Expert IT Security Specialist / Threat Modelling Expert

Nordea; Warszawa; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Hybrid working model

Diversity and inclusion

Learning and development opportunities

Job summary

Nordea in Warsaw is seeking an Expert Threat Modelling Specialist to build and drive a robust Threat Modelling Program for a banking customer. You will lead risk assessment efforts, apply AI-driven tools, and translate security requirements into developer-friendly guidance.

The role requires collaboration with international teams and a strong ability to communicate complex threats to non-technical stakeholders, contributing to Nordea's secure transformation agenda.

Qualifications

• 3-5+ years of experience in Threat Modelling area.
• Hands-on experience with AI-driven tools.
• Experience interpreting networking, data flow, and architectural diagrams.

Responsibilities

• Develop and deliver a robust Threat Modelling Program for a banking customer.
• Leverage AI tools to support threat modelling.
• Translate security requirements into actionable guidance for developers.

Skills

Threat Modelling

STRIDE

MITRE ATLAS

MITRE ATT&CK

AI tools

Tools

Threat modelling tools

Automation tools

Job description

Job ID: 5768 Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea’s transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.

Would you like to be part of Threat Modelling capability? We are now looking for an Expert Threat Modelling Specialist to develop and deliver a robust Threat Modelling Program for a customer in the banking sector industry. In Nordea, we’re harnessing the power of technology to reinvent the future of banking. A tech revolution is underway – and you can make an impact. Though we’re a Nordic bank, we’re also one of the largest IT employers in Tricity and Warsaw. Working with international teams in an inspiring working environment, you’ll have lots of opportunities to expand your skills and advance your career. Nordea is a place where traditions meet tomorrow. We're not just a bank, we're a tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people’s daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.

About Our Team

Welcome to the Threat Modelling capability. We add value by protect & de-risking the bank by using new and innovative capabilities to be fit for the future threat landscape. As the Expert Threat Modelling Specialist, you will take an active part in structured approach of identifying and prioritizing potential threats to a system and determining the value that potential mitigations would have in reducing or neutralizing those threats.

Main responsibilities in this role:

• Help to develop and deliver a robust Threat Modelling Program for a customer in the banking sector industry
• The role involves leveraging AI tools to support and enhance threat modelling
• Participate in threat modeling to identify and mitigate risks before code is written. Ensure security requirements are translated into actionable, developer-friendly guidance
• Work with customer stakeholders to evaluate current state of customer threat modelling capabilities
• Help to recommend and develop supporting infrastructure (tools, applications) to support threat modelling efforts. Develop, maintain, update, enhance secure design patterns and secure coding standards, and integrate the current threat modelling process into the Threat Modelling Platform
• Play a critical role in influencing the Threat Model product vision and roadmap in-order to elevate business outcomes and build scalable, efficient and fault resistant automation solutions
• Good knowledge of relevant tools, along with experience in their automation, is required

Who You Are

This is the right role for you if you are/have:

• Excellent written and spoken communication skills
• A real problem solver and good with people type of person
• Proven ability to develop project plans incorporating AI solutions
• Experience as a Security Champion in SDLC Development
• A tech-obsessed individual who loves dealing with new technologies and is comfortable in learning new concepts, as well as sharing them with internal and external stakeholders
• A strong willingness to learn and ability to translate technical requirements to the business
• A good listener who asks the right questions, someone who enjoys conversing with customers to establish what they are trying to achieve and gathering feedback to share with our Product and Engineering teams
• Proven ability to design and implement automation solutions

Your background and skills include:

• Experience working with threat modelling methodologies/frameworks such as STRIDE, MITRE ATLAS , OWASP Top 10, MITRE ATT&CK, or other
• 3-5+ years of experience in Threat Modelling area
• Hands-on experience with AI-driven tools
• Experience with threat modelling techniques and processes in an enterprise level organization
• Experience interpreting networking, data flow, and architectural diagrams to identify vectors an adversary may seek to exploit
• Detailed knowledge of cyber threats, threat actors and the tactics, techniques, and procedures commonly used by cyber adversaries
• Understanding networking technologies
• Hands-on experience with tools that support process automation

What We Offer

Collaboration. Ownership. Passion. Courage. These are the values that guide us in how we work and how we make decisions – and that we imagine you share with us.

People

are driven by many different factors. For some, it’s to take their career to the next level. For others, it’s to break new ground within their area of expertise – in other words, with us, you will always move forward.

A culture

that foster performance and growth in one of the largest Nordic banks, offering various opportunities to evolve, develop and learn from brilliant colleagues with diverse backgrounds in a vibrant working environment.

Hybrid working model

– we believe in the value of bringing people together and at the same time we embrace the freedom of flexibility.

Diversity and inclusion

are a natural part of our daily work. We know that an inclusive workplace is a sustainable one. We genuinely believe that our diverse backgrounds, experiences, characteristics and traits make us stronger together. Every day we strive to find new ways to improve diversity and inclusion within our community e.g. we have signed the European Diversity Charters in the countries where we operate to show our commitment and engage with others to continue learning and improving.

Next steps

• Preliminary CV selection
• Phone conversation with the recruiter
• Online interview with the hiring leader
• Background check

We enable dreams and aspirations for a greater good.

We build relationships. We add a personal touch to everything we do – when advising our customers, collaborating with colleagues, and meeting our potential candidates.

We learn and develop.

We take pride in being experts and thinking ahead. We use our expertise to meet our customers’ needs, from the simplest to the most complex. We bring a growth mindset to our work that enables us to focus on a broader perspective in our daily challenges.

We lead change.

We are responsible and aware of the impact of our decisions, both for our customers and for our local and global communities. Mindful of our responsibility towards current and future generations, we have made sustainability an integrated part of our business strategy.

We are Nordea.

We have a 200-year history of supporting and growing the Nordic economies and our values are deeply rooted in these open, progressive and collaborative societies. As one of the biggest employers in the Nordics, Poland and Estonia, you have excellent opportunities to evolve, develop and move forward with us. Studies show that members of underrepresented communities don’t apply for jobs unless they tick all the qualification boxes. If this is part of why you hesitate to apply, we would like you to reconsider and give it a chance. Maybe your profile fits our needs much better than you think.

We reserve the right to reply only to selected applications.