Threat Modelling Specialist (f/m/x) – Chief Security Office CTO

Deutsche Bank AG; Berlin; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Mental health support

Health check-ups

Diversity & inclusion

Deutschlandticket

Job summary

Deutsche Bank AG in Berlin is seeking a Threat Modelling Specialist to support threat modelling activities, assist with security risk identification, and contribute to workshops within the CSO team. This role emphasizes secure coding practices and proactive security guidance throughout the SDLC.

You will help maintain security documentation and participate in training to raise security awareness among engineering teams, aligning with the Shift-Left security approach across projects.

Qualifications

• Foundational knowledge of threat modelling concepts and security frameworks such as STRIDE, MITRE ATT&CK, or OWASP Top 10.
• Understanding of secure Software Development Life Cycle (SDLC) and secure coding principles.
• Initial experience or strong interest in application security, cybersecurity, or software engineering.

Responsibilities

• Support threat modelling activities and participate in security reviews for applications and services.
• Assist development teams in identifying security risks and implementing appropriate mitigations.
• Contribute to threat modelling workshops and the Security Design Authority (SDA) process.
• Help maintain security documentation, guidance, templates, and best-practice materials.
• Support security awareness initiatives and participate in training sessions for engineering teams.

Job description

Threat Modelling Specialist (f/m/x) – Chief Security Office CTO

Job ID: R0433886 Full/Part-Time: Full-time

Regular/Temporary: Regular Listed: 2026-10-12

Location: Berlin

Position Overview

About the job

DB Technology is a global team of tech specialists, spread across multiple trading hubs and tech centres. We have a strong focus on promoting technical excellence – our engineers work at the forefront of financial services innovation using cutting‑edge technologies.

Our Berlin location is our most recent addition to our global network of tech centres and growing strongly. We are committed to building a diverse workforce and to creating excellent opportunities for talented engineers and technologists. Our tech teams and business units use agile ways of working to create #GlobalHausbank solutions from our home market.

Chief Security Office (CSO)

TDI’s Chief Security Office is responsible for the creation, maintenance, and implementation of the information security strategy of Deutsche Bank Group. CSO steers the measures derived from the information security strategy and provides guidance to employees regarding the identification, development, implementation, and execution of all processes which serve to reduce information security risk, to respond to incidents, and to establish appropriate policies and standards for information security management.

You’ll be joining the Secure Software Development Team. The team’s purpose is to drive the efficient integration of security services into DBs Software Development Processes and CI/CD Platforms, and that security is embedded as early as possible. Secure Coding Standards, best practices and guidance for application development teams are some of our core deliverables we provide to support security in software development.

As a Threat Modelling Analyst (f/m/x) you will be supporting the “Shift-Left-Approach” to shift security responsibilities to those creating software and shift it towards the beginning of the process. The responsibility is to define our secure coding standards and continuously enhance our secure coding guidance, blueprints, and best practices on different levels so that this is easy to consume for our developers, but also satisfies external and regulatory requests.

Your key responsibilities

• Support threat modelling activities and participate in security reviews for applications and services.
• Assist development teams in identifying security risks and implementing appropriate mitigations.
• Contribute to threat modelling workshops and the Security Design Authority (SDA) process.
• Help maintain security documentation, guidance, templates, and best-practice materials.
• Support security awareness initiatives and participate in training sessions for engineering teams.

Your skills and experiences

• Foundational knowledge of threat modelling concepts and security frameworks such as STRIDE, MITRE ATT&CK, or OWASP Top 10.
• Understanding of secure software development principles and the Software Development Lifecycle (SDLC).
• Initial experience or strong interest in application security, cybersecurity, or software engineering.
• Basic knowledge of authentication, authorization, encryption, and common application security risks.
• Strong communication and collaboration skills, with a willingness to learn and work closely with development and security teams.
• Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

What we offer

We provide you with a comprehensive portfolio of benefits and offerings to support both, your private and professional needs.

• Emotionally and mentally balanced
  A positive mind helps us master the challenges of everyday life – both professionally and privately. We offer consultation in difficult life situations as well as mental health awareness trainings.
• Physically thriving
  We support you in staying physically fit through an offering to maintain personal health and a professional environment. You can benefit from health check-ups; vaccination drives as well as advice on healthy living and nutrition.
• Socially connected
  Networking opens up new perspectives, helps us thrive professionally and personally as well as strengthens our self-confidence and well-being. You can benefit from PME family service, FitnessCenter Job, flexible working (e parttime, hybrid working, job tandem) as well as an extensive culture of diversity, equity and inclusion.
• Financially secure
  We provide you with financial security not only during your active career but also for the future. You can benefit from offerings such as pension plans, banking services, company bicycle or “Deutschlandticket”.

This job is available in full and parttime.