587 threat modeler jobs at 343 companies in United States

1mo
Save
Mark Applied
Hide
Threat Modeler
Irving, Texas, United States
$100k-$125k/yr OnsiteFull Time
Tata Consultancy Services
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
6+ YOE6+ years IT experience with 4+ years in cybersecurity; threat modeling (STRIDE, PASTA, ATT&CK); CWE/OWASP vulnerability identification; IaC (Terraform, CloudFormation); CI/CD, Docker/Kubernetes, Jira; architecture design; pen testing experience.
STRIDE, PASTA, ATT&CK, CWE, OWASP, Terraform, CloudFormation, Cloud Development Kit (CDK), GitHub, Jira, Docker, Kubernetes, Helm, Snowflake, MongoDB, Terraform Cloud, Databricks
1mo
Save
Mark Applied
Hide
Senior Threat Modeler
Boston or Berwyn or Princeton or Clifton or Austin or Quincy
$120k-$203k/yr HybridFull Time
State Street
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
12+ YOEPerform threat modeling for applications, APIs and cloud platforms; identify threats, recommend mitigations; strong cloud and application security experience; 12+ years in security disciplines preferred.
STRIDE, MITRE ATT&CK, OWASP Top 10, Kubernetes, CI/CD, AWS, Azure, Google Cloud Platform
1mo
Save
Mark Applied
Hide
Sr. Cloud Threat Modeler
United States
OnsiteFull Time
Deloitte
Deloitte: Provides professional audit, consulting, advisory, and tax services.
6+ YOE6+ years in container engineering and large-scale OpenShift/Kubernetes platforms, strong security fundamentals for k8s, expertise in Python or Java, DevOps/CI/CD experience, bachelor\u0002s degree preferred.
OpenShift, k8s, Docker, Podman, Python, Java, Git, Maven, IDEs, Jenkins, Bitbucket
1w
Save
Mark Applied
Hide
Associate Threat Intelligence Analyst
Washington or London
$79k-$118k/yr OnsiteFull Time
Recorded Future
Recorded Future: Provides AI-driven threat intelligence to protect organizations from cyberattacks.
1+ YOERequires 1–2 years of threat intelligence experience, strong writing, data research and analysis, a relevant degree or equivalent experience, threat intelligence models, and familiarity with named cyber threat tools.
Recorded Future, MITRE ATT&CK, Diamond Model, Cyber Kill Chain, DomainTools, VirusTotal, SHODAN, Python, Ruby, JavaScript, C
3mo
Save
Mark Applied
Hide
Sr. Manager, Threat Engineering
Jersey City, New Jersey, United States
$165k-$200k/yr OnsiteFull Time
Tory Burch
Tory Burch: Designs and retails luxury lifestyle apparel and accessories.
10+ YOE10+ years in threat/detection engineering within cloud/identity-centric environments; strong threat modeling; MITRE ATT&CK experience; leadership; CISSP/OSCP/GWAPT desirable.
Microsoft 365, GCP, CI/CD, ERP, AI
2w
Save
Mark Applied
Hide
Principal AI Threat Detection Engineer - Insider Threat
United States
$117k-$158k/yr RemoteFull Time
Blackbaud
BlackbaudNasdaq: BLKB: Provides software for nonprofits and social impact organizations.
8+ YOE8+ years security engineering with insider threat and detection experience, 5+ years IT/networking, SOAR/UEBA/SIEM expertise, scripting (PowerShell, PERL, Python, Bash), API integration, and experience evaluating AI/ML detection models.
SIEM, UEBA, SOAR, AI/ML, Linux, Unix, Windows, PowerShell, PERL, Python, Bash, APIs, NIST, MITRE ATT&CK, MITRE ATLAS
2w
Save
Mark Applied
Hide
GEOINT Resiliency & Threat Engineer
Chantilly, Virginia, United States
OnsiteFull Time
Stratos Solutions
Stratos Solutions: Provides engineering and advisory services to the US Intelligence Community.
