IT Security Penetration Tester - Threat Modeling

b2bnetwork; Warszawa; On-site; PLN 190,000 - 230,000; Full time

Job summary

b2bnetwork is seeking an IT Security Specialist focused on Threat Modelling for AI. The role involves leading workshops, mapping AI threats to app components and data flows, and guiding teams on risk mitigation across architecture and development functions.

Responsibilities include developing threat models, reviewing designs for security gaps, and reporting mitigation status. The ideal candidate drives actionable risk actions and mentors others in modelling activities.

Qualifications

• Strong knowledge of IT Security Architecture.
• Experience in threat modelling AI agents and ML systems.
• Proficient with STRIDE, attack trees and kill chains.
• Ability to identify assets, trust boundaries, attack surfaces and abuse cases.
• Experience creating reusable threat models and libraries.
• Ability to map threats to security controls and remediation actions.

Responsibilities

• Lead threat modelling workshops with application and platform teams.
• Identify and assess assets, trust boundaries, attack surfaces, threats and security risks related to AI threats.
• Develop and maintain threat models using approved tooling and methodology.
• Review designs to identify security gaps and validate threat coverage.
• Map AI threat scenarios to data flows and security controls.
• Collaborate with development, architecture and security teams to define practical risk actions.
• Provide guidance to junior team members during threat modelling activities.
• Track and report identified threats, risks, mitigations, and remediation status.

Skills

IT Security Architecture

Threat modelling

AI threat modelling

STRIDE

Attack trees

Kill chains

LLM threats

AI systems

Tools

Threat modelling tooling

Job description

IT Security Specialist - Threat Modeling AI

We require a senior security specialist with practical experience in AI-related threats and a strong understanding AI related threats. The specialist will independently conduct application-level assessments, map relevant AI threat scenarios, evaluate security exposures, and define appropriate risk mitigation strategies.

Responsibilities

• Lead threat modelling workshops with application and platform teams.
• Identify and assess assets, trust boundaries, attack surfaces, threats, and security risks related to AI threats.
• Develop and maintain threat models using the approved threat modelling tooling and methodology.
• Review solution designs and architecture documentation to identify security gaps and validate threat coverage.
• Map applicable AI threat scenarios to application components, data flows, and security controls.
• Collaborate with development, architecture, and security teams to define practical risk mitigation actions.
• Provide guidance to less experienced team members during threat modelling activities.
• Track and report identified threats, security risks, mitigation actions, and remediation status.

Must-have knowledge and experience

• Strong knowledge of IT Security Architecture.
• Practical experience in threat modelling AI agents, machine learning systems, and large language models.
• Strong working knowledge of threat modelling methodologies, including STRIDE, attack trees, and kill chains.
• Ability to independently identify assets, trust boundaries, attack surfaces, threat actors, and abuse cases.
• Experience developing and adapting reusable threat models and threat libraries.
• Ability to map identified threats to relevant security controls, risks, and remediation actions.

Nice-to-have knowledge and experience

• Ability to independently translate technical threats and security findings into clear business risks and potential business impacts.
• Strong working knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS, with the ability to apply these frameworks during threat assessments.