4,057 Threat Modeling jobs in the United States
Threat Modeling Engineer
Posted 1 day ago
Job Viewed
Job Description
Why Work at Lenovo
Here at Lenovo, we believe in smarter technology for all, so we spend our time building a society that's brighter and more inclusive.
And we go big. No, not big-huge.
We're not just a Fortune 500 company, we're one of Fortune's Most Admired. We're in 180 countries, working with 63,000 brilliant colleagues and counting. And we're known for the world's most complete portfolio of smart technology, from devices to software to infrastructure.
With our ingenuity, we help millions-not just the select few-experience our version of a smarter future.
The one thing that's missing? Well. you.
Description and Requirements
Who You'll Work With
At Lenovo, we manufacture one of the world's widest portfolios of connected products, including PCs (ThinkPad, Yoga, Lenovo Legion), tablets, smartphones and workstations as well as augmented and virtual reality (Mirage, ThinkReality) and smart home/office solutions. We are also building an innovative portfolio of software and services which are changing the industry. Lenovo is creating the capacity and computing power for the connections that are changing business and society.
About Our Team
We are searching for a Threat Modeling Engineer in the Security Center of Excellence for PC and Smart Devices business (PCSD). This is an exciting role where you will be helping to lead the Threat Modeling efforts for our global development teams. You will be working alongside some of the best security teams in the industry.
What You'll Do
- Partner with multiple international development teams across business units gaining an in-depth knowledge of products to identify security architecture, data flows, trust boundaries and attack surface.
- Train members of development teams in threat modeling tools and techniques to become partners with the security organization to create, review and maintain threat models for products.
- Champion threat modeling practices within the development teams, promoting best industry practices.
- Review threat models of a variety of products enhancing the process, develop meaningful metrics and tracking improvement of the cybersecurity posture for products and security development maturity.
- Stay current in the latest security tools, methodologies and best practices, especially as it relates to threat modeling.
Position Requirements:
Basic Qualifications:
- Bachelor's degree in cyber security or relevant field
- 2+ years of experience creating, maintaining, and reviewing threat models for application development teams using STRIDE.
Preferred Qualifications:
- Expert level experience with Threat Modeler is highly preferred.
- Familiarity with development life cycle practices such as Agile.
- Familiarity with security and privacy frameworks, standards, and regulations like GDPR, CCPA, CSA STAR, ISO 27000 series, NIST, etc.
- Learns quickly, takes initiative, adaptable, and deeply passionate about cybersecurity.
- Strong communication skills
- Multiple industry security certifications such as CISSP, CCSLP, SANS-GGWEB ( or other SANS certs) desired.
- Some experience with the Threat Modeler tool
- In-depth knowledge of security concepts and design techniques relating to web, application, mobile, and firmware design.
- Proficiency in software development practices, release planning, and quality assurance.
- In-depth knowledge of threat modeling practices, tools, and techniques.
We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any federal, state, or local protected class.
Threat Modeling Engineer
Posted 1 day ago
Job Viewed
Job Description
Job Description
As a Senior Engineer - Threat Modeling you will be a part of a smart cross-functional team delivering digital business transformation solutions to our clients. This position entails an individual contributor role focused on Security Architecture and Threat Modeling, encompassing governance, evaluation of public cloud services, and conducting security reviews for Public Cloud Providers. Collaboration and partnership with Engineering, Information Security, Program Management, and Development teams are essential. The candidate will conduct technical architecture reviews to pinpoint security opportunities, identify exploitable threats, and propose mitigation strategies.
Your Impact:
- Conduct thorough threat modeling exercises utilizing established methodologies and frameworks.
- Maintain a rigorous standard of excellence in identifying potential threats and specifying effective mitigation controls.
- Manage the lifecycle of identified threats and associated controls, ensuring timely updates and adjustments as necessary.
- Deliver comprehensive threat models and related tasks within specified timeframes.
- Offer constructive feedback, support, and suggestions for enhancing the existing threat modeling process.
- Present findings and progress updates to senior leadership, team members, and relevant technical stakeholders.
Qualifications
We are seeking an ideal candidate with 8+ years of experience in a range of technologies and processes including:
- Proficiency in GCP - essential
- Strong knowledge of security architecture principles, frameworks, and best practices
- Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.
