Expert Threat Modeling Specialist

Quick Facts

• Role: Expert Threat Modeling Specialist (IT Security / Threat Modelling)
• Focus: Building and delivering threat modeling capability and automation for a banking customer

Description

You will develop and deliver a robust Threat Modelling Program using a structured approach to identify and prioritize potential threats and evaluate the impact of mitigations. The role leverages AI tools to support and enhance threat modeling before code is written, translating security requirements into actionable, developer-friendly guidance. You will also help evolve secure design patterns and integrate the threat modeling process into a Threat Modelling Platform.

Responsibilities

• Develop and deliver a Threat Modelling Program for a banking industry customer
• Use AI tools to support and enhance threat modeling
• Participate in threat modeling to mitigate risks before code is written
• Convert security requirements into developer-friendly guidance
• Work with stakeholders to assess and improve current threat modeling capabilities
• Recommend and develop supporting infrastructure (tools/applications) for threat modeling
• Develop, maintain, update, and enhance secure design patterns and secure coding standards
• Integrate the threat modeling process into the Threat Modelling Platform
• Influence the Threat Model product vision and roadmap to enable scalable, efficient, fault-resistant automation

Requirements

• Excellent written and spoken communication skills
• Proven ability to develop project plans incorporating AI solutions
• Experience as a Security Champion in SDLC development
• 3–5+ years of experience in Threat Modelling
• Hands-on experience with AI-driven tools
• Experience with threat modeling methodologies/frameworks (STRIDE, MITRE ATLAS, OWASP Top 10, MITRE ATT&CK, or similar)
• Experience with enterprise-level threat modeling techniques and processes
• Ability to interpret networking, data flow, and architectural diagrams to identify adversary vectors
• Detailed knowledge of cyber threats, threat actors, and common TTPs used by adversaries
• Understanding of networking technologies
• Hands-on experience with tools that support process automation

Benefits

• Hybrid working model
• Collaboration, ownership, and passion as guiding values
• Culture focused on performance and growth with opportunities to learn and evolve
• Diversity and inclusion commitment with ongoing initiatives