Threat Modeling Architect 5

Threat Modeling Architect 5

Location:

Charlotte, NC (Hybrid)

Rate Range: $90 - $95/hour W2

Role Overview

We are seeking a senior-level Threat Modeling Architect to join a core application security function. This high-impact role focuses on shaping enterprise security strategy by building and enhancing threat modeling capabilities with a strong emphasis on automation. The ideal candidate will have a principal-level mindset, capable of decomposing large, complex enterprise systems to identify and remediate vulnerabilities at scale.

Key Responsibilities

• Create, maintain, and update threat models for large-scale enterprise systems.
• Decompose complex internal and external system architectures to identify vulnerabilities.
• Drive initiatives to automate threat modeling processes across the enterprise.
• Work cross-functionally with application security engineers and architecture teams.
• Contribute to the improvement of the security posture for enterprise systems.
• Operate strategically and tactically, from creating enterprise patterns to analyzing code-level detail.

Required Qualifications

• 7+ years of experience in Application Security Engineering.
• Substantial hands-on experience in threat modeling and abuse case analysis.
• Demonstrated ability to decompose complex enterprise systems.
• Deep understanding of system architecture, both internal and external.
• Experience identifying vulnerabilities at scale across large, distributed environments.
• Experience building scalable AI/LLM Application Security solutions for enterprise production environments.

Preferred Qualifications

• Experience with threat modeling tools, such as Threat Modeler.
• Experience in banking or another highly regulated industry.
• Background in software engineering, system design, or architecture prior to moving into security.
• Hands-on experience securing applications built in stacks such as Java,.NET, Python, or Go.
• Familiarity with securing cloud-native systems in Azure, AWS, or GCP.
• Experience with software supply chain security controls, including SAST, SCA, and DAST.
• Relevant certifications such as CISSP, CSSLP, or GIAC GWEB.