- Overall experience in Cybersecurity:5+ years
- Security practices encompassing authentication, authorization, logging/monitoring, encryption, infrastructure security, and network/segmentation
- Knowledge of cloud security frameworks
- knowledge of Rest API
- Knowledge in scripting languages and Infrastructure as Code (Terraform, CloudFormation)
- Familiarity with Jira or other ticketing systems - essential
- Technical architecture design and review skills - essential
- Ability to identify vulnerabilities using CWE or OWASP
- Knowledge of operating systems and their hardening techniques
- Understanding of development concepts such as CICD, Pipelines, and SDLC
- Penetration testing knowledge is also super useful
- Familiarity with Cloud Development Kit (CDK) and GitOps
- Experience operating in a DevOps/agile team environment
- Understanding of docker, Kubernetes, serverless architecture, and Helm
- Exposure to platforms like Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks
- Strong analytical skills, diligence, and attention to detail
- Willingness to conduct research using vendor documentation
- Capability to create and maintain high-quality documentation
- Possession of an adversary mindset
- Continuous learning attitude towards new technologies and methodologies
- Strong problem-solving skills
- Excellent communication and collaboration abilities
- Ability to build and nurture relationships across cross-functional teams
Set Yourself Apart With:
- Professional Security Certifications: CISSP, CCSP, CISA, CISM, ITIL
- Relevant GCP certifications are highly desirable: GCP Professional Cloud Architect, GCP Professional Cloud Security Engineer.
- Strong knowledge of industry standards as they relate to Cloud and Application security management to include ISO, NIST, and Cloud Security Alliance (CSA)
- Experience working in regulated environments
- Exposure to agile development, DevOps, SecOps and scrum teams
- Hands-on-experience with cloud security designs on Azure
- Development experience (python, Node)
- Strong desire to learn and contribute solutions and ideas to broader team
Additional Information
* Flexible vacation policy; time is not limited, allocated, or accrued
* 16 paid holidays throughout the year
* Generous parental leave and new parent transition program
* Tuition reimbursement
* Corporate gift matching program
Base Pay Range: USD 140,000 - 185,000 (varies depending on experience)
Therange shown represents a grouping of relevantranges currently in use at Publicis Sapient. Actualrange for this position may differ, depending on location and specific skillset required for the work itself.
As part of our dedication to an inclusive and diverse workforce, Publicis Sapient is committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity, or religion. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us you may call us at .
Company DescriptionPublicis Sapient is a digital transformation partner helping established organizations get to their future, digitally enabled state, both in the way they work and the way they serve their customers. We help unlock value through a start-up mindset and modern methods, fusing strategy, consulting and customer experience with agile engineering and problem-solving creativity. United by our core values and our purpose of helping people thrive in the brave pursuit of next, our 20,000+ people in 53 offices around the world combine experience across technology, data sciences, consulting, and customer obsession to accelerate our clients' businesses through designing the products and services their customers truly value.
Threat Modeling Engineer
Posted 2 days ago
Job Viewed
Job Description
Company description
Publicis Sapient is a digital transformation partner helping established organizations get to their future, digitally enabled state, both in the way they work and the way they serve their customers. We help unlock value through a start-up mindset and modern methods, fusing strategy, consulting and customer experience with agile engineering and problem-solving creativity. United by our core values and our purpose of helping people thrive in the brave pursuit of next, our 20,000+ people in 53 offices around the world combine experience across technology, data sciences, consulting, and customer obsession to accelerate our clients’ businesses through designing the products and services their customers truly value.
Overview
As a Senior Engineer - Threat Modeling you will be a part of a smart cross-functional team delivering digital business transformation solutions to our clients. This position entails an individual contributor role focused on Security Architecture and Threat Modeling, encompassing governance, evaluation of public cloud services, and conducting security reviews for Public Cloud Providers. Collaboration and partnership with Engineering, Information Security, Program Management, and Development teams are essential. The candidate will conduct technical architecture reviews to pinpoint security opportunities, identify exploitable threats, and propose mitigation strategies.
Your Impact:
-
Conduct thorough threat modeling exercises utilizing established methodologies and frameworks.
