Senior Threat Modeler

Siri InfoSolutions Inc; Irving (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Siri InfoSolutions Inc is seeking a Threat Modeler to join our onsite team in Irving, TX (also Jersey City, NJ and Tampa, FL). You will drive threat modeling using STRIDE/PASTA, build automation, and ensure secure SDLC compliance across projects.

The role emphasizes Python-based development, unit testing with Pytest, and collaboration in an agile DevOps environment. Onsite from day one, the candidate should have 4–6 years of related experience and strong security fundamentals.

Qualifications

• 2–5 years in cybersecurity roles or threat modeling with practical experience.
• Experience in threat modeling methods (STRIDE, PASTA) and attack trees.
• Strong programming skills in Python; proficiency with FastAPI.
• Experience with unit testing using Pytest and SDLC compliance.
• Familiarity with IAM, encryption, auditing, and secure network design.
• Scripting, Infrastructure as Code (Terraform, CloudFormation) and DevOps practices.
• Familiarity with Jira or similar ticketing systems.
• Knowledge of OWASP CWE, secure software development lifecycle, and cloud concepts.
• Ability to design and review secure architectures and threat mitigations.

Responsibilities

• Apply documented threat modeling processes to systems and architectures.
• Develop automation tools and supporting scripts as needed.
• Identify threats, propose mitigations, and track remediation.
• Deliver threat models within project timelines.
• Contribute feedback to improve threat modeling processes.
• Present work to seniors and cross-functional teams.
• Work autonomously to complete security-focused tasks.
• Develop, test, and deploy secure Python-based applications following SDLC.

Skills

Threat Modeling

STRIDE

PASTA

Attack trees

Python

FastAPI

Pytest

SDLC

DevOps

Docker

Kubernetes

CDK

GitOps

Terraform

Jira

CI/CD

OWASP CWE

Tools

Jira

Terraform Cloud

GitHub

Databricks

Snowflake

MongoDB

Kubernetes

CDK

Job description

Position: Threat Modeler

Locations: Irving, TX/Jersey City, NJ/Tampa, FL (Onsite Position from day one)

Duration: Fulltime

Technical skills

Expected to have two to five years of experience in several of the following:

• IT experience minimum of 6 years with minimum of 4 years Cybersecurity/Information Security must have.
• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) must have demonstrated experience.
• Experience working in a cybersecurity role must have.
• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation must have.
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) must have.
• Jira or other ticketing systems must have.
• Design and review technical architectures must have.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (must have).
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (must have).
• Ensure all software platforms adhere to Citi's security standards and Software Development Life Cycle (SDLC) processes (must have).
• Identifying vulnerabilities using CWE or OWASP.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Cloud Development Kit (CDK), GitOps.
• Operating in a DevOps / agile team structure.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Karat Assessment (Python focus) is required for consideration.

Roles & Responsibilities

• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete work
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.