> Markdown version of [/jobs/ext/2006545-threat-modeler](https://www.wearedevelopers.com/jobs/ext/2006545-threat-modeler). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Threat Modeler - **Company:** State Street - **Location:** Princeton, NJ, United States - **Experience:** Expert - **Salary:** $120,000.0 - $202,500.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, Business Software, Business Systems, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Information Systems, Continuous Delivery, Continuous Integration, Distributed Systems, Internet Security, Information Systems Security Architecture Professional, Open Web Application Security, Software Architecture, Cloud Services, Secure Coding, Security Software, Software Engineering, Data Streaming, Google Cloud, Enterprise Software Applications, Cloud Platform System, Software Security, Mitre Att&ck, GWAPT, Kubernetes, Information Technology, Devsecops, Cisco, Service Stack, Microservices - **Published:** August 9, 2026 - **Apply:** https://www.careerbuilder.com/job-details/senior-threat-modeler-princeton-nj--93793f9e-f688-4b50-b0f3-bf48aba928ae ## About the Role * Strong analytical, problem-solving, and risk assessment skills with the ability to identify complex security threats and vulnerabilities. * Deep understanding of application security, cloud security, secure software development, and modern technology architectures. * Strong communication and stakeholder management skills, with the ability to influence engineering and architecture teams. * Experience working in large-scale, complex environments with diverse technology stacks and distributed teams. * Ability to translate technical security findings into actionable recommendations that reduce business risk., * Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline. * 12 years or more of experience in application security, cloud security, cybersecurity architecture, threat modeling, or related technology disciplines, with at least 7 years of hands-on cybersecurity experience preferred. * Demonstrated experience conducting threat modeling exercises for enterprise applications, APIs, cloud platforms, and distributed systems. * Strong expertise in application security principles, secure software development lifecycles, OWASP Top 10, API security, and secure coding practices. * Experience assessing and securing cloud environments across AWS, Azure, and/or Google Cloud Platform. * Knowledge of microservices, containers, Kubernetes, CI/CD pipelines, DevSecOps practices, and modern software architectures. * Experience with threat modeling methodologies such as STRIDE, MITRE ATT&CK, attack trees, and adversary-based risk analysis. * Professional certifications such as CISSP, CCSP, CSSLP, GWAPT, GWEB, AWS Security Specialty, Azure Security Engineer, or equivalent security certifications are highly desirable. * Experience within financial services or other highly regulated industries is preferred. Additional Requirements * Ability to effectively collaborate with development, engineering, architecture, and cybersecurity teams. * Strong written and verbal communication skills with the ability to present technical findings to both technical and non-technical audiences. * Limited travel may be required based on business needs., Amazon Web Services (AWS), Analysis Skills, Application Programming Interface (API), Applications Security, Architectural Analysis, Architectural Services, Business Solutions, CCSP - Cisco Certified Security Professional, CISSP - Certified Information Systems Security Professional, Cloud Applications, Cloud Architecture, Cloud Computing, Communication Skills, Compensation and Benefits, Computer Science, Computer Security, Continuous Deployment/Delivery, Continuous Integration, Distributed Computing, Emerging Technology, Enterprise Applications, Financial Services, Genetics, Incentive Programs, Information Technology & Information Systems, Internet Security, Microservices, Microsoft Windows Azure, Military, Presentation/Verbal Skills, Problem Solving Skills, Product Lifecycle, Profit & Loss, Risk Analysis, Risk Management, Sales, Security Analysis, Security Architecture, Security Attacks, Security Design, Security Software, Software Architecture, Software Development, Software Engineering, Standards Development, Tax Planning, Team Player, Technical Presentation, Technical Strategy, Threat Modeling, Willing to Travel, Writing Skills ## Description We are looking for a Senior Threat Modeler. You will be responsible for performing threat modeling activities across enterprise applications, cloud platforms, APIs, and emerging technologies to identify security risks early in the development lifecycle and drive secure-by-design outcomes. You will partner with architects, engineers, developers, and cybersecurity teams to strengthen the security posture of critical business systems and technology platforms. Why This Role Is Important To Us The team you will be joining is part of the Security Architecture organization, a function that is critical to protecting the firm's applications, data, cloud environments, and technology services. Threat modeling enables the organization to proactively identify security weaknesses, reduce cyber risk, improve architectural resiliency, and ensure security requirements are incorporated into technology solutions from inception through deployment. What You Will Be Responsible For As a Senior Threat Modeler, you will: * Conduct threat modeling activities for business applications, cloud-native platforms, APIs, and strategic technology initiatives. * Analyze application architectures, data flows, trust boundaries, and cloud deployments to identify security threats and design weaknesses. * Partner with application development, cloud engineering, and security teams to recommend practical risk mitigation strategies and secure design improvements. * Perform security assessments using established methodologies such as STRIDE, MITRE ATT&CK, attack trees, and risk-based analysis techniques. * Contribute to the development of threat modeling standards, reusable patterns, training materials, and secure-by-design practices across the enterprise. * Strong knowledge of cloud-native architectures and security controls across AWS, Azure, and Google Cloud, with the ability to identify and mitigate risks in distributed, containerized, and platform-based environments. ## Related Videos - [Real-world Threat Modeling](https://www.wearedevelopers.com/videos/936-real-world-threat-modeling) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)