-
Maintain a rigorous standard of excellence in identifying potential threats and specifying effective mitigation controls.
-
Manage the lifecycle of identified threats and associated controls, ensuring timely updates and adjustments as necessary.
-
Deliver comprehensive threat models and related tasks within specified timeframes.
-
Offer constructive feedback, support, and suggestions for enhancing the existing threat modeling process.
-
Present findings and progress updates to senior leadership, team members, and relevant technical stakeholders.
Qualifications
We are seeking an ideal candidate with 8+ years of experience in a range of technologies and processes including:
-
Proficiency in GCP - essential
-
Strong knowledge of security architecture principles, frameworks, and best practices
-
Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.
-
Overall experience in Cybersecurity: 5+ years
-
Security practices encompassing authentication, authorization, logging/monitoring, encryption, infrastructure security, and network/segmentation
-
Knowledge of cloud security frameworks
-
knowledge of Rest API
-
Knowledge in scripting languages and Infrastructure as Code (Terraform, CloudFormation)
-
Familiarity with Jira or other ticketing systems – essential
-
Technical architecture design and review skills – essential
-
Ability to identify vulnerabilities using CWE or OWASP
-
Knowledge of operating systems and their hardening techniques
-
Understanding of development concepts such as CICD, Pipelines, and SDLC
-
Penetration testing knowledge is also super useful
-
Familiarity with Cloud Development Kit (CDK) and GitOps
-
Experience operating in a DevOps/agile team environment
-
Understanding of docker, Kubernetes, serverless architecture, and Helm
-
Exposure to platforms like Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks
-
Strong analytical skills, diligence, and attention to detail
-
Willingness to conduct research using vendor documentation
-
Capability to create and maintain high-quality documentation
-
Possession of an adversary mindset
-
Continuous learning attitude towards new technologies and methodologies
-
Strong problem-solving skills
-
Excellent communication and collaboration abilities
-
Ability to build and nurture relationships across cross-functional teams
Set Yourself Apart With:
-
Professional Security Certifications: CISSP, CCSP, CISA, CISM, ITIL
-
Relevant GCP certifications are highly desirable: GCP Professional Cloud Architect, GCP Professional Cloud Security Engineer.
-
Strong knowledge of industry standards as they relate to Cloud and Application security management to include ISO, NIST, and Cloud Security Alliance (CSA)
-
Experience working in regulated environments
-
Exposure to agile development, DevOps, SecOps and scrum teams
-
Hands-on-experience with cloud security designs on Azure
-
Development experience (python, Node)
-
Strong desire to learn and contribute solutions and ideas to broader team
Additional information
• Flexible vacation policy; time is not limited, allocated, or accrued
• 16 paid holidays throughout the year
• Generous parental leave and new parent transition program
• Tuition reimbursement
• Corporate gift matching program
Base Pay Range: USD 140,000 - 185,000 (varies depending on experience)
The range shown represents a grouping of relevant ranges currently in use at Publicis Sapient. Actual range for this position may differ, depending on location and specific skillset required for the work itself.
As part of our dedication to an inclusive and diverse workforce, Publicis Sapient is committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity, or religion. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at or you may call us at +1- .
Threat Modeling Engineer
Posted 2 days ago
Job Viewed
Job Description
Publicis Sapient is a digital transformation partner helping established organizations get to their future, digitally enabled state, both in the way they work and the way they serve their customers. We help unlock value through a start-up mindset and modern methods, fusing strategy, consulting and customer experience with agile engineering and problem-solving creativity. United by our core values and our purpose of helping people thrive in the brave pursuit of next, our 20,000+ people in 53 offices around the world combine experience across technology, data sciences, consulting, and customer obsession to accelerate our clients' businesses through designing the products and services their customers truly value.
Job Description
As a Senior Engineer - Threat Modeling you will be a part of a smart cross-functional team delivering digital business transformation solutions to our clients. This position entails an individual contributor role focused on Security Architecture and Threat Modeling, encompassing governance, evaluation of public cloud services, and conducting security reviews for Public Cloud Providers. Collaboration and partnership with Engineering, Information Security, Program Management, and Development teams are essential. The candidate will conduct technical architecture reviews to pinpoint security opportunities, identify exploitable threats, and propose mitigation strategies.
