Senior Cloud Security Threat Modeler Analyst, Citi

Citi

Location:
United States, Irving ▼
Jacksonville

Category:
IT - Software Development

Contract Type:
Employment contract

Salary:

96400.00 - 144600.00 USD / Year

Save Job

Apply Position

Job Description:

Citi is looking for a security-focused individual with expertise in threat modeling and cloud security principles to join the Cloud Threat Modeling team. The role involves identifying threats, specifying mitigating controls, and supporting the lifecycle of threat management.

Job Responsibility:

Perform Threat Modeling using a documented process
development of automation tools as required
maintain a high standard of work in identifying threats and specifying mitigating controls
attending to the lifecycle of identified threats and controls
delivery of threat models and supporting tasks within existing timeframes
provide feedback, support, and improvements to the existing threat modeling process
present work to seniors, the team, and other technical teams.

Requirements:

5+ years of experience in a Cybersecurity role
proven experience with Jira or other similar ticketing systems
strong understanding of security best practices related to Authentication, Authorization, Logging/Monitoring, Encryption, Infrastructure Security, and Network Segmentation
experience with scripting languages (e.g., Python, Bash, PowerShell) or Infrastructure as Code tools (e.g., Terraform, CloudFormation)
familiarity with threat modeling methodologies like STRIDE, PASTA, Attack Trees, and the MITRE ATT&CK framework, as well as threat modeling tools (e.g., IriusRisk, ThreatModeler, Microsoft Threat Modeling Tool)
ability to identify vulnerabilities using CWE or OWASP frameworks
working knowledge of Operating Systems (e.g., Windows, Linux) and their hardening best practices
familiarity with Development Concepts such as CI/CD pipelines, and SDLC
working knowledge of Cloud Platforms (e.g., AWS, Azure, GCP)
ability to design and review technical architectures
strong analytical skills, diligence, and attention to detail
excellent skills in creating and maintaining high-quality documentation
demonstrated ability to work effectively with diverse individuals and teams
excellent written and verbal communication skills
a passion for continuous learning and staying up-to-date with new technologies and methodologies
proven ability to build relationships across multiple cross-functional teams.

Nice to have:

3+ years experience specifically focused on Threat Modeling
experience with Docker, Kubernetes, Serverless Technologies (e.g., AWS Lambda, Azure Functions, Google Cloud Functions), and Helm
familiarity with Cloud Development Kit (CDK) and GitOps principles
experience supporting or performing Penetration Testing activities (e.g., vulnerability scanning, network penetration testing, web application testing, mobile application testing)
experience with Snowflake, MongoDB, Terraform Cloud, GitHub, or Databricks
experience working in a regulated environment (e.g., financial services)
ability to think like an attacker and anticipate potential threats.

What we offer:

Medical, dental & vision coverage
401(k)
life, accident, and disability insurance
wellness programs
paid time off packages, including vacation, sick leave, and paid holidays.

Additional Information:

Job Posted:
August 14, 2025

Expiration:
September 01, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Senior Cloud Security Threat Modeler Analyst