> Markdown version of [/jobs/ext/4383056-threat-modeling-automation-lead](https://www.wearedevelopers.com/jobs/ext/4383056-threat-modeling-automation-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Threat Modeling Automation Lead

- **Company:** Kelly Services Inc.
- **Location:** Charlotte, NC, United States
- **Experience:** Expert
- **Salary:** $185,827 - $209,373
- **Contract:** Temporary contract
- **Skills:** Kubernetes Security, Java (Programming Language), JavaScript (Programming Language), .NET Framework, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Application Portfolio Management, JIRA, User Authentication, Build Automation, Microsoft Azure, Cloud Computing, Computer Programming, Continuous Integration, Github, Python (Programming Language), Node.Js, Open Web Application Security, Software Engineering, Data Streaming, TypeScript, Scripting, Cloud Platform System, Large Language Models, Software Security, GWAPT, Api Management, Static Application Security Testing, Microservices, Dynamic Application Security Testing
- **Published:** October 23, 2026
- **Apply:** https://www.beyondcharlotte.com/job.asp?id=3472160421&tx=KP5555FFI&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* 7+ years of engineering experience, including 7+ years in Application Security Engineering.
 * 2+ years of hands-on threat modeling experience, including complex application and platform architectures.
 * Experience building AI/LLM-enabled Application Security solutions for enterprise production environments.
 * Strong automation and software engineering or scripting experience.
 * Ability to analyze architectures, data flows, trust boundaries, APIs, controls, and security risks.
 * Experience partnering with software engineering, architecture, cloud, and platform teams.
 * Ability to remain a hands-on threat modeling practitioner while providing principal-level technical leadership.

Desired Skills & Experience

 * Deep knowledge of secure application architecture, STRIDE or similar threat modeling methodologies, OWASP risks, API security, authentication, authorization, cryptography, and data protection.
 * Programming experience with technologies such as Java, .NET, Python, JavaScript/TypeScript, Node.js, or Go.
 * Cloud and platform security experience across Azure, AWS, or GCP, including CI/CD and modern distributed or microservices architectures.
 * Experience with security tooling such as SAST, SCA, DAST, IaC scanning, container security, API testing, or software supply chain controls.
 * Knowledge of AI/LLM security risks, guardrails, data protection, model or agent trust boundaries, evaluation, and human review.
 * Experience defining reusable security standards, patterns, playbooks, reference architectures, or controls.
 * CISSP, CSSLP, CCSP, GIAC GWEB, GIAC GWAPT, or comparable security certification preferred.

## Description

This is a senior individual-contributor role for an engineer who wants to stay hands-on while setting the technical direction for threat modeling. You'll tackle complex threat models, build automation that improves delivery at scale, and help advance Continuous Threat Modeling across a large application portfolio., * Serve as the principal technical authority for threat modeling methodology, tooling, automation, and quality.

 * Conduct approximately one complex or high-risk threat model per sprint and recommend practical mitigations.
 * Build reusable threat patterns, architecture templates, control mappings, reference architectures, and playbooks.
 * Design production-grade automation and AI/LLM-assisted capabilities that improve threat modeling throughput, consistency, and quality.
 * Advance Threat Modeling as Code, automated diagram generation, threat selection, and ongoing model maintenance.
 * Integrate threat modeling with GitHub, Jira, CI/CD pipelines, application inventories, architecture repositories, and security platforms.
 * Develop mechanisms for Continuous Threat Modeling based on architecture, code, configuration, and dependency changes.
 * Define quality and productivity metrics while mentoring security practitioners, architects, and Security Champions.