Engineer 5

Motion Recruitment; Charlotte (NC); Hybrid; USD 180,000 - 260,000; Full time

Job summary

Motion Recruitment is seeking a Principal Security Engineer - Threat Modeling Automation Lead for a 12+ month contract in a hybrid setup. The role targets hands-on security engineering, threat modeling, and AI/LLM-enabled automation across an enterprise portfolio.

You will set technical direction, develop reusable threat patterns, and lead the integration of threat modeling with CI/CD, GitHub, Jira, and cloud platforms while guiding across multiple sites, including Charlotte, NC.

Qualifications

• 7+ years of engineering experience, including Application Security Engineering.
• 2+ years of hands-on threat modeling experience on complex architectures.
• Experience building AI/LLM-enabled security solutions for enterprise environments.
• Strong automation and software engineering or scripting experience.
• Ability to analyze architectures, data flows, trust boundaries, APIs, and security risks.
• Experience partnering with software engineering, cloud, and platform teams.
• Hands-on threat modeling practitioner with principal-level technical leadership.

Responsibilities

• Serve as the principal technical authority for threat modeling methodology, tooling, automation, and quality.
• Conduct approximately one complex or high-risk threat model per sprint with practical mitigations.
• Build reusable threat patterns, architecture templates, control mappings, and playbooks.
• Design production-grade automation and AI/LLM-assisted capabilities to improve throughput, consistency, and quality.
• Advance Threat Modeling as Code, automated diagram generation, threat selection, and ongoing model maintenance.
• Integrate threat modeling with GitHub, Jira, CI/CD pipelines, inventories, repositories, and security platforms.
• Develop mechanisms for Continuous Threat Modeling based on changes in architecture, code, configuration, and dependencies.
• Define quality and productivity metrics while mentoring security practitioners, architects, and Security Champions.

Skills

Threat modeling

Security engineering

Automation

Hands-on coding

Architectural analysis

Mentoring

Cross-team collaboration

Tools

SAST

SCA

DAST

IaC scanning

Container security

API testing

Software supply chain

Job description

Join our team as a Principal Security Engineer - Threat Modeling Automation Lead on a 12+ month contract. This hybrid role requires three days onsite and combines hands-on application security, threat modeling, AI/LLM-enabled automation, and security engineering at enterprise scale. This role can sit in Charlotte, NC, Irving, TX, Minneapolis, MN, Chandler, AZ or Columbus, OH (hybrid, 3 days on-site).

This is a senior individual-contributor role for an engineer who wants to stay hands-on while setting the technical direction for threat modeling. You’ll tackle complex threat models, build automation that improves delivery at scale, and help advance Continuous Threat Modeling across a large application portfolio.

Contract Duration:

12+ months

Required Skills & Experience

• 7+ years of engineering experience, including 7+ years in Application Security Engineering.
• 2+ years of hands-on threat modeling experience, including complex application and platform architectures.
• Experience building AI/LLM-enabled Application Security solutions for enterprise production environments.
• Strong automation and software engineering or scripting experience.
• Ability to analyze architectures, data flows, trust boundaries, APIs, controls, and security risks.
• Experience partnering with software engineering, architecture, cloud, and platform teams.
• Ability to remain a hands-on threat modeling practitioner while providing principal-level technical leadership.

Desired Skills & Experience

• Deep knowledge of secure application architecture, STRIDE or similar threat modeling methodologies, OWASP risks, API security, authentication, authorization, cryptography, and data protection.
• Programming experience with technologies such as Java, .NET, Python, JavaScript/TypeScript, Node.js, or Go.
• Cloud and platform security experience across Azure, AWS, or GCP, including CI/CD and modern distributed or microservices architectures.
• Experience with security tooling such as SAST, SCA, DAST, IaC scanning, container security, API testing, or software supply chain controls.
• Knowledge of AI/LLM security risks, guardrails, data protection, model or agent trust boundaries, evaluation, and human review.
• Experience defining reusable security standards, patterns, playbooks, reference architectures, or controls.
• CISSP, CSSLP, CCSP, GIAC GWEB, GIAC GWAPT, or comparable security certification preferred.

What You Will Be Doing

• Serve as the principal technical authority for threat modeling methodology, tooling, automation, and quality.
• Conduct approximately one complex or high-risk threat model per sprint and recommend practical mitigations.
• Build reusable threat patterns, architecture templates, control mappings, reference architectures, and playbooks.
• Design production-grade automation and AI/LLM-assisted capabilities that improve threat modeling throughput, consistency, and quality.
• Advance Threat Modeling as Code, automated diagram generation, threat selection, and ongoing model maintenance.
• Integrate threat modeling with GitHub, Jira, CI/CD pipelines, application inventories, architecture repositories, and security platforms.
• Develop mechanisms for Continuous Threat Modeling based on architecture, code, configuration, and dependency changes.
• Define quality and productivity metrics while mentoring security practitioners, architects, and Security Champions.

Posted By: Natalie DeWitt