Your Impact:
- Conduct thorough threat modeling exercises utilizing established methodologies and frameworks.
- Maintain a rigorous standard of excellence in identifying potential threats and specifying effective mitigation controls.
- Manage the lifecycle of identified threats and associated controls, ensuring timely updates and adjustments as necessary.
- Deliver comprehensive threat models and related tasks within specified timeframes.
- Offer constructive feedback, support, and suggestions for enhancing the existing threat modeling process.
- Present findings and progress updates to senior leadership, team members, and relevant technical stakeholders.
We are seeking an ideal candidate with 8+ years of experience in a range of technologies and processes including:
- Proficiency in GCP - essential
- Strong knowledge of security architecture principles, frameworks, and best practices
- Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.
- Overall experience in Cybersecurity: 5+ years
- Security practices encompassing authentication, authorization, logging/monitoring, encryption, infrastructure security, and network/segmentation
- Knowledge of cloud security frameworks
- knowledge of Rest API
- Knowledge in scripting languages and Infrastructure as Code (Terraform, CloudFormation)
- Familiarity with Jira or other ticketing systems - essential
- Technical architecture design and review skills - essential
- Ability to identify vulnerabilities using CWE or OWASP
- Knowledge of operating systems and their hardening techniques
- Understanding of development concepts such as CICD, Pipelines, and SDLC
- Penetration testing knowledge is also super useful
- Familiarity with Cloud Development Kit (CDK) and GitOps
- Experience operating in a DevOps/agile team environment
- Understanding of docker, Kubernetes, serverless architecture, and Helm
- Exposure to platforms like Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks
- Strong analytical skills, diligence, and attention to detail
- Willingness to conduct research using vendor documentation
- Capability to create and maintain high-quality documentation
- Possession of an adversary mindset
- Continuous learning attitude towards new technologies and methodologies
- Strong problem-solving skills
- Excellent communication and collaboration abilities
- Ability to build and nurture relationships across cross-functional teams
- Professional Security Certifications: CISSP, CCSP, CISA, CISM, ITIL
- Relevant GCP certifications are highly desirable: GCP Professional Cloud Architect, GCP Professional Cloud Security Engineer.
- Strong knowledge of industry standards as they relate to Cloud and Application security management to include ISO, NIST, and Cloud Security Alliance (CSA)
- Experience working in regulated environments
- Exposure to agile development, DevOps, SecOps and scrum teams
- Hands-on-experience with cloud security designs on Azure
- Development experience (python, Node)
- Strong desire to learn and contribute solutions and ideas to broader team
Additional Information
• Flexible vacation policy; time is not limited, allocated, or accrued
• 16 paid holidays throughout the year
• Generous parental leave and new parent transition program
• Tuition reimbursement
• Corporate gift matching program
Base Pay Range: USD 140,000 - 185,000 (varies depending on experience)
The range shown represents a grouping of relevant ranges currently in use at Publicis Sapient. Actual range for this position may differ, depending on location and specific skillset required for the work itself.
As part of our dedication to an inclusive and diverse workforce, Publicis Sapient is committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity, or religion. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at or you may call us at +1- .
Threat Modeling Engineer
Posted 2 days ago
Job Viewed
Job Description
Publicis Sapient is a digital transformation partner helping established organizations get to their future, digitally enabled state, both in the way they work and the way they serve their customers. We help unlock value through a start-up mindset and modern methods, fusing strategy, consulting and customer experience with agile engineering and problem-solving creativity. United by our core values and our purpose of helping people thrive in the brave pursuit of next, our 20,000+ people in 53 offices around the world combine experience across technology, data sciences, consulting, and customer obsession to accelerate our clients' businesses through designing the products and services their customers truly value.
Overview
As a Senior Engineer - Threat Modeling you will be a part of a smart cross-functional team delivering digital business transformation solutions to our clients. This position entails an individual contributor role focused on Security Architecture and Threat Modeling, encompassing governance, evaluation of public cloud services, and conducting security reviews for Public Cloud Providers. Collaboration and partnership with Engineering, Information Security, Program Management, and Development teams are essential. The candidate will conduct technical architecture reviews to pinpoint security opportunities, identify exploitable threats, and propose mitigation strategies.
