Cloud Information Specialist Threat Modeler

Role: Cloud Information Specialist Threat Modeler Location: London Start Date: September 2026 End Date: 6 months Daily Rate: Inside IR35 Payroll provider – Rockford Payroll Info for Contingent Workers – Rockford Pay This is an exciting opportunity to join Deloitte Operations for an engagement with one of our clients. The Role As a Threat Modeling and Cybersecurity Specialist, you will play a critical role in identifying potential threats, developing mitigation strategies, and delivering secure, efficient Python-based applications. You will work closely with cross-functional teams, presenting your findings and improvements to senior leadership and technical teams, while operating with minimal supervision. Key Responsibilities Â- Conduct threat modeling using documented processes such as STRIDE, PASTA, and Attack Trees. Â- Develop and maintain automation tools to enhance threat identification and mitigation. Â- Maintain high standards in identifying threats and specifying mitigating controls. Â- Manage the lifecycle of identified threats and controls, ensuring timely delivery within set timeframes. Â- Provide feedback and continuous improvements to the existing threat modeling process. Â- Develop, test, and deploy secure Python-based applications adhering to established SDLC processes and quality standards. Â- Collaborate with diverse teams, presenting work clearly and effectively. Experience & Skills Required Â- Minimum of 6 years IT experience with at least 4 years in Cybersecurity or Information Security roles. Â- Proven expertise in threat modeling methodologies (STRIDE, PASTA, Attack Trees, ATT&CK). Â- Strong knowledge of vulnerability identification using CWE or OWASP standards. Â- Hands-on experience with security practices including authentication, authorization, logging/monitoring, encryption, infrastructure security, and network segmentation. Â- Proficiency in Python programming, including asynchronous programming and FastAPI framework. Â- Experience with unit testing frameworks such as Pytest. Â- Familiarity with development concepts like CICD, pipelines, SDLC, and Infrastructure as Code (Terraform, CloudFormation). Â- Experience working in DevOps or agile team environments. Â- Proficient with Jira or other ticketing systems. Â- Strong analytical skills, attention to detail, and a problem-solving mindset. Preferred Skills And Tools Â- Experience with Docker, Kubernetes, serverless architectures, and Helm. Â- Knowledge of Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks. Â- Ability to design and review technical architectures. Â- Experience supporting or performing penetration testing. Required Qualifications / Certifications Â- Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience. Â- Associate level cloud certification from AWS, GCP, or Azure (e.g., AWS Certified Developer, Google Associate Cloud Engineer, Microsoft Certified Azure Developer Associate). Â- Associate or professional cybersecurity certification (e.g., CISA, GSEC, SSCP, CompTIA CySA+, Microsoft Security Operations Analyst Associate).