Senior Threat Modeler at BAE Systems

Preston, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

06 Jan, 26

Salary

55000.0

Posted On

08 Oct, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Threat Modelling Frameworks, Risk Management Frameworks, Security Control Frameworks, Cyber Threat Assessment, Security Gaps Identification, Attack Simulations, Emerging Threats Expertise, Report Production, NIST, OWASP, MITRE ATT&CK, CIS, ISO 27000, NCSC, FAIR, OCTAVE

Industry

Defense and Space Manufacturing

Description

Job Title: Senior Threat Modeler Location: Preston or Frimley. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role Salary: Circa £55,000 dependent on experience What you’ll be doing: Maintains an in-depth understanding of the external and internal security environment and how the organisation reacts to security threats Contributes to, plans and delivers activities in support of organisational and security development needs in accordance with regulatory requirements and changes in the threat landscape The assessment, validation and reporting of information on current and potential cyber threats to maintain an organisation’s situational awareness Identifying security gaps and building attack simulations to support Purple Team engagements by illustrating potential attack patterns to prioritise future remediation efforts Is a subject matter expert (SME) on emerging threats and will work on complex issues as a fully contributory member of the Threat Modelling Team, with limited guidance from the Line Manager Produces reports detailing key threats and risks to the organisation at a strategic level for business units to digest Your skills and experiences: Essential: An understanding of threat modelling frameworks and processes e.g. PASTA, OWASP Threat Dragon, DREAD, STRIDE-LM, OCTAVE, MITRE ATT&CK An understanding of risk management frameworks e.g. NIST, FAIR, Orange Book, and an understanding of Government Functional Standards e.g. GovS 007 Knowledge of security control (and maturity) frameworks e.g. NIST (e.g. CSMA, CSF), CIS, ISO 27000 series, CSA Cloud Controls Matrix, NCSC CAF, and an understanding of the types and functions of security controls. Familiar with the functions of relevant authorities e.g. NCSC, NPSA Desirable: Relevant IT degree or industry recognised certification Relevant industry experience Benefits: As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive. The Threat Modelling Team: Based in the Active Defence team in the UK SOC Team, we proactively evaluate systems, applications and networks to identify potential risks and threats and implement appropriate controls to mitigate those risks. Working closely with other UK SOC Teams and working in an open and supportive team, this is a great opportunity for professional development through training courses and certifications and developing your leadership skills. Why BAE Systems? This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Closing Date: 22nd October 2025 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-NP1 #LI-Hybrid

Responsibilities

The Senior Threat Modeler will maintain an in-depth understanding of security threats and contribute to activities supporting organizational security development. They will assess and report on cyber threats, identify security gaps, and build attack simulations.