Remote Threat Modeling Security Engineer

Apex Systems; Minneapolis (MN); Remote; USD 110,000 - 160,000; Full time

Benefits offered by this job

ESPP

401K with match

HSA

EAP

Certification discounts

On-demand training

Career coaching

Job summary

Everforth Apex is seeking a Cyber Security Engineer focused on threat modeling to strengthen critical architectures in a remote role. You will work with application teams to identify risks and implement robust mitigations, impacting the security posture of a regulated environment.

The position also supports coordinating penetration testing efforts as needed. Ideal candidates have threat modeling experience, familiarity with PASTA/STRIDE+P, and knowledge of the MITRE ATT&CK framework.

Qualifications

• Bachelor’s Degree preferred; relevant security certifications are a plus.
• Experience in threat modeling, application security assessment, or systems architecture is required.
• Proficiency with PASTA and STRIDE+P threat modeling, plus MITRE ATT&CK knowledge.

Responsibilities

• Perform comprehensive threat modeling using specialized tools.
• Review architectures with application teams to identify risks.
• Provide prioritized, actionable mitigation strategies for identified threats.
• Support coordination of penetration testing activities during periods of lower threat modeling demand.
• Explain complex threat modeling methodologies and outputs clearly to diverse technical teams.

Skills

Threat modeling

Analytical thinking

Collaboration with development teams

Education

Bachelor's Degree

Tools

PASTA

STRIDE+P

MITRE ATT&CK

Job description

Everforth Apex is seeking a Cyber Security Engineer focused on threat modeling to strengthen critical architectures in a remote role. You will work with application teams to identify risks and implement robust mitigations, impacting the security posture of a regulated environment.

The position also supports coordinating penetration testing efforts as needed. Ideal candidates have threat modeling experience, familiarity with PASTA/STRIDE+P, and knowledge of the MITRE ATT&CK framework.