IT Security Consultant - Threat Modeling Activities

The position is within the Banking industry, focusing on IT Security architecture and threat modeling related to AI threats. The role supports threat modeling activities in application-level security to improve cybersecurity posture.

• Knowledge of IT Security Architecture principles.
• General understanding of security threats related to AI agents, machine learning systems, and large language models.
• Basic knowledge of threat modeling methodologies, particularly STRIDE.
• Ability to support the identification of assets, trust boundaries, attack surfaces, threat actors, and abuse cases under guidance.
• Ability to use and update existing threat models and threat libraries.
• Ability to support the mapping of threats to predefined security controls and remediation actions.

Nice to Have:

• Ability to support the translation of technical threats into understandable business risks under guidance.
• Basic knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS, with the ability to use these frameworks as references during threat assessments.

• Support threat modeling workshops with application and platform teams.
• Assist in identifying assets, trust boundaries, attack surfaces, threats, and security risks.
• Create and update threat models using the approved tooling, methodology, and provided templates.
• Review solution designs and architecture documentation with support from senior team members.
• Assist in mapping relevant threat scenarios to application components and data flows.
• Document identified threats, risks, assumptions, and proposed mitigation actions.
• Collaborate with development and security teams to collect information and follow up on remediation activities.
• Track identified threats, mitigation actions, and remediation status.