Senior Engineer -- Threat Modeling

5 days ago Be among the first 25 applicants This range is provided by Synergy Interactive. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more. Base pay range $140,000.00/yr - $160,000.00/yr About the Role We are seeking a talented Senior Engineer - Threat Modeling to join our dynamic, cross‑functional team. In this role, you will be focused on Security Architecture and Threat Modeling, collaborating with engineering, information security, and development teams to deliver digital business transformation solutions for our clients. Your expertise will be crucial in evaluating public cloud services, conducting security reviews, and pinpointing security opportunities in cloud architectures. You will play a key role in identifying potential threats, recommending mitigation strategies, and continuously improving our security processes. Your Impact Conduct in-depth threat modeling exercises using established methodologies (e.g., MITRE ATT&CK, STRIDE, PASTA). Maintain a high standard of excellence in identifying and mitigating potential security threats. Manage the lifecycle of identified threats and associated controls, ensuring regular updates and improvements. Deliver comprehensive threat models and related deliverables within established timeframes. Offer constructive feedback on existing threat modeling processes and propose improvements. Present findings and progress updates to senior leadership and relevant technical stakeholders. Qualifications We’re looking for someone with 8+ years of experience in the following areas: Proficiency in GCP (essential). Security architecture : Strong knowledge of security principles, frameworks, and best practices. Threat modeling methodologies : Experience with MITRE ATT&CK, STRIDE, PASTA, etc. Cybersecurity experience : 5+ years of practical experience. Security practices : Experience in authentication, authorization, logging/monitoring, encryption, infrastructure security, and network segmentation. API Knowledge : Strong understanding of Rest API security. Scripting/Automation : Familiar with Terraform, CloudFormation, and Infrastructure as Code. Collaboration tools : Proficiency in Jira or other ticketing systems. Technical architecture : Strong skills in designing and reviewing security architecture. Vulnerability Identification : Experience using CWE, OWASP to identify and remediate security risks. Operating systems : In-depth knowledge of hardening techniques. Development and DevOps : Understanding of SDLC, CICD pipelines, and DevOps practices. Penetration Testing : Familiarity with penetration testing methods is an added advantage. Cloud Platforms : Hands‑on experience with Snowflake, MongoDB, Terraform Cloud, GitHub, Databricks. Analytical skills : Strong attention to detail and critical thinking ability. Research Skills : Comfortable with vendor documentation and research for security solutions. Documentation : Experience in creating high‑quality technical documentation. Adversary Mindset : Ability to think from an attacker’s perspective to find weaknesses. Continuous Learning : A proactive attitude towards learning new technologies and security methodologies. Collaboration : Excellent communication skills and the ability to work across teams. Set Yourself Apart With Professional Security Certifications : CISSP, CCSP, CISA, CISM, ITIL. GCP Certifications : GCP Professional Cloud Architect, GCP Professional Cloud Security Engineer are highly desirable. Industry Standards Knowledge : Familiarity with ISO, NIST, CSA, and cloud security standards. Hands‑on Cloud Security Design : Experience with security design on GCP or similar cloud platforms. Regulated Environments : Experience working in highly regulated industries. Other Cloud Providers : Experience with AWS, Azure, or similar CSPs. Development Experience : Familiarity with Python or Node.js. Agile/DevOps/SecOps : Exposure to agile development and scrum practices. Strong Desire to Learn : A passion for continuous improvement and contributing to team solutions. Seniority level Mid‑Senior level Employment type Full‑time Job function Engineering and Analyst Industries Financial Services, IT Services and IT Consulting, and Business Consulting and Services Referrals increase your chances of interviewing at Synergy Interactive by 2x Get notified about new Senior Software Engineer jobs in New York City Metropolitan Area . #J-18808-Ljbffr Synergy Interactive