Your Impact:
- Conduct thorough threat modeling exercises utilizing established methodologies and frameworks.
- Maintain a rigorous standard of excellence in identifying potential threats and specifying effective mitigation controls.
- Manage the lifecycle of identified threats and associated controls, ensuring timely updates and adjustments as necessary.
- Deliver comprehensive threat models and related tasks within specified timeframes.
- Offer constructive feedback, support, and suggestions for enhancing the existing threat modeling process.
- Present findings and progress updates to senior leadership, team members, and relevant technical stakeholders.
We are seeking an ideal candidate with 8+ years of experience in a range of technologies and processes including:
- Proficiency in GCP - essential
- Strong knowledge of security architecture principles, frameworks, and best practices
- Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.
- Overall experience in Cybersecurity: 5+ years
- Security practices encompassing authentication, authorization, logging/monitoring, encryption, infrastructure security, and network/segmentation
- Knowledge of cloud security frameworks
- knowledge of Rest API
- Knowledge in scripting languages and Infrastructure as Code (Terraform, CloudFormation)
- Familiarity with Jira or other ticketing systems - essential
- Technical architecture design and review skills - essential
- Ability to identify vulnerabilities using CWE or OWASP
- Knowledge of operating systems and their hardening techniques
- Understanding of development concepts such as CICD, Pipelines, and SDLC
- Penetration testing knowledge is also super useful
- Familiarity with Cloud Development Kit (CDK) and GitOps
- Experience operating in a DevOps/agile team environment
- Understanding of docker, Kubernetes, serverless architecture, and Helm
- Exposure to platforms like Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks
- Strong analytical skills, diligence, and attention to detail
- Willingness to conduct research using vendor documentation
- Capability to create and maintain high-quality documentation
- Possession of an adversary mindset
- Continuous learning attitude towards new technologies and methodologies
- Strong problem-solving skills
- Excellent communication and collaboration abilities
- Ability to build and nurture relationships across cross-functional teams
- Professional Security Certifications: CISSP, CCSP, CISA, CISM, ITIL
- Relevant GCP certifications are highly desirable: GCP Professional Cloud Architect, GCP Professional Cloud Security Engineer.
- Strong knowledge of industry standards as they relate to Cloud and Application security management to include ISO, NIST, and Cloud Security Alliance (CSA)
- Experience working in regulated environments
- Exposure to agile development, DevOps, SecOps and scrum teams
- Hands-on-experience with cloud security designs on Azure
- Development experience (python, Node)
- Strong desire to learn and contribute solutions and ideas to broader team
Additional information
• Flexible vacation policy; time is not limited, allocated, or accrued
• 16 paid holidays throughout the year
• Generous parental leave and new parent transition program
• Tuition reimbursement
• Corporate gift matching program
Base Pay Range: USD 140,000 - 185,000 (varies depending on experience)
The range shown represents a grouping of relevant ranges currently in use at Publicis Sapient. Actual range for this position may differ, depending on location and specific skillset required for the work itself.
As part of our dedication to an inclusive and diverse workforce, Publicis Sapient is committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity, or religion. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at or you may call us at +1- .
Threat Modeling Engineer, Senior
Posted 2 days ago
Job Viewed
Job Description
About the job Threat Modeling Engineer, Senior
Top Secret Clearance Jobs is dedicated to helping those with the most exclusive security clearance find their next career opportunity and get interviews within 48 hours.
Job Number: R0206267 Threat Modeling Engineer, Senior
Key Role: Research, design, develop, test, or supervise the manufacturing and installation of electrical equipment, components, or systems for commercial, industrial, military, or scientific use. Employ knowledge of electrical theory and materials properties. Apply advanced consulting skills or extensive technical expertise, including full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction, and mentor and supervise team members.
