hired. If this listing does, report it and do not pay anything.

Report this job
Salary £450 - £500 per day
Apply now