Security Analyst (Threat Modeling)

Quick Facts

• Role: Regular Security Analyst (Threat Modeling)

• Work model: Hybrid (3 days per week in the office)

• Compensation: 900–1000 PLN net/day (depending on experience)

Description

Support Threat Modeling sessions with application and platform teams. Analyze application architecture to identify assets, trust boundaries, attack surfaces, and potential security risks, and keep threat models up to date with organizational standards and tools. Document threats and risks and connect them to security controls and remediation actions.

Responsibilities

• Support Threat Modeling sessions together with application and platform teams

• Identify assets, trust boundaries, attack surfaces, and potential security risks

• Prepare and update threat models according to organizational standards, methodologies, and tools

• Analyze architectural and design documentation from a security perspective

• Link threat scenarios to application components, data flows, and existing safeguards

• Document identified threats, risks, assumptions, and recommended risk-mitigating actions

• Collaborate with development teams and security to implement remediation actions

• Track remediation progress and the status of threats and mitigation measures

Requirements

• Knowledge of cybersecurity and IT security architecture design principles

• Understanding of threats related to AI, machine learning systems, and LLM models

• Basic knowledge of Threat Modeling and exposure to the STRIDE methodology

• Ability to analyze application architecture for assets, trust boundaries, attack surfaces, and threat scenarios

• Ability to map identified threats to appropriate security controls and remediation actions

• Comfort working with technical documentation and collaborating effectively with IT and Security teams

Benefits

• Long-term engagement

• Technical training, certifications, and qualification development

• Mentoring Competence Center community (conferences and knowledge sharing)

• Clear career path

• Employee benefits: Multisport, private medical care, life insurance

• Friendly work atmosphere, integration events, and team-building activities