Expert IT Security Specialist / Threat Modelling Expert

Nordea is a Nordic bank and one of the largest IT employers in Tricity and Warsaw. The team is part of Group Technology, focused on engineering solutions that support Nordea's transformation by providing a holistic technological view and structured understanding for enabling the Customer Vision and Business Strategy. The Threat Modelling capability aims to protect and de-risk the bank by adopting innovative approaches to address the evolving threat landscape.

• Excellent written and spoken communication skills
• Proven ability to develop project plans incorporating AI solutions
• Experience as a Security Champion in SDLC Development
• Strong willingness to learn and ability to translate technical requirements to business
• Ability to converse with customers to gather feedback and establish objectives
• Proven ability to design and implement automation solutions
• Experience with threat modelling methodologies/frameworks such as STRIDE, MITRE ATLAS, OWASP Top 10, MITRE ATT&CK™
• 3-5+ years of experience in Threat Modelling
• Hands-on experience with AI-driven tools
• Experience with enterprise-level threat modelling techniques and processes
• Ability to interpret networking, data flow, and architectural diagrams for threat vectors
• Detailed knowledge of cyber threats, threat actors, and their tactics, techniques, and procedures
• Understanding of networking technologies
• Hands-on experience with tools supporting process automation

• Develop and deliver a robust Threat Modelling Program for a customer in the banking sector
• Leverage AI tools to support and enhance threat modelling
• Participate in threat modeling to identify and mitigate risks before code is written
• Translate security requirements into actionable, developer-friendly guidance
• Evaluate current state of customer threat modelling capabilities with stakeholders
• Recommend and develop supporting infrastructure (tools, applications) for threat modelling
• Develop, maintain, update, and enhance secure design patterns and coding standards
• Integrate the current threat modelling process into the Threat Modelling Platform
• Influence the Threat Model product vision and roadmap to build scalable, efficient automation solutions
• Utilize relevant tools and automation experience

The employer includes a data processing consent clause in CVs according to GDPR regulations. Only selected applications will receive replies. The position is not open to hiring Ukrainians. Personal data will be processed by Nordea Bank Abp operating in Poland, with rights to access, rectify, and delete data as per Polish Labour Code requirements.