Cyber Subject Matter Expert (SME, Threat Modeling)

Spatial Front, Inc; Arlington (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

Spatial Front, Inc. is seeking a Cyber SME (Threat Modeling) to provide expert guidance on security risks in Federal Government IT systems. The ideal candidate will have deep expertise in threat modeling methodologies and security architecture with at least 7 years of cybersecurity experience. Responsibilities include leading threat modeling sessions, producing detailed reports, and collaborating with technical teams. This is a full-time, on-site position requiring U.S. citizenship and an active Secret security clearance.

Qualifications

• 7 years of cybersecurity experience, with at least 5 years in threat modeling.
• Demonstrated expertise in threat modeling, risk assessment, and security architecture.
• Must have active Secret security clearance or ability to obtain one.

Responsibilities

• Lead threat modeling sessions for IT systems and applications.
• Develop threat models, data flow diagrams, and attack trees.
• Produce threat model reports with risk ratings and recommended mitigations.

Skills

Expertise in threat modeling methodologies

Risk assessment

Security architecture

Collaboration with technical teams

Education

Bachelor's in Computer Science, Cybersecurity, or related field

Tools

Splunk

New Relic

Microsoft Threat Modeling Tool

IriusRisk

ThreatModeler

Job description

Job Overview

Spatial Front, Inc. (SFI), a two-time USAToday Top Workplaces awardee and Washington Top Workplaces honoree, is seeking a Cyber SME (Threat Modeling) to support our growing team. The ideal candidate will lead threat modeling activities and provide expert guidance on identifying and mitigating security risks in Federal Government IT systems and applications. The best candidate will have deep expertise in threat modeling methodologies and security architecture. As a valued member of the SFI team, you will play a critical role in delivering mission‑critical capabilities to our Federal Government customers.

Job Type

Full‑time

Key Responsibilities

• Lead and facilitate threat modeling sessions for new and existing systems, applications, and architectures.
• Serve as the Cyber Lead for the App Security Team as needed.
• Apply threat modeling methodologies (e.g., STRIDE, PASTA, LINDDUN) to identify and prioritize security threats.
• Develop threat models, data flow diagrams, and attack trees for complex federal IT systems.
• Collaborate with architects, developers, and security engineers to integrate threat modeling into the SDLC.
• Produce threat model reports with identified threats, risk ratings, and recommended mitigations.
• Develop and deliver threat modeling training and workshops for technical teams.
• Maintain a threat intelligence library and incorporate emerging threats into threat modeling activities.
• Other duties as assigned.

Requirements

• Bachelor's in Computer Science, Cybersecurity, or related field.
• 7 years of cybersecurity, 5 years threat modeling.
• Experience with tools such as Splunk and New Relic.
• Demonstrated expertise in threat modeling, risk assessment, security architecture, attack vectors, mitigation strategies.
• Must be a U.S. Citizen.
• Must possess an active Secret security clearance or be able to obtain one.

Desired Skills

• CISSP, CSSLP, or equivalent security architecture certification.
• Experience with threat modeling tools (e.g., Microsoft Threat Modeling Tool, IriusRisk, ThreatModeler).
• Experience with the Oracle tech stack, including PeopleSoft, is a plus.
• Familiarity with the MITRE ATT&CK framework and its application to threat modeling.
• Experience conducting threat modeling within DoD or federal agency programs.

Additional Information

• Clearance: Must be a U.S. Citizen with an active Secret security clearance or the ability to obtain one.
• Work Environment: On‑site as required by the contract.
• This is a full‑time, W2 position.
• No agencies, third parties, or Corp‑to‑Corp submissions.
• Spatial Front Inc. is an Equal Opportunity Employer — all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status.
• SFI participates in E‑Verify.