AI Threat Modelling Specialist

DCG Poland; Warszawa; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Private medical care

Co-financing for sports card

Dedicated consultant support

Job summary

DCG Poland is seeking a threat modelling specialist to support security assessments across AI/ML/LLMs and applications. You will run workshops, map threats, and develop reusable threat models in collaboration with cross-functional teams.

The role emphasizes applying STRIDE and kill chain methodologies, translating threats into controls, and delivering clear remediation plans. English proficiency is required.

Qualifications

• Strong knowledge of IT Security Architecture.
• Practical experience in threat modelling for AI agents, ML and LLMs.
• Familiarity with STRIDE, attack trees and kill chains.
• Ability to identify assets, boundaries, attack surfaces and abuse cases.
• Experience creating reusable threat models and threat libraries.
• Ability to translate threats into security controls and remediation actions.
• Strong analytical and problem-solving skills.
• Ability to work across application, development, architecture and security teams.
• Fluency in English (written and spoken).

Responsibilities

• Conduct threat modelling workshops with application, platform and security teams.
• Perform application-level security assessments focusing on AI/ML/LLMs and agents.
• Identify assets, trust boundaries, attack surfaces, threat actors and risks.
• Map threats using Mythos framework and threat modelling methodologies.
• Develop and maintain threat models and threat libraries.
• Review designs and docs to ensure threat coverage.
• Apply STRIDE, attack trees and kill chains in analyses.
• Map threats to security controls and remediation actions.
• Collaborate with development, architecture and security teams on mitigations.
• Develop reusable threat models and reporting on remediation status.
• Track threats and risks with status reporting.
• Provide ongoing support and guidance through dedicated consultant

Skills

IT Security Architecture

Threat modelling for AI/ML/LLMs

STRIDE & attack trees

Risk assessment

Security controls implementation

Collaboration with teams

English proficiency

Job description

As a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for:

Responsibilities:

• Conduct threat modelling workshops with application, platform and security teams
• Perform application-level security assessments with a particular focus on AI, ML, LLMs and AI agents
• Identify critical assets, trust boundaries, attack surfaces, threat actors, abuse cases and security risks
• Map relevant threats and attack scenarios using the Mythos adversary framework
• Develop and maintain threat models using approved threat modelling methodologies and tools
• Review solution designs, system architecture and technical documentation to ensure appropriate threat coverage
• Apply threat modelling methodologies such as STRIDE, attack trees and kill chains
• Map identified threats to appropriate security controls and remediation actions
• Collaborate with development, architecture and security teams to define and implement risk mitigation measures
• Develop reusable threat models, threat patterns and threat libraries
• Track identified threats, security risks and remediation activities, and provide clear reporting on their status

Requirements:

• Strong knowledge of IT Security Architecture
• Practical experience in threat modelling for AI agents, Machine Learning and Large Language Models
• Strong knowledge of threat modelling methodologies, including STRIDE, attack trees and kill chains
• Ability to identify assets, trust boundaries, attack surfaces, threat actors and abuse cases
• Experience creating and maintaining reusable threat models and threat libraries
• Ability to translate identified threats into appropriate security controls and remediation actions
• Strong analytical and problem-solving skills
• Ability to work effectively with application, development, architecture and security teams
• Fluency in English (both written and spoken)

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant