Threat Modeler

Siri InfoSolutions Inc; Irving (TX); On-site; USD 100,000 - 130,000; Full time

Job summary

Siri InfoSolutions Inc. is seeking a Threat Modeler in Irving, TX. This on-site role requires IT experience (10+ years) with at least 4 years in cybersecurity, focusing on threat modeling (STRIDE, PASTA, Attack trees) and tooling.

You will develop automation tools, maintain threat lifecycles, and deliver models within deadlines. Strong Python and FastAPI skills, plus SDLC and security standards, are essential.

Qualifications

• Strong Python programming skills (asynchronous) and FastAPI expertise.
• Unit testing with Pytest to ensure code quality.
• Adherence to Citi-like security standards and SDLC processes.
• Identify vulnerabilities using CWE/OWASP.
• Knowledge of OS hardening and DevOps/Agile practices.
• Familiarity with CDK/GitOps; Docker/K8s/serverless/helm.
• Experience with pen testing support.
• Exposure to cloud tech: Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Karat Assessment (Python focus) required for consideration.

Responsibilities

• Threat Modeling using documented processes (STRIDE, PASTA, Attack trees).
• Develop automation tools as needed.
• Identify threats and specify mitigating controls to high standard.
• Maintain lifecycle of threats and controls.
• Deliver threat models and supporting tasks within deadlines.
• Provide feedback to improve threat modeling processes.
• Present work to seniors, team, and other tech groups.
• Work with minimal supervision to complete tasks.
• Develop, test, and deploy secure Python applications per SDLC.

Skills

Python

FastAPI

Pytest

SDLC

CI/CD

Docker

Kubernetes

DevOps

GitOps

Cloud Dev

GitHub

Databricks

Snowflake

Terraform

Tools

Docker

Kubernetes

Terraform Cloud

GitHub

Databricks

Snowflake

MongoDB

Job description

Section

Details

Job Title

Threat Modeler

Job Type

Full Time

Client Location

Irving, TX

Work Arrangement

On site

Duration

Full Time

Pay Rate / Salary

$100-$130k/yr.

Job Summary

• IT experience minimum of 10 years with minimum of 4 years Cybersecurity/Information Security must have.
• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) must have demonstrated experience.
• Experience working in a cybersecurity role must have.

Key Responsibilities

• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete work
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.

Required Qualifications

• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (must have).
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (must have).
• Ensure all software platforms adhere to Citi's security standards and Software Development Life Cycle (SDLC) processes (must have).
• Identifying vulnerabilities using CWE or OWASP.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Cloud Development Kit (CDK), GitOps.
• Operating in a DevOps / agile team structure.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Karat Assessment (Python focus) is required for consideration.