Platform Consultant (Multiple Levels) - Hybrid
Core
Senior security consultant driving adoption of secure-by-design principles and advanced threat modeling practices across enterprise technology platforms.
Role type
Senior IC security consultant (threat modeling & secure architecture)
Builds
Secure, resilient, and scalable technology solutions embedded into cloud platforms and software development lifecycles
Domain
Insurance / Cybersecurity / Cloud Engineering
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure
Required skills
Threat modeling methodologies (STRIDE, Attack Trees, Kill Chains), Secure-by-design principles, Cloud-native security, API security, CI/CD integration, Risk-based security recommendations, Architectural decision influence
Preferred skills
AI Security, SaaS Security, Threat modeling automation, RESTful API design, Security frameworks (OWASP, MITRE ATT&CK, NIST), Cloud platforms (AWS, Azure, GCP), Modern programming languages (Java, Python, Go, Rust)
Technologies
AWS, Azure, GCP, OpenAPI, Swagger, OAuth 2.0, OpenID Connect, SAML, CI/CD pipelines
Responsibilities
Lead and facilitate threat modeling engagements to identify and mitigate security risks early; Embed secure-by-design principles into software delivery processes; Define and influence platform security strategies with technical and non-technical stakeholders; Partner with engineering and architecture teams to develop risk-based security recommendations; Collaborate with Security Operations to improve threat detection and breach modeling; Facilitate architectural reviews and discovery workshops; Champion emerging security capabilities including AI and API security
Seniority
Senior, hands-on IC with technical leadership
