Senior AI Security Threat Modeling Expert

The role is within the banking industry, focused on risk, security, and compliance.

• Strong knowledge of IT Security Architecture.
• Experience with threat modeling related to AI agents, ML, and LLM.
• Practical experience with methodologies such as STRIDE, attack trees, and kill chains.
• Proficiency in identifying assets, trust boundaries, attack surfaces, and threat actors.
• Experience in developing reusable threat models and libraries.
• Ability to map threats to security controls and remediation actions.

Nice to have:

• Capability to translate technical threats into business risks.
• Familiarity with OWASP LLM Top 10 and MITRE ATLAS frameworks.

• Conduct application-level threat assessments and map Mythos threat scenarios.
• Facilitate threat modeling workshops with application and platform teams.
• Identify assets, trust boundaries, attack surfaces, threats, and associated risks.
• Develop and maintain threat models using approved tools and methodologies.
• Review solution designs and architecture for comprehensive threat coverage.
• Collaborate with development and security teams to define and implement risk mitigation strategies.
• Track and report on identified threats, risks, and remediation status.

• Part time project: 20% per month.
• Office presence: Occasional visits required in Gdańsk, Warsaw, and Łódź.