Senior Threat Modeler: Cloud & App Security Architect

State Street; Austin (TX); Hybrid; USD 120,000 - 202,500; Full time

Benefits offered by this job

401K matching

Health insurance

Paid time off

Job summary

State Street is seeking a Senior Threat Modeler to drive threat modeling across enterprise applications, cloud platforms, APIs, and emerging technologies. You will identify security risks early in the development lifecycle and collaborate with architects, engineers, and cybersecurity teams to secure designs.

You will leverage STRIDE, MITRE ATT&CK, attack trees, and risk-based analysis, contributing to standards and training across the enterprise while ensuring security controls in AWS, Azure,

Qualifications

• 12+ years in security fields such as application security, cloud security or threat modeling.
• 7+ years hands-on cybersecurity experience preferred.
• Experience conducting threat modeling for enterprise apps, APIs and cloud platforms.
• Professional certifications such as CISSP, CCSP, CSSLP, GWAPT, GWEB, AWS Security Specialty, or Azure Security Engineer are desirable.
• Experience with OWASP Top 10 and secure software development lifecycle.

Responsibilities

• Conduct threat modeling activities for business applications, cloud-native platforms, APIs, and strategic initiatives.
• Analyze architectures, data flows, trust boundaries, and cloud deployments to identify threats.
• Partner with development, cloud engineering, and security teams to implement risk mitigations.
• Perform security assessments using STRIDE, MITRE ATT&CK, attack trees, and risk-based analysis.
• Contribute to threat modeling standards, reusable patterns, and secure-by-design practices.
• Demonstrate knowledge of AWS, Azure, and Google Cloud security controls in distributed environments.

Skills

Threat modeling

Application security

Cloud security

Secure SDLC

OWASP Top 10

Stakeholder management

Education

Bachelor's degree in Computer Science, Cybersecurity, or related

Tools

Kubernetes

CI/CD pipelines

AWS/Azure/GCP

Job description

State Street is seeking a Senior Threat Modeler to drive threat modeling across enterprise applications, cloud platforms, APIs, and emerging technologies. You will identify security risks early in the development lifecycle and collaborate with architects, engineers, and cybersecurity teams to secure designs.

You will leverage STRIDE, MITRE ATT&CK, attack trees, and risk-based analysis, contributing to standards and training across the enterprise while ensuring security controls in AWS, Azure,