Active TS/SCI with Polygraph, bachelor\u0002s degree or equivalent experience in a technical discipline, experience in mission assurance/resiliency engineering, threat modeling, COOP/RIPO, and systems engineering for IC/DoD environments.
Model-Based Systems Engineering (MBSE), SysML
1mo
Save
Mark Applied
Hide
Lead Threat Engineer
Columbia, Maryland, United States
$140k-$200k/yr OnsiteFull Time
Astrion
Astrion: Provide engineering and mission support services to federal government agencies.
7+ YOE3+ MgmtUS citizen eligible for Secret clearance, BS in STEM, 7+ years experience, 3+ years leading projects, model & simulation experience, EM/trajectory/phenomenology familiarity, MS Project/Jira/Confluence exposure.
Microsoft Project, Jira, Confluence, CAD
1mo
Save
Mark Applied
Hide
Lead Threat Engineer
Columbia, Maryland, United States
$130k-$180k/yr OnsiteFull Time
Astrion
Astrion: Provides engineering, cybersecurity, and mission support services.
7+ YOE3+ MgmtUS citizen eligible for DoD Secret clearance, BS in STEM, 7+ years experience, 3+ years model/simulation and 3+ years leading projects/teams, strong written/oral communication and briefing skills.
Microsoft Project, Jira, Confluence, CAD, AEGIS
1mo
Save
Mark Applied
Hide
Golden Dome Threat Analysis Lead
Chantilly or Colorado Springs
$133k-$199k/yr OnsiteFull Time
The Aerospace Corporation
The Aerospace Corporation: Provides technical expertise and research for national space programs.
8+ YOEB.S. in engineering or science, 8+ years (12+ for senior) relevant experience, leadership of technical teams, threat modeling expertise, experience supporting government customers, active TS/SBI/SCI clearance and polygraph, U.S. citizenship required.
1mo
Save
Mark Applied
Hide
Threat Intel Manager, Model Exploitation & Fraud
San Francisco, California, United States
$375k-$455k/yr HybridFull Time
Anthropic
Anthropic: Developing safe and reliable artificial intelligence systems.
Proven leadership of investigative or threat intelligence teams, deep domain fluency in large-scale abuse and fraud, proficiency in SQL and Python, familiarity with LLM exploitation, and experience with external intelligence engagement.
SQL, Python
2mo
Save
Mark Applied
Hide
Threat Missile Analysis Engineer
Columbia, Maryland, United States
$70k-$130k/yr OnsiteFull Time
nou Systems
nou Systems: Provides engineering and technology solutions for defense and space systems.
Active DoD Secret clearance, BS (required) in Mechanical/Aerospace Engineering, skilled in Python or MATLAB, data analysis, briefing development, modeling, and strong written/verbal communication.
Python, MATLAB, Linux
2mo
Save
Mark Applied
Hide
Dev/Sec/Ops and Threat Engineering Specialist
Scottsdale or Bellevue or London
RemoteFull Time
SunCore Digital
SunCore Digital: Product studio building custom software and blockchain mining solutions.
3+ YOE3+ years DevOps/DevSecOps/security engineering experience; hands-on CI/CD, cloud (DigitalOcean), Docker, Linux, networking, penetration testing, threat modeling, secrets management, OKTA and KYC integrations, plus strong communication skills.
GitHub, GitHub Actions, Jenkins, DigitalOcean, Cloudflare, SiteGround, Flutter, Binance, WhatToMine, Trulioo, Stripe, BitPay, DocuSign, OKTA, Zendesk, HubSpot CRM, Zapier, Docker, Linux, Node.js, Python, SHA-256, CI/CD
1mo
Save
Mark Applied
Hide
Platform Consultant - Threat Modeling
Illinois or United States
$91k-$196k/yr RemoteFull Time
Allstate
AllstateNYSE: ALL: Provides insurance products for vehicles, homes, and businesses.
3+ YOE3+ years in software/security/architecture roles; experience advising engineering teams, threat modeling (STRIDE, Attack Trees, Kill Chains), cloud security (AWS/Azure/GCP), CI/CD, EMR not required; strong communication and mentoring skills.
