Senior Threat Modeler

Veriipro; Irving (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Veriipro is seeking a cybersecurity-focused engineer to advance threat modeling and secure Python-based applications. You will design and review security architectures, implement automation, and contribute to SDLC governance. You will operate within an agile DevOps team and collaborate across engineering domains.

Ideal candidates have strong Python skills (async), FastAPI experience, and hands-on CI/CD, containers, and cloud infrastructure. Join a fast-growing security-centric team in Irving, TX.

Qualifications

• Minimum 5+ years in IT with cybersecurity focus; must have security experience.
• Threat modeling experience with documented process and tooling.
• Strong Python programming skills including asynchronous patterns.
• Experience with FastAPI and unit testing using Pytest.
• Knowledge of SDLC, security standards, and secure coding practices.
• Familiarity with CI/CD pipelines and DevOps practices.
• Experience with containerization (Docker) and orchestration (Kubernetes).
• Hands-on with cloud IaC (Terraform, CloudFormation) and related tooling.
• Proficient with security controls: authentication, logging, encryption, network security.
• Familiarity with CWE/OWASP vulnerability identification and remediation.
• Experience in architecture design and security reviews.
• Jira or equivalent ticketing systems experience.

Responsibilities

• Perform threat modeling using documented methodology.
• Develop automation tools to support security tasks.
• Maintain high standards in threat identification and mitigating controls.
• Oversee lifecycle of threats and controls from discovery to remediation.
• Deliver threat models and related work within project timelines.
• Provide feedback to improve threat modeling processes.
• Present work to seniors and technical teams.
• Work with minimal supervision to complete security tasks.
• Develop and deploy secure Python-based applications within SDLC guidelines.

Skills

Threat Modeling

Python (Async)

FastAPI

Unit Testing

SDLC & SDLC adherence

DevOps / Agile

CICD

Kubernetes/Docker

Terraform/CloudFormation

Security Architecture

OWASP/CWE

Jira

Tools

Terraform

CloudFormation

CDK

Job description

Technical skills

• Expected to have two to five years of experience in several of the following:
• IT experience minimum of 6 years with minimum of 4 years Cybersecurity/Information Security – must have.
• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) – must have demonstrated experience.
• Experience working in a cybersecurity role – must have.
• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation – must have.
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) – must have.
• Jira or other ticketing systems – must have.
• Design and review technical architectures – must have.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (must have).
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (must have).
• Ensure all software platforms adhere to Citi's security standards and Software Development Life Cycle (SDLC) processes (must have).
• Identifying vulnerabilities using CWE or OWASP.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Cloud Development Kit (CDK), GitOps.
• Operating in a DevOps / agile team structure.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Karat Assessment (Python focus) is required for consideration.

Roles & Responsibilities

• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete work.
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.