Threat Modeler

Job Description

We are looking for a seasoned cybersecurity professional with extensive experience in threat modeling, vulnerability identification, and security architecture reviews. The role involves designing and reviewing secure solutions, developing automation tools, and supporting penetration testing activities.

• Perform threat modeling using STRIDE, PASTA, attack trees, and other documented processes.
• Develop automation tools to support security operations.
• Identify threats and specify mitigating controls, maintaining high standards.
• Manage the lifecycle of identified threats and controls.
• Deliver threat models and related documentation within established time frames.
• Provide feedback, support, and improvements to existing threat modeling processes.
• Present findings to senior leadership, team members, and cross‑functional technical groups.
• Work independently with minimal supervision.

• Minimum 6 years IT experience, with at least 4 years in cybersecurity or information security.
• Hands‑on experience identifying vulnerabilities using CWE or OWASP.
• Security practices – authentication, authorization, logging/monitoring, encryption, infrastructure security and hardening.
• Operating system hardening.
• Development concepts: CI/CD, pipelines, SDLC.
• Scripting languages with Infrastructure‑as‑Code tools (Terraform, Cloud Formation).
• Cloud Development Kit (CDK) and Git Ops workflows.
• Experience with Docker, Kubernetes, serverless, Helm.
• Use of Jira or other ticketing systems.
• Support or conduct penetration testing.
• Experience with Snowflake, MongoDB, Terraform Cloud, Git Hub, Databricks.
• Design and review technical architectures.

• Bachelor's degree in computer science or a related field, or equivalent experience.
• Associate‑level cloud certification (e.g., AWS Certified Developer, AWS Certified Solutions Architect, AWS Certified Sys Ops Administrator, CompTIA Cloud+, Google Associate Cloud Engineer, Oracle Cloud Infrastructure Certified Architect Associate, Microsoft Certified: Azure Developer Associate).
• Associate or professional cybersecurity certifications (ISACA CISA, GIAC GSEC, ISC² SSCP, CompTIA CySA+, Microsoft Certified: Security Operations Analyst Associate).

$100,000 to $125,000 per year.