Senior Threat Modeler

Responsibilities

• Perform threat modeling using documented processes such as STRIDE and PASTA
• Develop, test, and deploy secure Python-based automation tools and applications
• Identify threats and specify mitigating controls while managing their lifecycle
• Design and review technical architectures to ensure security compliance
• Provide feedback and improvements to existing threat modeling processes
• Supervise and train junior team members and present work to senior stakeholders
• Adhere to established SDLC processes and quality standards using Pytest for unit testing

Requirements

• Minimum of 10 years of IT experience with at least 4 years in Cyber-Security
• Proven expertise in Threat Modeling (STRIDE, PASTA, Attack trees)
• Strong proficiency in Python (asynchronous programming) and FastAPI
• Experience with Infrastructure as Code (Terraform, CloudFormation) and GitOps
• Deep understanding of Docker, Kubernetes, Serverless, and Helm
• Professional-level cloud certification (AWS, GCP, or Azure)
• Vendor-specific cloud security certification (e.g., AWS Security Specialty, Azure Security Engineer)
• Professional cyber-security certification (e.g., CISSP, CISM, or GIAC)
• Bachelor's degree in a computer-related field or equivalent work experience

About the Company

Deloitte is a leading global provider of audit and assurance, consulting, financial advisory, risk advisory, tax, and legal services.