Senior Threat Modeler

Job Title: Senior Threat Modeler

Location: Preston or Frimley. We offer a range of hybrid and flexible working arrangements – please speak to your recruiter about the options for this particular role

Salary: Circa £55,000 dependent on experience

What You’ll Be Doing

• Maintains an in-depth understanding of the external and internal security environment and how the organisation reacts to security threats
• Contributes to, plans and delivers activities in support of organisational and security development needs in accordance with regulatory requirements and changes in the threat landscape
• The assessment, validation and reporting of information on current and potential cyber threats to maintain an organisation’s situational awareness
• Identifying security gaps and building attack simulations to support Purple Team engagements by illustrating potential attack patterns to prioritise future remediation efforts
• Is a subject matter expert (SME) on emerging threats and will work on complex issues as a fully contributory member of the Threat Modelling Team, with limited guidance from the Line Manager
• Produces reports detailing key threats and risks to the organisation at a strategic level for business units to digest
  
  

Essential

Your skills and experiences:

• An understanding of threat modelling frameworks and processes e.g. PASTA, OWASP Threat Dragon, DREAD, STRIDE-LM, OCTAVE, MITRE ATT&CK
• An understanding of risk management frameworks e.g. NIST, FAIR, Orange Book, and an understanding of Government Functional Standards e.g. GovS 007
• Knowledge of security control (and maturity) frameworks e.g. NIST (e.g. CSMA, CSF), CIS, ISO 27000 series, CSA Cloud Controls Matrix, NCSC CAF, and an understanding of the types and functions of security controls.
• Familiar with the functions of relevant authorities e.g. NCSC, NPSA
  
  

Desirable

• Relevant IT degree or industry recognised certification
• Relevant industry experience
  
  

Benefits

As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts – you may also be eligible for an annual incentive.

The Threat Modelling Team

Based in the Active Defence team in the UK SOC Team, we proactively evaluate systems, applications and networks to identify potential risks and threats and implement appropriate controls to mitigate those risks. Working closely with other UK SOC Teams and working in an open and supportive team, this is a great opportunity for professional development through training courses and certifications and developing your leadership skills.

Why BAE Systems?

This is a place where you’ll be able to make a real difference. You’ll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you’ll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.

Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks.

Closing Date: 22nd October 2025

We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible.