Threat Modeler (1 Senior, 1 Standard)

Tata Consultancy Services; Irving (TX); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Discretionary annual incentive

Comprehensive medical coverage

Maternal & parental leaves

401K plan

Training reimbursement

Vacation & holidays

Job summary

Tata Consultancy Services in Irving, TX seeks a cybersecurity specialist with 6+ years IT, including 4+ years in security, to design and implement secure Python-based applications within established SDLCs.

The role emphasizes threat modeling (STRIDE/PASTA), automation tools, and secure architectures. You will work in a DevOps environment using FastAPI, Pytest, Terraform, and Kubernetes, with a focus on security controls.

Qualifications

• Bachelor of Computer Science degree required.
• IT experience minimum of 6 years with minimum of 4 years Cybersecurity/Information Security – must have.
• Threat Modeling experience with STRIDE/PASTA/Attack trees and tooling.
• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security.
• Scripting languages and Infrastructure as Code (Terraform, CloudFormation) – must have.
• Jira or other ticketing systems – must have.
• Design and review technical architectures – must have.
• Strong proficiency in Python and FastAPI (must have).
• Unit testing with Pytest to ensure code quality (must have).
• Adherence to Citi SDLC security standards (must have).
• Identifying vulnerabilities using CWE or OWASP.
• Knowledge of OS hardening and DevOps/SDLC concepts.
• Experience with CDK, GitOps, and serverless.

Responsibilities

• Threat Modeling using a documented process.
• Develop automation tools as required.
• Maintain high standards for threat identification and mitigations.
• Lifecycle management of identified threats and controls.
• Deliver threat models and supporting tasks within deadlines.
• Provide feedback to improve threat modeling process.
• Present work to seniors and technical teams.
• Work with minimal supervision to complete tasks.
• Develop, test, and deploy secure Python-based applications per SDLC.

Skills

Threat Modeling

Python

FastAPI

Unit Testing (Pytest)

CI/CD

Terraform

CloudFormation

Jira

Architectures review

Security SDLC

CWE/OWASP

DevOps

Docker

Kubernetes

Databricks

Snowflake

GitHub

Terraform Cloud

Education

Bachelor's degree in Computer Science

Tools

Terraform

CloudFormation

Jira

GitHub

Databricks

Snowflake

Kubernetes

Docker

Job description

Job Description

Must Have Technical/Functional Skills

Technical skills

Expected to have two to five years of experience in several of the following:

• IT experience minimum of 6 years with minimum of 4 years Cybersecurity/Information Security – must have.
• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) – must have demonstrated experience.
• Experience working in a cybersecurity role – must have.
• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation – must have.
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) – must have.
• Jira or other ticketing systems – must have.
• Design and review technical architectures – must have.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (must have).
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (must have).
• Ensure all software platforms adhere to Citi's security standards and Software Development Life Cycle (SDLC) processes (must have).
• Identifying vulnerabilities using CWE or OWASP.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Cloud Development Kit (CDK), GitOps.
• Operating in a DevOps / agile team structure.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Karat Assessment (Python focus) is required for consideration.

Roles & Responsibilities

• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete work
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Salary Range: $100,000 – 130,000 a year

Qualifications: BACHELOR OF COMPUTER SCIENCE