IT Security Consultant – Threat Modeling activities

ITConnect; Polska; Hybrid; PLN 90,000 - 150,000; Full time

Benefits offered by this job

Hybrid work 3 days in office

Job summary

ITConnect Sp. z o.o. is seeking an IT Security Consultant to support threat modelling activities and assess application-level security under senior guidance.

You will help map threats, identify assets and attack surfaces, and contribute to select security controls and remediation actions. A foundational knowledge of cybersecurity, AI-related threats, and STRIDE is expected, with a focus on practical risk analysis.

Qualifications

• Foundational knowledge of cybersecurity and threat modelling.
• Understanding of AI-related threats and large language models.
• Basic knowledge of threat modelling methodologies (STRIDE).

Responsibilities

• Support application-level assessments under guidance of senior specialists.
• Assist threat mapping activities and asset identification.
• Update and use existing threat models and libraries.
• Map threats to predefined security controls and remediation actions.

Skills

Threat modelling

Security architecture

AI security

STRIDE

Threat mapping

Threat libraries

Attack surface analysis

Job description

• IT Security Consultant – Threat Modeling activities

We require a security specialist with foundational knowledge of cybersecurity, threat modelling, and AI-related threats. The specialist will support application-level assessments and threat mapping activities under the guidance of senior specialists.

• Support application-level assessments and threat mapping activities under the guidance of senior specialists.
• Knowledge of IT Security Architecture principles.
• General understanding of security threats related to AI agents, machine learning systems, and large language models.
• Basic knowledge of threat modelling methodologies, particularly STRIDE.
• Ability to support the identification of assets, trust boundaries, attack surfaces, threat actors, and abuse cases under guidance.
• Ability to use and update existing threat models and threat libraries.
• Ability to support the mapping of threats to predefined security controls and remediation actions.

To oferujemy:

• Hybrid setup: 3 days in the office per week.