Senior Engineer -- Threat Modeling

Synergy Interactive

United States

Remote

USD 140,000 - 160,000

Full time

14 days+

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Competitive salary range

Opportunities for professional growth

Job summary

A leading technology and consulting firm is seeking a Senior Engineer - Threat Modeling to enhance security processes and practices. This role requires expertise in GCP, various threat modeling methodologies, and the ability to work collaboratively in a cross-functional team to identify potential security threats. The ideal applicant will have at least 8 years of relevant experience, with a focus on security architecture and proactive learning. Join a dynamic environment where innovation in financial services is at the forefront.

Qualifications

8+ years of experience in related fields.
Strong knowledge of security principles and frameworks.
Experience with vulnerability identification and remediation.

Responsibilities

Conduct threat modeling exercises using MITRE ATT&CK and STRIDE.
Identify and mitigate potential security threats effectively.
Communicate findings to senior leadership and stakeholders.

Skills

Proficiency in GCP

Security architecture knowledge

Threat modeling methodologies

Cybersecurity experience

API Knowledge

Scripting/Automation

Technical architecture

Analytical skills

Strong communication skills

Tools

Terraform

CloudFormation

Jira

Job description

5 days ago Be among the first 25 applicants

This range is provided by Synergy Interactive. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$140,000.00/yr - $160,000.00/yr

About the Role

We are seeking a talented Senior Engineer - Threat Modeling to join our dynamic, cross‑functional team. In this role, you will be focused on Security Architecture and Threat Modeling, collaborating with engineering, information security, and development teams to deliver digital business transformation solutions for our clients. Your expertise will be crucial in evaluating public cloud services, conducting security reviews, and pinpointing security opportunities in cloud architectures. You will play a key role in identifying potential threats, recommending mitigation strategies, and continuously improving our security processes.

Your Impact

Conduct in-depth threat modeling exercises using established methodologies (e.g., MITRE ATT&CK, STRIDE, PASTA).
Maintain a high standard of excellence in identifying and mitigating potential security threats.
Manage the lifecycle of identified threats and associated controls, ensuring regular updates and improvements.
Deliver comprehensive threat models and related deliverables within established timeframes.
Offer constructive feedback on existing threat modeling processes and propose improvements.
Present findings and progress updates to senior leadership and relevant technical stakeholders.

Qualifications

We’re looking for someone with 8+ years of experience in the following areas:

Proficiency in GCP (essential).
Security architecture: Strong knowledge of security principles, frameworks, and best practices.
Threat modeling methodologies: Experience with MITRE ATT&CK, STRIDE, PASTA, etc.
Cybersecurity experience: 5+ years of practical experience.
Security practices: Experience in authentication, authorization, logging/monitoring, encryption, infrastructure security, and network segmentation.
API Knowledge: Strong understanding of Rest API security.
Scripting/Automation: Familiar with Terraform, CloudFormation, and Infrastructure as Code.
Collaboration tools: Proficiency in Jira or other ticketing systems.
Technical architecture: Strong skills in designing and reviewing security architecture.
Vulnerability Identification: Experience using CWE, OWASP to identify and remediate security risks.
Operating systems: In-depth knowledge of hardening techniques.
Development and DevOps: Understanding of SDLC, CICD pipelines, and DevOps practices.
Penetration Testing: Familiarity with penetration testing methods is an added advantage.
Cloud Platforms: Hands‑on experience with Snowflake, MongoDB, Terraform Cloud, GitHub, Databricks.
Analytical skills: Strong attention to detail and critical thinking ability.
Research Skills: Comfortable with vendor documentation and research for security solutions.
Documentation: Experience in creating high‑quality technical documentation.
Adversary Mindset: Ability to think from an attacker’s perspective to find weaknesses.
Continuous Learning: A proactive attitude towards learning new technologies and security methodologies.
Collaboration: Excellent communication skills and the ability to work across teams.

Set Yourself Apart With

Professional Security Certifications: CISSP, CCSP, CISA, CISM, ITIL.
GCP Certifications: GCP Professional Cloud Architect, GCP Professional Cloud Security Engineer are highly desirable.
Industry Standards Knowledge: Familiarity with ISO, NIST, CSA, and cloud security standards.
Hands‑on Cloud Security Design: Experience with security design on GCP or similar cloud platforms.
Regulated Environments: Experience working in highly regulated industries.
Other Cloud Providers: Experience with AWS, Azure, or similar CSPs.
Development Experience: Familiarity with Python or Node.js.
Agile/DevOps/SecOps: Exposure to agile development and scrum practices.
Strong Desire to Learn: A passion for continuous improvement and contributing to team solutions.