STRIDE, Attack Trees, Kill Chains, MITRE ATT&CK, OWASP Top 10, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, SAML, Java, JavaScript, Python, Go, Rust, OpenAPI, Swagger, AWS, Azure, GCP, CI/CD, Agile Methodology
3w
Save
Mark Applied
Hide
Lead Security Engineer - Threat Modeling
Plano, Texas, United States
OnsiteFull Time
JPMorgan Chase
JPMorgan ChaseNYSE: JPM: Global financial services firm providing banking and investment solutions.
5+ YOE5+ years applied security engineering experience, formal security training/certification, CISSP or CCSP, hands-on threat modeling, system design and coding experience, knowledge of information and network security.
AWS, GCP
1mo
Save
Mark Applied
Hide
Senior Research Engineer, Threat Intelligence
Boston, Massachusetts, United States
$140k-$150k/yr RemoteFull Time
SecurityScorecard
SecurityScorecard: Provides continuous cybersecurity ratings and risk monitoring for organizations.
5+ YOE5+ years engineering experience in threat intelligence, security research, or detection engineering; production experience with threat intel data; proficiency with Python, TypeScript/Node, cloud and CI/CD; knowledge of STIX/TAXII, YARA, Sigma, and applied language-model workflows.
Python, TypeScript, Node, STIX 2.1, TAXII 2.1, MISP, MITRE ATT&CK, YARA, Sigma, STIX Patterning, AWS, CI/CD, SQL, regex, Splunk, Kinesis, NetFlow, Golang, CEL, OPA, OpenCTI, FAIR
1w
Save
Mark Applied
Hide
Staff Application Security Engineer – Threat Research
New York City, New York, United States
$107k-$284k/yr HybridFull Time
CVS Health
CVS HealthNYSE: CVS: Provides retail pharmacy, health insurance, and pharmacy benefit management services.
7+ YOERequires 7+ years in application or information security, 5+ years programming, 3+ years cloud and container security, infrastructure or security as code, assessments, vulnerability analysis, and threat modeling.
Java, Python, JavaScript, C#, C/C++, PowerShell, Shell, AWS, Microsoft Azure, Google Cloud Platform, Docker, Kubernetes, Snowflake, Web Application Firewall, API
1w
Save
Mark Applied
Hide
Senior Security Engineer- Threat Engineering Detection Team
Atlanta or Raleigh or Charlotte
OnsiteFull Time
Truist
TruistNYSE: TFC: Offers personal banking, business lending, and investment management services.
7+ YOERequires a bachelor's degree or equivalent and 7+ years in security engineering or cybersecurity, with expertise in detection engineering, threat modeling, Splunk, Snowflake, SQL, and complex security technologies.
Anvilogic, Splunk, Snowflake, Snowpipe, Cribl, Databahn, MySQL, PostgreSQL, SQL Server, Python, Docker, Kubernetes, MITRE ATT&CK
2mo
Save
Mark Applied
Hide
Manager, Red Team, Bots & DDoS Threat Intelligence
United States or Los Angeles County or San Francisco
$175k-$237k/yr RemoteFull Time
Amazon
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ Mgmt5+ years managing teams and 5+ years in software/security environments; experience with offensive security, bot mitigation, DDoS simulation, threat modeling, and translating findings to defensive improvements.
Nodriver, Puppeteer, TLS, Canvas, WebGL, WAF, CDN, LLM
1d
Save
Mark Applied
Hide
DISTINGUISHED SCIENTIST/ENGINEER FOR NAVY THREAT ENGINEERING (SSTM)
Dahlgren, Virginia, United States
$195k-$210k/yr OnsiteFull Time
Naval Surface Warfare Center Dahlgren Division
Naval Surface Warfare Center Dahlgren Division: Develops and integrates advanced naval warfare and weapon systems.
Expert threat engineering and modeling experience, with demonstrated success developing teams, personnel, and cross-agency coalitions. Requires qualifying engineering, physical science, math, operations research, or computer science education.
Research and Development (R&D), Standard Form 50 (SF-50), DD-214, DD-215, Standard Form 15 (SF-15), Resume Builder, FBI