Cyber Subject Matter Expert (SME, Threat Modeling)

Spatial Front, Inc. (SFI), a two-time USAToday Top Workplaces awardee and Washington Top Workplaces honoree, is seeking a Cyber SME (Threat Modeling) to support our growing team. The ideal candidate will lead threat modeling activities and provide expert guidance on identifying and mitigating security risks in Federal Government IT systems and applications.

About the role

As a valued member of the SFI team, you will play a critical role in delivering mission-critical capabilities to our Federal Government customers. This is an on-site, full-time, W2 position.

Responsibilities

• Lead and facilitate threat modeling sessions for new and existing systems, applications, and architectures.
• Serve as the Cyber Lead for the App Security Team as needed.
• Apply threat modeling methodologies (e.g., STRIDE, PASTA, LINDDUN) to identify and prioritize security threats.
• Develop threat models, data flow diagrams, and attack trees for complex federal IT systems.
• Collaborate with architects, developers, and security engineers to integrate threat modeling into the SDLC.
• Produce threat model reports with identified threats, risk ratings, and recommended mitigations.
• Develop and deliver threat modeling training and workshops for technical teams.
• Maintain a threat intelligence library and incorporate emerging threats into threat modeling activities.
• Other duties as assigned.

Requirements

• Bachelor's in Computer Science, Cybersecurity, or related field.
• 7 years of cybersecurity experience, including 5 years in threat modeling.
• Experience with tools such as Splunk and New Relic.
• Demonstrated expertise in threat modeling, risk assessment, security architecture, attack vectors, and mitigation strategies.
• Must be a U.S. Citizen.
• Must possess an active Secret security clearance or be able to obtain one.

Qualifications

• CISSP, CSSLP, or equivalent security architecture certification.
• Experience with threat modeling tools (e.g., Microsoft Threat Modeling Tool, IriusRisk, ThreatModeler).
• Experience with the Oracle tech stack, including PeopleSoft, is a plus.
• Familiarity with the MITRE ATT&CK framework and its application to threat modeling.
• Experience conducting threat modeling within DoD or federal agency programs.

Pay

$90,000 – $150,000