Senior Threat Modeler

Responsibilities

• Perform threat modeling using documented processes such as STRIDE or PASTA
• Develop, test, and deploy secure Python-based automation tools and applications
• Identify threats and specify mitigating controls while managing their lifecycle
• Design and review technical architectures within a DevOps/Agile environment
• Provide feedback and improvements to existing threat modeling processes
• Supervise and train junior team members and present work to technical stakeholders
• Ensure all software platforms adhere to security standards and SDLC processes

Requirements

• Minimum of 10 years of IT experience with at least 4 years in Cyber-Security
• Proven expertise in Threat Modeling (STRIDE, PASTA, Attack trees, or MITRE ATT&CK)
• Strong proficiency in Python (asynchronous programming) and FastAPI
• Experience with Infrastructure as Code (Terraform, CloudFormation) and CI/CD pipelines
• Deep understanding of Docker, Kubernetes (K8s), and Serverless architectures
• Professional-level cloud certification (AWS, GCP, or Azure)
• Professional cyber-security certification (e.g., CISSP, CISM, or equivalent)
• Experience identifying vulnerabilities using CWE or OWASP frameworks

Preferred Qualifications

• Experience with Cloud Development Kit (CDK) and GitOps
• Familiarity with Snowflake, MongoDB, Databricks, or GitHub
• Experience performing or supporting penetration testing
• Background working within highly regulated environments

About the Company

Deloitte is a leading global provider of audit and assurance, consulting, financial advisory, risk advisory, tax, and legal services.