Threat Modeler with Development background
About the role
Job Title: Threat Modeler with Development background Location: HYBRID - 3 days office Job Type: Fulltime Permanent Rol
Job Overview • Threat Modeler, Security Architect with Development background • Artificial Intelligence, Machine Learning & Data Science professional with experience in enterprise architecture, AI product security, and digital transformation. Strong hands-on expertise in cloud-native architectures (AWS/GCP), threat modeling, secure AI system development, and AI governance. Led mission-critical initiatives with cross-functional teams, aligning product innovation with cybersecurity best practices and compliance standards.
• Threat Modeler, Security Architect with Development background • Experience with threat modeling frameworks, attack vectors and vulnerability analysis: CAPEC, ATT&CK, STRIDE. • Experience with application security controls (Web, API, Mobile, AI). • Experience with common information security management and application frameworks: NIST 800-53, CSF, OWASP ASVS. - Experience with Application Security design and DevSecOps • Full stack knowledge of application architectures including Single Page Applications, REST APIs, SOAP APIs, Mobile Applications. • Experience with Java, JavaScript and mobile application development. • Knowledge of familiarity with database architecture including Oracle, SQL, DB2 and NoSQL Databases • Experience with Cloud security, architecture, design, implementation, and operations- Exposure to IAM Controls (OAuth 2.0, OIDC, JWT) • Strong familiarity with Cryptography Controls (Data at rest, in motion). • CISSP, CISM, CSSLP, CISA, CRISC, OSCP
• Conducts security risk assessments of applications with respect to design and implementation of system and application code • Experience in API development (RESTful APIs, Integration Design, etc). • Work with PostgreSQL and similar RDBMS, to query and optimize data structures. • Contribution to system architecture and design discussions. • Ability to write scripts to automate tasks, improve workflows and reduce manual effort. • Proficiency in one or more core programming language: Python, JavaScript, Java or Go. • Familiarity with DevOps practices, including: (CI/CD pipelines, version control, build and deployment automation). • Understanding of secure coding practices and implementation. • Strong problem solving and debugging skills.
• Solid communication and collaboration skills, especially when working in cross functional teams.
Similar Jobs
Threat Modeler with Development background
About the role
Job Title: Threat Modeler with Development background Location: HYBRID - 3 days office Job Type: Fulltime Permanent Rol
Job Overview • Threat Modeler, Security Architect with Development background • Artificial Intelligence, Machine Learning & Data Science professional with experience in enterprise architecture, AI product security, and digital transformation. Strong hands-on expertise in cloud-native architectures (AWS/GCP), threat modeling, secure AI system development, and AI governance. Led mission-critical initiatives with cross-functional teams, aligning product innovation with cybersecurity best practices and compliance standards.
• Threat Modeler, Security Architect with Development background • Experience with threat modeling frameworks, attack vectors and vulnerability analysis: CAPEC, ATT&CK, STRIDE. • Experience with application security controls (Web, API, Mobile, AI). • Experience with common information security management and application frameworks: NIST 800-53, CSF, OWASP ASVS. - Experience with Application Security design and DevSecOps • Full stack knowledge of application architectures including Single Page Applications, REST APIs, SOAP APIs, Mobile Applications. • Experience with Java, JavaScript and mobile application development. • Knowledge of familiarity with database architecture including Oracle, SQL, DB2 and NoSQL Databases • Experience with Cloud security, architecture, design, implementation, and operations- Exposure to IAM Controls (OAuth 2.0, OIDC, JWT) • Strong familiarity with Cryptography Controls (Data at rest, in motion). • CISSP, CISM, CSSLP, CISA, CRISC, OSCP
• Conducts security risk assessments of applications with respect to design and implementation of system and application code • Experience in API development (RESTful APIs, Integration Design, etc). • Work with PostgreSQL and similar RDBMS, to query and optimize data structures. • Contribution to system architecture and design discussions. • Ability to write scripts to automate tasks, improve workflows and reduce manual effort. • Proficiency in one or more core programming language: Python, JavaScript, Java or Go. • Familiarity with DevOps practices, including: (CI/CD pipelines, version control, build and deployment automation). • Understanding of secure coding practices and implementation. • Strong problem solving and debugging skills.
• Solid communication and collaboration skills, especially when working in cross functional teams.