Senior Threat Modeler: Architect Secure Cloud & APIs

State Street; Quincy (CA); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

Hybrid work model

Comprehensive benefits package

Paid time off

Job summary

State Street seeks a Senior Threat Modeler to drive threat modeling across enterprise applications, cloud platforms, APIs, and emerging technologies. You will partner with architects, engineers, developers, and cybersecurity teams to identify risks early in the development lifecycle and promote secure-by-design outcomes.

You will apply STRIDE, MITRE ATT&CK, and risk-based analysis to strengthen defenses across AWS, Azure, and Google Cloud, partnering with security and engineering teams to

Qualifications

• Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
• 12+ years of experience in application security, cloud security, cybersecurity architecture, threat modeling, or related disciplines with at least 7 years hands-on cybersecurity experience.

Responsibilities

• Conduct threat modeling activities for business applications, cloud-native platforms, APIs, and strategic technology initiatives.
• Analyze application architectures, data flows, trust boundaries, and cloud deployments to identify security threats and design weaknesses.
• Partner with development, cloud engineering, and security teams to recommend practical risk mitigation strategies and secure design improvements.
• Perform security assessments using methodologies such as STRIDE, MITRE ATT&CK, attack trees, and risk-based analysis techniques.
• Contribute to threat modeling standards, reusable patterns, training materials, and secure-by-design practices across the enterprise.
• Demonstrate strong knowledge of cloud-native architectures and security controls across AWS, Azure, and Google Cloud.

Skills

Threat Modeling

STRIDE

MITRE ATT&CK

Cloud Security

AWS

Azure

GCP

Secure SDLC

Communication

Stakeholder Management

Education

Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline

Tools

Kubernetes

CI/CD tooling

Threat modeling tools

Job description

State Street seeks a Senior Threat Modeler to drive threat modeling across enterprise applications, cloud platforms, APIs, and emerging technologies. You will partner with architects, engineers, developers, and cybersecurity teams to identify risks early in the development lifecycle and promote secure-by-design outcomes.

You will apply STRIDE, MITRE ATT&CK, and risk-based analysis to strengthen defenses across AWS, Azure, and Google Cloud, partnering with security and engineering teams to