Threat Modeler, AVP
Core
Identify security risks early in the technology lifecycle for enterprise applications, cloud platforms, APIs, and emerging technologies to support secure-by-design initiatives.
Role type
Senior IC threat modeler (security architecture)
Builds
Risk mitigation recommendations and secure design guidance for technology solutions
Domain
Financial services / Application and Cloud Security
Required skills
Threat modeling methodologies (STRIDE, MITRE ATT&CK, attack trees), Application security, Cloud security, Secure software development principles, Modern architecture analysis (APIs, microservices, containers, cloud-native), Risk assessment
Preferred skills
AI security, DevSecOps, CI/CD pipelines, Kubernetes, AWS/Azure/GCP platforms
Technologies
STRIDE, MITRE ATT&CK, Attack Trees, AWS, Azure, Google Cloud, Kubernetes, CI/CD
Responsibilities
Participate in threat modeling assessments for applications, APIs, and cloud platforms; Analyze application architectures, data flows, trust boundaries, and cloud deployments; Collaborate with development and cybersecurity teams to improve security outcomes; Contribute to threat modeling standards, reusable patterns, and documentation
Seniority
Senior, hands-on IC
