Hybrid Emerging Tech Risk & Threat Analyst

SMBC Group; Charlotte (NC); Hybrid; USD 110,000 - 160,000; Full time

Job summary

SMBC Group is hiring an Associate in the Cyber Resilience team to identify and assess cyber, technology and operational risks from emerging technologies. You will support threat modeling across applications, cloud services, and third-party platforms, documenting risk findings for technical and non-technical audiences.

In a hybrid Americas Division setting, you will collaborate with architecture, security, risk, and business stakeholders to map risks to NIST/ISO/OWASP frameworks and prepare

Qualifications

• 2+ years of experience in cybersecurity, technology risk, information security, operational resilience, audit, or a related technology control function.
• Foundational understanding of cybersecurity risk concepts, including threats, vulnerabilities, controls, attack surfaces, and residual risk.
• Working knowledge of threat modeling concepts, secure design principles, SDLC practices, cloud services, APIs, IAM, and enterprise tech environments.
• Familiarity with AI/LLM risk areas, automation, data protection, third-party platforms, and cloud-based services.
• Ability to analyze technical information, identify risk patterns, and document findings clearly for technical and non-technical audiences.
• Strong written communication skills and ability to summarize risks for stakeholders.
• Experience with industry frameworks like NIST, ISO, OWASP, MITRE, or similar control frameworks.
• BA/BS in relevant field; security certifications are a plus but not required.

Responsibilities

• Support threat modeling and emerging technology risk assessments across applications, platforms, and third-party tech solutions.
• Analyze AI/LLM use cases, automation, cloud services, APIs, data integrations, and security tooling to identify risk themes.
• Document assets, data flows, trust boundaries, dependencies, threat agents, attack paths, and controls coverage.
• Support risk analysis for AI/LLM scenarios, including prompt injection, data leakage, and third-party dependencies.
• Maintain threat modeling evidence, assessment workpapers, and reporting artifacts in approved repositories.
• Collaborate with architecture, security, risk, and business stakeholders to validate findings and information.
• Map risks and controls to frameworks like NIST, ISO, OWASP, MITRE, and internal taxonomies.
• Prepare concise reports and dashboards communicating scope, risks, and actions.
• Track remediation actions and enhancement opportunities from threat modeling reviews.
• Monitor emerging cyber risk trends in AI, cloud, APIs, and supply chains.

Skills

Cybersecurity risk concepts

Threat modeling

Technical writing

SDLC and cloud services

Stakeholder communication

Analytical thinking

Education

BA/BS in Cybersecurity, CS, IT, or equivalent

Tools

GRC platforms

Threat modeling tools

Diagramming tools

Vulnerability management tools

Job description

SMBC Group is hiring an Associate in the Cyber Resilience team to identify and assess cyber, technology and operational risks from emerging technologies. You will support threat modeling across applications, cloud services, and third-party platforms, documenting risk findings for technical and non-technical audiences.

In a hybrid Americas Division setting, you will collaborate with architecture, security, risk, and business stakeholders to map risks to NIST/ISO/OWASP frameworks and prepare