Senior Threat Modeling & Secure Design Architect

STATE STREET CORPORATION; Austin (TX); Hybrid; USD 120,000 - 203,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health benefits

Paid time off and disability coverage

Job summary

STATE STREET CORPORATION is seeking a Senior Threat Modeler to drive threat modeling across enterprise apps, cloud platforms, APIs, and emerging technologies. You will partner with architects, engineers, and cybersecurity teams to build secure-by-design outcomes and strengthen the security posture of critical systems.

You will apply methodologies such as STRIDE and MITRE ATT&CK, assess cloud architectures on AWS, Azure, and Google Cloud, and contribute to standards and training materials across

Qualifications

• 12+ years of experience in application security, cloud security, cybersecurity architecture, threat modeling, or related tech.
• Demonstrated experience conducting threat modeling for enterprise applications, APIs, cloud platforms, and distributed systems.
• Strong expertise in application security principles, secure software development lifecycle, OWASP Top 10, API security, and secure coding practices.
• Experience securing cloud environments across AWS, Azure, and/or Google Cloud.
• Knowledge of microservices, containers, Kubernetes, CI/CD pipelines, DevSecOps practices, and modern software architectures.
• Professional certifications such as CISSP, CCSP, CSSLP, GWAPT, GWEB, AWS Security Specialty, Azure Security Engineer or equivalent are desirable.
• Experience in financial services or other highly regulated industries is preferred.

Responsibilities

• Conduct threat modeling for business applications, cloud-native platforms, APIs, and strategic tech initiatives.
• Analyze architectures, data flows, trust boundaries, and cloud deployments to identify threats and design weaknesses.
• Partner with development, cloud engineering, and security teams to mitigate risks and improve secure design.
• Perform security assessments using STRIDE, MITRE ATT&CK, attack trees, and risk-based analysis.
• Contribute to threat modeling standards, reusable patterns, training materials, and secure-by-design practices.

Skills

Threat modeling

Cloud security

Application security

Security architecture

Stakeholder management

Education

Degree in Computer Science or related field

Tools

STRIDE

MITRE ATT&CK

Kubernetes

Job description

STATE STREET CORPORATION is seeking a Senior Threat Modeler to drive threat modeling across enterprise apps, cloud platforms, APIs, and emerging technologies. You will partner with architects, engineers, and cybersecurity teams to build secure-by-design outcomes and strengthen the security posture of critical systems.

You will apply methodologies such as STRIDE and MITRE ATT&CK, assess cloud architectures on AWS, Azure, and Google Cloud, and contribute to standards and training materials across