Threat Modeler

Veriipro

Irving (TX)

On-site

USD 100,000 - 130,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Veriipro is looking for an experienced Threat Modeler in Irving, Texas, to identify, assess, and mitigate security risks across applications and systems. The role includes designing threat models and supporting DevOps teams in implementing security best practices.

Qualified candidates should have at least 6 years of IT experience, a strong cybersecurity background, and expertise in various threat modeling frameworks and vulnerability assessment techniques. This position requires collaboration with agile teams to secure CI/CD pipelines and cloud deployments.

Qualifications

Minimum 6 years IT experience, with at least 4 years in Cybersecurity/Information Security.
Familiarity with operating systems hardening and development concepts (SDLC, CI/CD, pipelines).
Exposure to Snowflake, MongoDB, Databricks, Terraform Cloud, GitHub.

Responsibilities

Conduct threat modeling using industry standard frameworks.
Identify vulnerabilities and provide actionable security recommendations.
Collaborate with DevOps and agile teams for secure CI/CD practices.

Skills

Threat modeling frameworks: STRIDE, PASTA, Attack Trees, MITRE ATT&CK

Vulnerability identification: CWE, OWASP

Security knowledge in authentication, authorization, logging/monitoring, encryption

Experience with cloud platforms (AWS, Azure, GCP, Oracle Cloud)

Scripting and Infrastructure as Code (Terraform, CloudFormation)

DevOps/Agile team experience

Understanding of Docker, Kubernetes

Education

Bachelor’s degree in Computer Science, Information Technology

Tools

Terraform

Jira

GitOps

Job description

Role Overview

We are seeking an experienced Threat Modeler to identify, assess, and mitigate security risks across applications, systems, and cloud environments. The role involves designing threat models, reviewing architectures, supporting DevOps teams, and implementing security best practices throughout the software development lifecycle.

Key Responsibilities

Conduct threat modeling using STRIDE, PASTA, attack trees, and MITRE ATT&CK frameworks.
Identify vulnerabilities using CWE, OWASP, and other industry standards.
Review and assess technical architectures, providing actionable security recommendations.
Define and track mitigating controls throughout the threat lifecycle.
Develop automation tools to support threat modeling and security processes.
Collaborate with DevOps and agile teams to ensure secure CI/CD pipelines, cloud deployments, and infrastructure-as-code practices.
Support or perform penetration testing and security validations.
Present threat findings and recommendations to technical teams and senior stakeholders.
Maintain high standards of work with minimal supervision.
Continuously improve threat modeling processes and practices.

Mandatory Technical & Functional Skills

Minimum 6 years IT experience, with at least 4 years in Cybersecurity/Information Security.
Threat modeling frameworks: STRIDE, PASTA, Attack Trees, MITRE ATT&CK.
Vulnerability identification: CWE, OWASP.
Security knowledge in authentication, authorization, logging/monitoring, encryption, network segmentation, and infrastructure security.
Familiarity with operating systems hardening and development concepts (SDLC, CI/CD, pipelines).
Scripting and Infrastructure as Code (Terraform, CloudFormation), CDK, GitOps.
Experience with cloud platforms (AWS, Azure, GCP, Oracle Cloud).
DevOps/Agile team experience and ticketing systems (Jira or equivalent).
Understanding of Docker, Kubernetes, serverless, and Helm.
Exposure to Snowflake, MongoDB, Databricks, Terraform Cloud, GitHub.

Educational & Certification Requirements