Senior Threat Modeler - Cloud Security & Automation

Infosys; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Infosys is seeking an experienced Threat Modeler to identify security threats, define mitigations, and deliver high-quality threat models for cloud and on-prem environments. The role requires strong cyber-security expertise, an adversarial mindset, and the ability to work with senior stakeholders.

You will apply STRIDE/PASTA, MITRE ATT&CK, and IaC tooling (Terraform, CloudFormation) to secure architectures, collaborate across teams, and ensure timely delivery.

Qualifications

• Minimum 6 years IT experience with at least 4 years in security.
• Hands-on threat modeling experience using STRIDE, PASTA, and attack trees.
• Experience with CWE and OWASP guidance.
• Strong knowledge of authentication, authorization, logging, and encryption.
• Experience with IaC and cloud security tooling.
• Experience working in regulated environments.

Responsibilities

• Perform threat modeling using a documented, repeatable process.
• Identify threats and specify mitigations of security controls.
• Manage lifecycle of threats and controls through to resolution.
• Deliver threat models and related activities within deadlines.
• Develop automation tools to support threat modeling.
• Provide feedback to improve threat modeling processes.
• Present findings to senior stakeholders and cross-functional teams.
• Collaborate across diverse teams with minimal supervision.

Skills

Threat modeling

Cyber security

Cloud security

STRIDE/PASTA/attack trees

MITRE ATT&CK

Scripting

IaC (Terraform/CloudFormation)

Documentation

Communication

Adversarial mindset

Education

Bachelor's degree in Computer Science or related field

Associate-level cloud certification

Tools

Jira

Terraform

CloudFormation

GitOps

Job description

Infosys is seeking an experienced Threat Modeler to identify security threats, define mitigations, and deliver high-quality threat models for cloud and on-prem environments. The role requires strong cyber-security expertise, an adversarial mindset, and the ability to work with senior stakeholders.

You will apply STRIDE/PASTA, MITRE ATT&CK, and IaC tooling (Terraform, CloudFormation) to secure architectures, collaborate across teams, and ensure timely delivery.