{"id":2137183,"url":"https://alion.io/job/deloitte-contract-cyber-security-engineer-threat-modelling","title":"Contract - Cyber Security Engineer (Threat Modelling)","company":{"id":272,"name":"Deloitte","domain":"deloitte.com","url":"https://alion.io/company/deloitte","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Avature","truth_index":{"grade":"B","score":80,"open_postings":10,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":16,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":69000,"max_usd":161000,"period":"year","method":"role_country_seniority_unknown","sample_n":132},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Databricks","optional":false},{"name":"Docker","optional":false},{"name":"GitHub","optional":false},{"name":"GitOps","optional":false},{"name":"Helm","optional":false},{"name":"Jira","optional":false},{"name":"Kubernetes","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"OWASP","optional":false},{"name":"Pytest","optional":false},{"name":"Python","optional":false},{"name":"Snowflake","optional":false},{"name":"STRIDE","optional":false},{"name":"Terraform","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-10-09T02:11:11Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-12T13:58:48Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Job Title: Cyber Security Engineer (Threat Modelling) - contract\nLocation: London Hybrid, 2-3 days a week in the London office\nDuration: 4 months\nContract Start Date: ASAP *please note that onboarding will take 4-6 weeks from the offer\nDay Rate: Competitive (Inside IR35)\nDeloitte\nWorking with the Deloitte Associate (Contractor) Programme means we can offer you the opportunity to work on a variation of industry and client related projects. Our aim is to retain the best talent and so when your project end date nears our team of Talent Community Advisors will be working with you to look at alternative projects within the firm that suit your experience should you wish to continue with Deloitte.\nThe Role\nWe are looking for an experienced Threat Modelling Security Engineer to identify security threats, define effective mitigating controls and manage findings throughout their lifecycle. You will deliver threat models to agreed timeframes, develop secure Python-based automation and help improve the existing threat modelling service. The role involves presenting technical work to senior and cross-functional stakeholders, while training and supervising junior team members. You will work with minimal supervision across cloud, DevOps and regulated security environments.\nEssential Skills and Experience\nAn experienced IT professional with cyber security or information security experience\nTechnical expertise with threat modelling using STRIDE, PASTA, attack trees, tooling and MITRE ATT&CK. \nCyber security experience covering authentication, authorisation, logging and monitoring, encryption, infrastructure security and network segmentation. \nDevelopment and DevOps knowledge, including CI/CD, pipelines, SDLC, scripting, Infrastructure as Code (Terraform or CloudFormation), Docker, Kubernetes (K8s), serverless and Helm. \nStrong programming capability, preferably Python including asynchronous programming and FastAP I, plus unit testing with Pytest. \nExperience applying security standards and SDLC controls to software platforms. \nExperience identifying vulnerabilities using CWE or OWASP, hardening operating systems, and designing or reviewing technical architectures.\nWorking knowledge of agile/DevOps delivery, Jira, CDK/GitOps, penetration testing and technologies such as Snowflake, MongoDB, Terraform Cloud, GitHub or Databricks.\nAnalytical and adversarial mindset, attention to detail, problem-solving ability and a commitment to continuous learning.\nStrong documentation, research, communication and collaboration skills, with experience building relationships across diverse teams in a regulated environment.\nDesirable - Professional-level cloud certification, vendor cloud security certification and professional cyber security certification from either AWS, CGP or Azure\nDeliverables: Responsibilities but not limited to:\nThreat Modeling using a documented process.\nDevelopment of automation tools as required.\nMaintain a high standard of work in identifying threats and specifying mitigating controls.\nAttending to the lifecycle of identified threats and controls.\nDelivery of threat models and supporting tasks within existing timeframes.\nProvide feedback, support, and improvements to the existing threat modeling process.\nPresent work to seniors, the team, and other technical teams.\nTrain newer members of the team\nSupervise junior members of the team\nRun parts of our threat model service\nWork with little supervision to complete work\nDevelop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.\nIR35\nAs a means of managing tax, commercial and reputational risks, Deloitte prohibits the use of Associates through Personal Service Companies (‘PSCs’). All Associates must contract under PAYE arrangements through a Deloitte approved ‘Employment Company’ (aka ‘umbrella company.’)","description_format":"text","description_chars":3885,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Financial Advisory, Valuation & Restructuring","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-09T02:11:11Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-10T06:21:00+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":61,"band":"ok","label":"Likely open","p_open":1,"p_active":0.614,"p_room":1,"age_days":3,"expected_fill_days":16,"reasons":["conf:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/deloitte-contract-cyber-security-engineer-threat-modelling","json_url":"https://alion.io/job/deloitte-contract-cyber-security-engineer-threat-modelling.json","meta":{"generated_at":"2026-10-12T14:52:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23473,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":272},"rest":"https://alion.io/mcp/rest/get_company?id=272"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdeloitte-contract-cyber-security-engineer-threat-modelling"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdeloitte-contract-cyber-security-engineer-threat-modelling"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdeloitte-contract-cyber-security-engineer-threat-modelling"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/deloitte-contract-cyber-security-engineer-threat-modelling\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdeloitte-contract-cyber-security-engineer-threat-modelling"}]}