Cloud Security Threat Modeler, Citi

Citi

Location:
United States, Irving, Texas ▼
Jacksonville, Florida

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

96400.00 - 144600.00 USD / Year

Save Job

Apply Position

Job Description:

Citi is looking for a security focused person with a good understanding of cybersecurity principles to work in the Cloud Threat Modeling team. Using threat modeling you will identify threats and specify mitigating controls which will directly reduce the risk of Citi operating in the public cloud.

Job Responsibility:

Perform Threat Modeling using a documented process
Development of automation tools as required
Maintain a high standard of work in identifying threats and specifying mitigating controls
Attending to the lifecycle of identified threats and controls
Delivery of threat models and supporting tasks within existing timeframes
Provide feedback, support, and improvements to the existing threat modeling process
Present work to seniors, the team, and other technical teams

Requirements:

5+ years of experience in a Cybersecurity role
Proven experience with Jira or other similar ticketing systems
Strong understanding of security best practices related to Authentication, Authorization, Logging/Monitoring, Encryption, Infrastructure Security, and Network Segmentation
Experience with scripting languages (e.g., Python, Bash, PowerShell) or Infrastructure as Code tools (e.g., Terraform, CloudFormation)
Familiarity with threat modeling methodologies like STRIDE, PASTA, Attack Trees, and the MITRE ATT&CK framework, as well as threat modeling tools (e.g., IriusRisk, ThreatModeler, Microsoft Threat Modeling Tool)
Ability to identify vulnerabilities using CWE or OWASP frameworks
Working knowledge of Operating Systems (e.g., Windows, Linux) and their hardening best practices
Familiarity with Development Concepts such as CI/CD pipelines, and SDLC
Working knowledge of Cloud Platforms (e.g., AWS, Azure, GCP)
Ability to design and review technical architectures
Strong analytical skills, diligence, and attention to detail
Excellent skills in creating and maintaining high-quality documentation
Demonstrated ability to work effectively with diverse individuals and teams
Excellent written and verbal communication skills
A passion for continuous learning and staying up-to-date with new technologies and methodologies
Proven ability to build relationships across multiple cross-functional teams

Nice to have:

3+ years experience specifically focused on Threat Modeling
Experience with Docker, Kubernetes, Serverless Technologies (e.g., AWS Lambda, Azure Functions, Google Cloud Functions), and Helm
Familiarity with Cloud Development Kit (CDK) and GitOps principles
Experience supporting or performing Penetration Testing activities (e.g., vulnerability scanning, network penetration testing, web application testing, mobile application testing)
Experience with Snowflake, MongoDB, Terraform Cloud, GitHub, or Databricks
Experience working in a regulated environment (e.g., financial services)
Ability to think like an attacker and anticipate potential threats

What we offer:

medical, dental & vision coverage
401(k)
life, accident, and disability insurance
wellness programs
paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

Additional Information:

Job Posted:
July 30, 2025

Expiration:
September 01, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Cloud Security Threat Modeler