Cloud Information Specialist Threat Modeler

Role: Cloud Information Specialist Threat Modeler

Location

London

Start Date

September 2026

End Date

6 months

Daily Rate

Inside IR35

Payroll provider – Rockford Payroll

Info for Contingent Workers – Rockford Pay

This is an exciting opportunity to join Deloitte Operations for an engagement with one of our clients.

The Role

As a Threat Modeling and Cybersecurity Specialist, you will play a critical role in identifying potential threats, developing mitigation strategies, and delivering secure, efficient Python-based applications. You will work closely with cross-functional teams, presenting your findings and improvements to senior leadership and technical teams, while operating with minimal supervision.

Key Responsibilities

• Conduct threat modeling using documented processes such as STRIDE, PASTA, and Attack Trees.
• Develop and maintain automation tools to enhance threat identification and mitigation.
• Maintain high standards in identifying threats and specifying mitigating controls.
• Manage the lifecycle of identified threats and controls, ensuring timely delivery within set timeframes.
• Provide feedback and continuous improvements to the existing threat modeling process.
• Develop, test, and deploy secure Python-based applications adhering to established SDLC processes and quality standards.
• Collaborate with diverse teams, presenting work clearly and effectively.

Experience & Skills Required

• Minimum of 6 years IT experience with at least 4 years in Cybersecurity or Information Security roles.
• Proven expertise in threat modeling methodologies (STRIDE, PASTA, Attack Trees, ATT&CK).
• Strong knowledge of vulnerability identification using CWE or OWASP standards.
• Hands-on experience with security practices including authentication, authorization, logging/monitoring, encryption, infrastructure security, and network segmentation.
• Proficiency in Python programming, including asynchronous programming and FastAPI framework.
• Experience with unit testing frameworks such as Pytest.
• Familiarity with development concepts like CICD, pipelines, SDLC, and Infrastructure as Code (Terraform, CloudFormation).
• Experience working in DevOps or agile team environments.
• Proficient with Jira or other ticketing systems.
• Strong analytical skills, attention to detail, and a problem-solving mindset.

Preferred Skills and Tools

• Experience with Docker, Kubernetes, serverless architectures, and Helm.
• Knowledge of Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks.
• Ability to design and review technical architectures.
• Experience supporting or performing penetration testing.

Required Qualifications / Certifications

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
• Associate level cloud certification from AWS, GCP, or Azure (e.g., AWS Certified Developer, Google Associate Cloud Engineer, Microsoft Certified Azure Developer Associate).
• Associate or professional cybersecurity certification (e.g., CISA, GSEC, SSCP, CompTIA CySA+, Microsoft Security Operations Analyst Associate).