Senior Threat Modeler
Core
Perform threat modeling for enterprise applications, cloud platforms, APIs, and emerging technologies to identify security risks early in the development lifecycle.
Role type
Senior IC security architect (threat modeling)
Builds
Secure-by-design outcomes for critical business systems and technology platforms
Domain
Financial services / Cloud security / Application security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Threat modeling methodologies (STRIDE, MITRE ATT&CK, attack trees), Cloud security (AWS, Azure, GCP), Application security principles, Secure software development lifecycles, API security, Microservices and container security, Risk assessment, Secure architecture design
Preferred skills
DevSecOps practices, CI/CD pipeline security, Kubernetes security, Adversary-based risk analysis, Financial services domain knowledge
Technologies
AWS, Azure, Google Cloud Platform, Kubernetes, CI/CD pipelines
Responsibilities
Conduct threat modeling for business applications and cloud-native platforms, Analyze application architectures and data flows to identify security weaknesses, Partner with engineering teams to recommend risk mitigation strategies, Perform security assessments using established methodologies, Contribute to development of threat modeling standards and reusable patterns
Seniority
Senior, hands-on IC
