V

Senior Threat Modeler & Secure Software Engineer

Veridian Tech Solutions, Inc. • United State
Visa Sponsorship
Apply
AI Summary

Lead threat modeling efforts using STRIDE, PASTA, and Attack trees to identify vulnerabilities in software architectures. Develop secure Python applications with FastAPI while ensuring compliance with Citi’s security standards and SDLC processes. Collaborate in a DevOps/agile environment to automate security workflows and improve threat mitigation strategies.

Key Highlights
8+ years of IT experience with 4+ years in Cybersecurity/Information Security
Must-have expertise in threat modeling (STRIDE, PASTA, Attack trees) and secure software development
Full-time role with visa sponsorship for GC & USC candidates
Key Responsibilities
Conduct threat modeling using documented processes (STRIDE, PASTA, Attack trees) to identify security risks and propose mitigating controls
Develop and deploy secure Python-based applications using FastAPI, adhering to SDLC processes and Citi’s security standards
Automate threat modeling and security workflows, maintaining high standards for vulnerability identification and control specification
Technical Skills Required
Python Threat Modeling (STRIDE, PASTA, Attack Trees) FastAPI
Nice to Have
Operating systems hardening
Penetration testing support
Experience with Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks

Job Description


Position : Threat Modeler

Location: Irving, TX/Jersey City, NJ/Tampa, FL- Onsite

Exp: 8+ years

Visa: GC & USC

Job Type: Fulltime


Note: We have planned a virtual drive for the below requirements on Wednesday (Aug 26th).

 

Candidates must be ready to take an Online Coding test if they get shortlisted in the 1st round.


Job Description

Must Have Technical/Functional Skills

Expected to have two to five years of experience in several of the following:

  • IT experience minimum of 6 years with minimum of 4 years Cybersecurity/Information Security – must have.
  • Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) – must have demonstrated experience.
  • Experience working in a cybersecurity role – must have.
  • Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation – must have.
  • Scripting languages, Infrastructure as Code (Terraform, CloudFormation) – must have.
  • Jira or other ticketing systems – must have.
  • Design and review technical architectures – must have.
  • Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (must have).
  • Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (must have).
  • Ensure all software platforms adhere to Citi's security standards and Software Development Life Cycle (SDLC) processes (must have).
  • Identifying vulnerabilities using CWE or OWASP.
  • Operating systems and their hardening.
  • Development concepts (such as: CICD, Pipelines, SDLC).
  • Cloud Development Kit (CDK), GitOps.
  • Operating in a DevOps / agile team structure.
  • Understanding of docker/K8S/serverless/helm.
  • Support or perform pen testing.
  • Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
  • Karat Assessment (Python focus) is required for consideration.


Roles & Responsibilities

  • Threat Modeling using a documented process. 
  • Development of automation tools as required. 
  • Maintain a high standard of work in identifying threats and specifying mitigating controls. 
  • Attending to the lifecycle of identified threats and controls. 
  • Delivery of threat models and supporting tasks within existing timeframes. 
  • Provide feedback, support, and improvements to the existing threat modeling process. 
  • Present work to seniors, the team, and other technical teams. 
  • Work with little supervision to complete work 
  • Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.

 

Thanks & Regards

 

Ranjan Kumar Mallik || Sr. Technical Recruiter

Veridian Tech Solutions, Inc

Certified by WOSB, WBENC, HUB

832 737 0509

ranjan@veridiants.com

www.veridiants.com

11931 Wick Chester Lane Suite 150

Houston, TX, 77043


Similar Jobs

Explore other opportunities that match your interests

Senior Cloud Security Software Engineer (Golang, AI-Augmented Development)

Devops
•
2h ago

Premium Job

Sign up is free! Login or Sign up to view full details.

•••••• •••••• ••••••
Job Type ••••••
Experience Level ••••••

Palo Alto Networks

United State
Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Mid-Senior level

carnaby fox

United State
Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Not Applicable

inferact

United State

Subscribe our newsletter

New Things Will Always Update Regularly