Perform an end-to-end threat model, using the STRIDE methodology, independently of any help.
Perform threat modelling for AI‑enabled systems, identifying risks introduced by autonomy, tool use, memory, and orchestration layers.
Work with engineering and product teams to define secure design patterns, guardrails, and mitigations for AI agents.
Evangelise about the benefits Cyber can offer the business and run workshops and initiatives to spread the word.
Coach and assist junior members of the team to improve their skills, knowledge or behaviours.
Support external departments by working on bespoke integrations and sharing of information.
Engage with cyber stakeholders, the wider business, and external entities to facilitate and support the delivery of cyber services and initiatives.
Always look to improve your understanding and knowledge of regulatory requirements on our business.

Experience providing end-to-end threat models, using the STRIDE methodology in an Enterprise level business.
Strong understanding of AI‑specific threat classes, such as prompt injection, model abuse, data leakage, insecure plugin/tool execution, and emergent agent behaviour.
Live the Sky Values and demonstrate enthusiasm and a can-do attitude.
Demonstrate a passion for cyber security and have a positive outlook and approach to the work we do.
Experience in working within a typical Cyber/Infosec field, dealing with subjects ranging from technologies, compliance, or regulatory frameworks that have an impact on the Cyber function or offerings.
Strong skills in analytical, decision making, verbal and written communication capabilities.
Excellent teamwork skills to collaborate, share and support colleagues.
A desire to learn, and share your knowledge within the team.

Senior Threat Modelling Analyst – STRIDE

Key skills