> Markdown version of [/jobs/ext/4083619-consultant-threat-modeler-tm](https://www.wearedevelopers.com/jobs/ext/4083619-consultant-threat-modeler-tm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Consultant - Threat Modeler (TM)

- **Company:** Infosys Limited
- **Location:** Belfast, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Comptia Cloud+, Amazon Web Services, Software System Penetration Testing, JIRA, User Authentication, Microsoft Azure, Cloud Computing, Cloud Engineering, Cyber Security, Information Systems, Continuous Integration, Data Security, DevOps, Github, Issue Tracking Systems, Microsoft Security Essentials, MongoDB, Network Segmentation, Open Web Application Security, Systems Development Life Cycle, Data Logging, Scripting, Google Cloud, Snowflake, Mitre Att&ck, Cyber Threat Analysis, Cloudformation, Kubernetes, Information Technology, Terraform, Oracle Cloud Infrastructure, Serverless Computing, Docker, Databricks
- **Published:** October 16, 2026
- **Apply:** https://sjobs.brassring.com/TGnewUI/Search/home/HomeWithPreLoad?partnerid=25633&siteid=5439&PageType=JobDetails&jobid=2253019

## About the Role

We are seeking an experienced Threat Modeler to identify security threats, define appropriate mitigating controls, and deliver high-quality threat models within agreed timelines. The role requires strong cyber-security and cloud knowledge, an adversarial mindset, and the ability to work independently while collaborating with senior stakeholders and cross-functional technical teams., Required Experience and Technical Skills

 * Minimum 6 years of IT experience, including at least 4 years in Cyber Security or Information Security.
 * Hands-on experience in threat modeling methodologies and techniques, including STRIDE, PASTA, attack trees, threat modeling tools, and MITRE ATT&CK.
 * Experience identifying vulnerabilities using CWE and OWASP guidance.
 * Practical experience in a cyber-security role.
 * Strong understanding of authentication, authorization, logging and monitoring, encryption, infrastructure security, and network segmentation.
 * Experience with scripting languages and Infrastructure as Code, such as Terraform or CloudFormation.
 * Experience using Jira or other ticketing systems.
 * Ability to design and review technical architectures.
 * Experience across several relevant areas, typically two to five years, such as operating-system hardening, CI/CD, pipelines, SDLC, CDK, GitOps, DevOps or Agile delivery, Docker, Kubernetes, serverless technologies, Helm, penetration testing, Snowflake, MongoDB, Terraform Cloud, GitHub, or Databricks.

Essential Skills

 * Strong analytical ability, diligence, and attention to detail.
 * Adversarial mindset and effective problem-solving skills.
 * Ability to research using vendor documentation and continuously learn new technologies and methodologies.
 * Ability to create and maintain high-quality documentation.
 * Experience working in a regulated environment.
 * Strong communication, presentation, and collaboration skills.
 * Ability to build productive relationships across cross-functional teams.
 * Ability to work effectively with a diverse range of people and teams.

Qualifications

 * Bachelor's degree in a computer-related field or equivalent work experience.

Associate-level cloud certification from AWS, GCP, Azure, Oracle Cloud, or CompTIA Cloud+.

 * Associate-level or professional cyber-security certification.

Relevant Cloud Certifications

 * AWS Certified Developer, AWS Certified Solutions Architect, or AWS Certified SysOps Administrator.
 * Google Associate Cloud Engineer or another professional GCP certification.
 * Microsoft Certified: Azure Developer Associate.
 * Oracle Cloud Infrastructure Certified Architect Associate or Cloud Operations Associate.
 * CompTIA Cloud+.

Relevant Cyber-Security Certifications

 * ISACA Certified Information Systems Auditor (CISA)
 * EC-Council: Certified Cyber Threat Intelligence Analyst (CTIA)
 * EC-Council: Certified Ethical Hacker ver 9 (CEH)
 * GIAC Security Essentials (GSEC).
 * ISC2 Systems Security Certified Practitioner (SSCP).
 * CompTIA CySA+.
 * Microsoft Certified: Security Operations Analyst Associate or Information Protection Administrator Associate.

Personal Attributes

 * High degree of initiative, flexibility, and ownership.
 * High customer orientation and quality awareness.
 * Excellent verbal and written communication skills.

## Description

* Perform threat modeling using a documented and repeatable process.
 * Identify threats and specify effective mitigating security controls while maintaining a high standard of quality.
 * Manage the lifecycle of identified threats and controls through completion.
 * Deliver threat models and supporting activities within established timelines.
 * Develop automation tools and scripts as required to support threat modeling activities.
 * Provide feedback, support, and recommendations to improve the existing threat modeling process.
 * Present threat model findings and recommendations to senior stakeholders, the team, and other technical teams.
 * Work with minimal supervision and collaborate effectively across diverse, cross-functional teams.