IT Security Consultant – Threat Modeling

OPTIVEUM sp. z o.o.; Gdynia; Hybride; PLN 136 000 - 194 000; Plein temps

Résumé du poste

Optiveum is seeking an IT Security Consultant to support threat modeling for a global banking client. The role emphasizes application-level security assessments and threat mapping, with a focus on AI agents, machine learning systems, and large language models.

You will work under the guidance of senior specialists in a hybrid setup. The candidate will identify assets, trust boundaries, attack surfaces, and threat actors, map threats to controls, and translate technical risks into business risk

Qualifications

• Knowledge of IT security architecture principles.
• General understanding of security threats related to AI agents, machine learning systems, and large language models.
• Basic knowledge of threat modeling methodologies, particularly STRIDE.
• Ability to support threat identification and mapping activities under guidance.
• Advanced English.

Responsabilités

• Support application-level security assessments and threat modeling activities
• Help identify assets, trust boundaries, attack surfaces, threat actors and abuse cases
• Use and update existing threat models and threat libraries
• Support the mapping of threats to predefined security controls and remediation actions
• Help translate technical threats into understandable business risks
• Work closely with and learn from senior security specialists

Connaissances

IT security architecture

Threat modeling (STRIDE)

Threat identification & mapping

AI/ML security basics

Advanced English

Description du poste

IT Security Consultant - Threat Modeling

About the Offer

We are currently looking for an IT Security Consultant to support threat modeling activities for our global client from the banking industry. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.

You will support application-level security assessments and threat mapping, with a particular focus on threats related to AI agents, machine learning systems and large language models, working under the guidance of senior specialists.

Key Details:

• Rate: up to 120 PLN/h (B2B)

• Work Model: Hybrid, 3 days a week from the office, full-time (40h/week)

• Location: Gdańsk or Gdynia preferred; Warsaw will also be considered

Responsibilities:

• Support application-level security assessments and threat modeling activities

• Help identify assets, trust boundaries, attack surfaces, threat actors and abuse cases

• Use and update existing threat models and threat libraries

• Support the mapping of threats to predefined security controls and remediation actions

• Help translate technical threats into understandable business risks

• Work closely with and learn from senior security specialists

Requirements:

• Knowledge of IT security architecture principles

• General understanding of security threats related to AI agents, machine learning systems and large language models

• Basic knowledge of threat modeling methodologies, particularly STRIDE

• Ability to support threat identification and mapping activities under guidance

• Advanced English

Nice to have:

• Basic knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS, and the ability to use them as references during threat assessments

• Ability to translate technical threats into business risks