Threat Modeler

VOLTO Consulting; Tampa (FL); On-site; USD 120,000 - 190,000; Full time

Job summary

VOLTO Consulting seeks a Senior Threat Modeler to join our security-focused teams in the Tampa area with flexibility across Irving, TX and Jersey City, NJ. You will lead threat modeling efforts, design secure architectures, and implement automation within a DevOps framework.

Expertise in Python, FastAPI, and modern cloud tooling is essential. You will drive threat modeling processes, oversee security controls, and collaborate with cross-functional teams to strengthen SDLC practices.

Qualifications

• Minimum 6 years IT experience with at least 4 years in cybersecurity.
• Threat modeling experience using STRIDE, PASTA, ATT&CK techniques.
• Security practices covering authentication, authorization, logging, encryption and network security.
• Scripting and IaC skills with Terraform or CloudFormation.
• Jira or equivalent ticketing system experience.
• Design and review of technical architectures with a security focus.
• Strong Python programming including asynchronous code and FastAPI.
• Unit testing with Pytest to ensure code quality.
• Familiarity with SDLC and secure development practices.
• Knowledge of CWE/OWASP vulnerabilities and mitigation.

Responsibilities

• Threat modeling using a documented process and framework.
• Develop automation tools as needed to support threat modeling.
• Maintain high standards for threat identification and mitigating controls.
• Manage lifecycle of identified threats and controls.
• Deliver threat models and related tasks within deadlines.
• Provide feedback to improve the threat modeling process.
• Present work to seniors, the team and other technical teams.
• Work with little supervision to complete assignments.
• Develop, test, and deploy secure Python-based applications aligned with SDLC.

Skills

Threat modeling

Python

FastAPI

Unit testing

CI/CD / SDLC

Docker / Kubernetes

Security best practices

IaC (Terraform, CloudFormation)

DevOps / Agile

OWASP / CWE awareness

Tools

Terraform

CloudFormation

Docker

Kubernetes

CDK

GitHub

Databricks

Snowflake

Terraform Cloud

Job description

Senior Threat Modeler

Irving, TX/Jersey City, NJ/Tampa, FL

Full-time

Job Description

Must Have Technical/Functional Skills

Technical skills

• IT experience minimum of 6 years with minimum of 4 years Cybersecurity/Information Security must have.
• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) must have demonstrated experience.
• Experience working in a cybersecurity role must have.
• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation must have.
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) must have.
• Jira or other ticketing systems must have.
• Design and review technical architectures must have.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (must have).
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (must have).
• Ensure all software platforms adhere to Citi's security standards and Software Development Life Cycle (SDLC) processes (must have).
• Identifying vulnerabilities using CWE or OWASP.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Cloud Development Kit (CDK), GitOps.
• Operating in a DevOps / agile team structure.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Karat Assessment (Python focus) is required for consideration.

Roles & Responsibilities

• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete work
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.