Threat Modeling Architect - Cloud Security & Automation

Infosys Limited; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Infosys Limited is seeking an experienced Threat Modeler to identify security threats, define mitigating controls, and deliver high-quality threat models within agreed timelines. You will collaborate with senior stakeholders and cross-functional technical teams to strengthen cloud security across multiple environments.

The role demands solid cyber-security expertise, hands-on threat modeling using STRIDE, PASTA, attack trees and MITRE ATT&CK, plus IaC tooling (Terraform, CloudFormation).

Qualifications

• We are seeking a candidate with 6+ years IT experience, including 4+ years in cyber security or information security.

Responsibilities

• Perform threat modeling using a documented and repeatable process.
• Identify threats and specify effective mitigating security controls while maintaining high quality.
• Manage the lifecycle of identified threats and controls through completion.
• Deliver threat models and supporting activities within established timelines.
• Develop automation tools and scripts to support threat modeling activities.
• Provide feedback, support, and recommendations to improve the threat modeling process.
• Present threat model findings and recommendations to senior stakeholders and cross-functional teams.
• Collaborate across diverse, cross-functional teams with minimal supervision.

Skills

Threat modeling expertise

Adversarial mindset

Analytical thinking

Cross-functional collaboration

Documentation

Education

Bachelor's degree in computer science or equivalent

Tools

Terraform

CloudFormation

Jira

Threat modeling tools

GitHub

Job description

Infosys Limited is seeking an experienced Threat Modeler to identify security threats, define mitigating controls, and deliver high-quality threat models within agreed timelines. You will collaborate with senior stakeholders and cross-functional technical teams to strengthen cloud security across multiple environments.

The role demands solid cyber-security expertise, hands-on threat modeling using STRIDE, PASTA, attack trees and MITRE ATT&CK, plus IaC tooling (Terraform, CloudFormation).