Senior Consultant - Threat Modeler (TM)

Infosys; Greater London; Sur place; GBP 90 000 - 130 000; Plein temps

Résumé du poste

Infosys is seeking an experienced Threat Modeler to identify security threats, define mitigations, and deliver high-quality threat models for cloud and on-prem environments. The role requires strong cyber-security expertise, an adversarial mindset, and the ability to work with senior stakeholders.

You will apply STRIDE/PASTA, MITRE ATT&CK, and IaC tooling (Terraform, CloudFormation) to secure architectures, collaborate across teams, and ensure timely delivery.

Qualifications

• Minimum 6 years IT experience with at least 4 years in security.
• Hands-on threat modeling experience using STRIDE, PASTA, and attack trees.
• Experience with CWE and OWASP guidance.
• Strong knowledge of authentication, authorization, logging, and encryption.
• Experience with IaC and cloud security tooling.
• Experience working in regulated environments.

Responsabilités

• Perform threat modeling using a documented, repeatable process.
• Identify threats and specify mitigations of security controls.
• Manage lifecycle of threats and controls through to resolution.
• Deliver threat models and related activities within deadlines.
• Develop automation tools to support threat modeling.
• Provide feedback to improve threat modeling processes.
• Present findings to senior stakeholders and cross-functional teams.
• Collaborate across diverse teams with minimal supervision.

Connaissances

Threat modeling

Cyber security

Cloud security

STRIDE/PASTA/attack trees

MITRE ATT&CK

Scripting

IaC (Terraform/CloudFormation)

Documentation

Communication

Adversarial mindset

Formation

Bachelor's degree in Computer Science or related field

Associate-level cloud certification

Outils

Jira

Terraform

CloudFormation

GitOps

Description du poste

Technology - Threat Modeling, Cloud Security, Infrastructure as Code, Python

Location – Belfast/London

Compensation - Competitive (including bonus)

Job Description

We are seeking an experienced Threat Modeler to identify security threats, define appropriate mitigating controls, and deliver high-quality threat models within agreed timelines. The role requires strong cyber-security and cloud knowledge, an adversarial mindset, and the ability to work independently while collaborating with senior stakeholders and cross-functional technical teams.

Key Responsibilities

• Perform threat modeling using a documented and repeatable process.
• Identify threats and specify effective mitigating security controls while maintaining a high standard of quality.
• Manage the lifecycle of identified threats and controls through completion.
• Deliver threat models and supporting activities within established timelines.
• Develop automation tools and scripts as required to support threat modeling activities.
• Provide feedback, support, and recommendations to improve the existing threat modeling process.
• Present threat model findings and recommendations to senior stakeholders, the team, and other technical teams.
• Work with minimal supervision and collaborate effectively across diverse, cross-functional teams.

Required Experience and Technical Skills

• Minimum 6 years of IT experience, including at least 4 years in Cyber Security or Information Security.
• Hands-on experience in threat modeling methodologies and techniques, including STRIDE, PASTA, attack trees, threat modeling tools, and MITRE ATT&CK.
• Experience identifying vulnerabilities using CWE and OWASP guidance.
• Practical experience in a cyber-security role.
• Strong understanding of authentication, authorization, logging and monitoring, encryption, infrastructure security, and network segmentation.
• Experience with scripting languages and Infrastructure as Code, such as Terraform or CloudFormation.
• Experience using Jira or other ticketing systems.
• Ability to design and review technical architectures.
• Experience across several relevant areas, typically two to five years, such as operating-system hardening, CI/CD, pipelines, SDLC, CDK, GitOps, DevOps or Agile delivery, Docker, Kubernetes, serverless technologies, Helm, penetration testing, Snowflake, MongoDB, Terraform Cloud, GitHub, or Databricks.
• Strong analytical ability, diligence, and attention to detail.
• Adversarial mindset and effective problem-solving skills.
• Ability to research using vendor documentation and continuously learn new technologies and methodologies.
• Ability to create and maintain high-quality documentation.
• Experience working in a regulated environment.
• Strong communication, presentation, and collaboration skills.
• Ability to build productive relationships across cross-functional teams.
• Ability to work effectively with a diverse range of people and teams.

Qualifications

• Bachelor's degree in a computer-related field or equivalent work experience.

Associate-level cloud certification from AWS, GCP, Azure, Oracle Cloud, or CompTIA Cloud+.

• Associate-level or professional cyber-security certification.

Relevant Cloud Certifications

• AWS Certified Developer, AWS Certified Solutions Architect, or AWS Certified SysOps Administrator.
• Google Associate Cloud Engineer or another professional GCP certification.
• Oracle Cloud Infrastructure Certified Architect Associate or Cloud Operations Associate.
• CompTIA Cloud+.

Relevant Cyber-Security Certifications

• ISACA Certified Information Systems Auditor (CISA)
• EC-Council: Certified Ethical Hacker ver 9 (CEH)
• GIAC Security Essentials (GSEC).
• ISC2 Systems Security Certified Practitioner (SSCP).
• CompTIA CySA+.
• Microsoft Certified: Security Operations Analyst Associate or Information Protection Administrator Associate.

Personal Attributes

• High degree of initiative, flexibility, and ownership.
• High customer orientation and quality awareness.
• Excellent verbal and written communication skills.

Why Infosys

Infosys is a global leader in next-generation digital services and consulting. We enable clients in 59 countries to navigate their digital transformation.

With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer clients, in 59 countries, as they navigate their digital transformation powered by cloud and AI. We enable them with an AI-first core, empower the business with agile digital at scale and drive continuous improvement with always-on learning through the transfer of digital skills, expertise, and ideas from our innovation ecosystem. We are deeply committed to being a well-governed, environmentally sustainable organization where diverse talent thrives in an inclusive workplace.