Cloud Security Threat Modeler, Citi

Citi

Location:
United States, Irving, Texas ▼
Tampa, Florida

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

96400.00 - 144600.00 USD / Year

Save Job

Apply Position

Job Description:

Citi is looking for a security focused person with a good understanding of cybersecurity principles to work in the Cloud Threat Modeling team. Using threat modeling you will identify threats and specify mitigating controls which will directly reduce the risk of Citi operating in the public cloud.

Job Responsibility:

Perform Threat Modeling using a documented process
Development of automation tools as required
Maintain a high standard of work in identifying threats and specifying mitigating controls
Attending to the lifecycle of identified threats and controls
Delivery of threat models and supporting tasks within existing timeframes
Provide feedback, support, and improvements to the existing threat modeling process
Present work to seniors, the team, and other technical teams

Requirements:

Jira or other ticketing systems – must
Experience working in a cyber-security role – must
Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation – must
Experience with Scripting languages or Infrastructure as Code (Terraform, CloudFormation) – must
Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck)
Identifying vulnerabilities using CWE or OWASP
Operating systems and their hardening
Development concepts (such as: CICD, Pipelines, SDLC)
Cloud Development Kit (CDK), GitOps
Operating in a DevOps / agile team structure
Understanding of docker/K8S/serverless/helm
Support or perform pen testing
Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks
Design and review technical architectures
Analytical, diligence and attention to detail
Eagerness to research using vendor documentation
Create and maintain quality documentation
Experience of regulated environment
Adversary mindset
Work with diverse set of people and teams
Constant learner of new technologies and methodologies
Relationship building across multiple cross-functional teams

Nice to have:

Foundational or practitioner level cloud certification from either AWS, GCP or Azure
Foundational cyber-security certification (ISACA Cybersecurity Fundamentals, GIAC Information Security Fundamentals (GISF), Associate of ISC2, CompTIA Security+, Microsoft Certified: Security, Compliance, and Identity Fundamentals)

What we offer:

medical, dental & vision coverage
401(k)
life, accident, and disability insurance
wellness programs
paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

Additional Information:

Job Posted:
June 06, 2025

Expiration:
June 12, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Cloud Security Threat Modeler