We are seeking an experienced Threat Modeling Specialist – Senior Associate to join a large-scale cybersecurity architecture and security assurance program within a highly regulated enterprise environment.
This role will be responsible for identifying, analyzing, and mitigating security threats across enterprise applications, cloud platforms, infrastructure, and system integrations. The successful candidate will leverage industry-leading threat modeling methodologies to strengthen security architecture and ensure secure-by-design principles are embedded throughout the organization.
Key Responsibilities
- Conduct threat modeling exercises for enterprise applications, cloud environments, infrastructure platforms, and system integrations.
- Identify potential attack vectors, threat actors, attack paths, and security weaknesses across complex technology environments.
- Perform attack surface analysis and threat identification activities.
- Apply industry-recognized threat modeling methodologies including STRIDE and PASTA.
- Leverage MITRE ATT&CK to assess adversarial tactics, techniques, and procedures (TTPs).
- Develop threat scenarios and evaluate business and technical risks associated with identified threats.
- Translate threat modeling findings into actionable security architecture requirements and recommendations.
- Collaborate with security architects, infrastructure teams, cloud engineers, application developers, and project stakeholders.
- Support security architecture reviews and security-by-design initiatives.
- Maintain threat model repositories, documentation, and reporting artifacts.
- Assess critical business systems and high-risk technology initiatives.
- Contribute to security baselines, architecture standards, and risk management activities.
- Support compliance with cybersecurity frameworks, regulatory requirements, and industry best practices.
Required Qualifications
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline.
- Strong experience conducting threat modeling for enterprise environments.
- Hands-on expertise in:
- STRIDE
- PASTA
- MITRE ATT&CK
- Attack Surface Analysis
- Threat Identification
- Security Architecture Reviews
- Risk Assessment Methodologies
- Experience assessing applications, APIs, cloud platforms, infrastructure, and system integrations.
- Ability to communicate technical risks to both technical and business stakeholders.
- Strong documentation and reporting skills.
Preferred Certifications
- CISSP (Certified Information Systems Security Professional)
- GCTI (GIAC Cyber Threat Intelligence)
- STRIDE and/or PASTA practical experience
- Strong knowledge of MITRE ATT&CK Framework
Preferred Experience
- Experience within banking, financial services, government, or other highly regulated environments.
- Experience working alongside security architecture and governance teams.
- Familiarity with cloud security, application security, IAM, and cybersecurity risk management.
- Experience supporting enterprise cybersecurity transformation initiatives.
Contract Duration: 12 Months Contract
