Threat Modeler (1 Senior, 1 Standard)

Job ID: Technical Cybersecurity Engineer

Responsibilities

• Perform threat modeling using a documented process (STRIDE, PASTA, Attack trees, ATT&CK, tooling).
• Develop automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attend to the lifecycle of identified threats and controls.
• Deliver threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete tasks.
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.
• Ensure all software platforms adhere to Citi's security standards and SDLC processes.
• Identify vulnerabilities using CWE or OWASP.

Requirements

• Minimum 6 years of IT experience, with at least 4 years in Cybersecurity/Information Security (must have).
• Demonstrated experience in threat modeling (STRIDE, PASTA, Attack trees, tooling, ATT&CK).
• Experience working in a cybersecurity role.
• Knowledge of security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, and network/segmentation.
• Proficiency in scripting languages and Infrastructure as Code (Terraform, CloudFormation).
• Experience with Jira or other ticketing systems.
• Ability to design and review technical architectures.
• Strong proficiency in Python (asynchronous programming) and FastAPI (must have).
• Experience developing and executing unit tests using frameworks like Pytest.
• Understanding of development concepts (CI/CD, pipelines, SDLC).
• Experience with Cloud Development Kit (CDK), GitOps.
• Operating in a DevOps/agile team structure.
• Understanding of Docker, Kubernetes (K8S), serverless, and Helm.
• Experience with Snowflake, MongoDB, Terraform Cloud, GitHub, or Databricks.
• Karat Assessment (Python focus) is required for consideration.

Qualifications

Bachelor of Computer Science or equivalent.

Benefits

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Pay

$100,000 – $130,000 a year