Senior Threat Modeler & Python Security Engineer (Onsite)

Siri InfoSolutions Inc; Irving (TX); On-site; USD 100,000 - 130,000; Full time

Job summary

Siri InfoSolutions Inc. is seeking a Threat Modeler in Irving, TX. This on-site role requires IT experience (10+ years) with at least 4 years in cybersecurity, focusing on threat modeling (STRIDE, PASTA, Attack trees) and tooling.

You will develop automation tools, maintain threat lifecycles, and deliver models within deadlines. Strong Python and FastAPI skills, plus SDLC and security standards, are essential.

Qualifications

• Strong Python programming skills (asynchronous) and FastAPI expertise.
• Unit testing with Pytest to ensure code quality.
• Adherence to Citi-like security standards and SDLC processes.
• Identify vulnerabilities using CWE/OWASP.
• Knowledge of OS hardening and DevOps/Agile practices.
• Familiarity with CDK/GitOps; Docker/K8s/serverless/helm.
• Experience with pen testing support.
• Exposure to cloud tech: Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Karat Assessment (Python focus) required for consideration.

Responsibilities

• Threat Modeling using documented processes (STRIDE, PASTA, Attack trees).
• Develop automation tools as needed.
• Identify threats and specify mitigating controls to high standard.
• Maintain lifecycle of threats and controls.
• Deliver threat models and supporting tasks within deadlines.
• Provide feedback to improve threat modeling processes.
• Present work to seniors, team, and other tech groups.
• Work with minimal supervision to complete tasks.
• Develop, test, and deploy secure Python applications per SDLC.

Skills

Python

FastAPI

Pytest

SDLC

CI/CD

Docker

Kubernetes

DevOps

GitOps

Cloud Dev

GitHub

Databricks

Snowflake

Terraform

Tools

Docker

Kubernetes

Terraform Cloud

GitHub

Databricks

Snowflake

MongoDB

Job description

Siri InfoSolutions Inc. is seeking a Threat Modeler in Irving, TX. This on-site role requires IT experience (10+ years) with at least 4 years in cybersecurity, focusing on threat modeling (STRIDE, PASTA, Attack trees) and tooling.

You will develop automation tools, maintain threat lifecycles, and deliver models within deadlines. Strong Python and FastAPI skills, plus SDLC and security standards, are essential.