Security Threat Specialist

Overview

In this role you drive proactive and targeted threat and vulnerability identification across the organisation, translating findings into actionable fixes and strategic remediation. You will work with Cyber Security and cross-functional teams to strengthen security posture while balancing user experience. The role focuses on threat modelling, risk assessment, and secure-by-design improvements in a fast-moving, ideas-driven environment. You will shape security strategy, uplift awareness, and enable risk-informed decision making at scale.

Pay / Benefits

• Highly competitive compensation plus annual discretionary bonus
• Lunch provided (Just Eat for Business)
• 30 days’ annual leave
• 9% company pension contributions
• Comprehensive healthcare and life assurance
• Cycle-to-work scheme

Responsibilities

• Perform in-depth reviews of systems and processes to identify security weaknesses and control gaps
• Author technical security documentation, threat models, and implementation guidance across all security levels
• Provide detailed technical design advice and security recommendations for applications, services, infrastructure, and processes
• Collaborate with Cyber Security, Incident Response, and Vulnerability Assessment teams to validate findings and coordinate remediation
• Support risk management decisions and identify audit points to ensure compliance or detect compromise
• Assist developers and system administrators in designing and evaluating secure solutions
• Automate threat hunting to maintain confidence in security posture
• Develop and deliver training and awareness to improve security knowledge across the business
• Drive secure-by-design improvements that balance security with user experience

Key requirements

• Demonstrable expertise in one of the major security specialist areas (e.g., penetration testing, incident response, endpoint security, network security, malware analysis, IAM)
• Experience in Security Architecture or Security Risk Management
• Practical experience of threat modelling and risk assessment of applications, services and infrastructure
• Technical experience reviewing engineering designs and implementations, including code reviews in YAML and JSON
• Knowledge and a passion for information and technical security and its technologies
• Interest in team and personnel-related matters in addition to technical challenges
• Confident to make quick but justified commercial-based decisions

• Collaboration
• Initiative
• Problem solving
• Penetration testing
• Incident response
• Endpoint security

…