Basic Qualifications:
- Experience with software modeling and a variety of fidelity levels, including ground force weapon and C4ISR systems
- Knowledge of C++, Python, and Java
- Knowledge of MATLAB or Simulink
- Ability to learn or understand an engineering level system such as Radars, RF sensors, EW, tanks, artillery, rockets, UAS, radios, and directed energy systems
- Top Secret clearance
- Bachelor's degree in Science, Technology, Engineering, or Mathematics
- Experience working with Army ground systems
- Knowledge of fidelity levels of modeling, including parametric, engineering, and emulative
- Knowledge of simulation environments, including the Integrated Threat Analysis Simulation Environment (ITASE) and Advanced Framework for Simulation, Integration, and Modeling (AFSIM)
- TS/SCI clearance
- Master's degree in Science, Technology, Engineering, or Mathematics
Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $75,600.00 to $172,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.
- If this position is listed as remote or hybrid, you'll periodically work from a Booz Allen or client site facility.
- If this position is listed as onsite, you'll work with colleagues and clients in person, as needed for the specific role.
Threat Modeling Engineer, Senior
Posted 2 days ago
Job Viewed
Job Description
About the job Threat Modeling Engineer, Senior
Top Secret Clearance Jobs is dedicated to helping those with the most exclusive security clearance find their next career opportunity and get interviews within 48 hours.
Job Number: R0206267 Threat Modeling Engineer, Senior
Key Role: Research, design, develop, test, or supervise the manufacturing and installation of electrical equipment, components, or systems for commercial, industrial, military, or scientific use. Employ knowledge of electrical theory and materials properties. Apply advanced consulting skills or extensive technical expertise, including full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction, and mentor and supervise team members.
Basic Qualifications:
- Experience with software modeling and a variety of fidelity levels, including ground force weapon and C4ISR systems
- Knowledge of C++, Python, and Java
- Knowledge of MATLAB or Simulink
- Ability to learn or understand an engineering level system such as Radars, RF sensors, EW, tanks, artillery, rockets, UAS, radios, and directed energy systems
- Top Secret clearance
- Bachelor's degree in Science, Technology, Engineering, or Mathematics
- Experience working with Army ground systems
- Knowledge of fidelity levels of modeling, including parametric, engineering, and emulative
- Knowledge of simulation environments, including the Integrated Threat Analysis Simulation Environment (ITASE) and Advanced Framework for Simulation, Integration, and Modeling (AFSIM)
- TS/SCI clearance
- Master's degree in Science, Technology, Engineering, or Mathematics
Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $75,600.00 to $172,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.
- If this position is listed as remote or hybrid, you'll periodically work from a Booz Allen or client site facility.
- If this position is listed as onsite, you'll work with colleagues and clients in person, as needed for the specific role.
Be The First To Know
About the latest Threat modeling Jobs in United States !
Threat Modeling Engineer, Senior
Posted today
Job Viewed
Job Description
About the job Threat Modeling Engineer, Senior
Top Secret Clearance Jobs is dedicated to helping those with the most exclusive security clearance find their next career opportunity and get interviews within 48 hours.
Job Number: R0206267 Threat Modeling Engineer, Senior
Key Role: Research, design, develop, test, or supervise the manufacturing and installation of electrical equipment, components, or systems for commercial, industrial, military, or scientific use. Employ knowledge of electrical theory and materials properties. Apply advanced consulting skills or extensive technical expertise, including full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction, and mentor and supervise team members.
Basic Qualifications:
- Experience with software modeling and a variety of fidelity levels, including ground force weapon and C4ISR systems
- Knowledge of C++, Python, and Java
- Knowledge of MATLAB or Simulink
- Ability to learn or understand an engineering level system such as Radars, RF sensors, EW, tanks, artillery, rockets, UAS, radios, and directed energy systems
- Top Secret clearance
- Bachelor's degree in Science, Technology, Engineering, or Mathematics
- Experience working with Army ground systems
- Knowledge of fidelity levels of modeling, including parametric, engineering, and emulative
- Knowledge of simulation environments, including the Integrated Threat Analysis Simulation Environment (ITASE) and Advanced Framework for Simulation, Integration, and Modeling (AFSIM)
- TS/SCI clearance
- Master's degree in Science, Technology, Engineering, or Mathematics
Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $75,600.00 to $172,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.
- If this position is listed as remote or hybrid, you'll periodically work from a Booz Allen or client site facility.
- If this position is listed as onsite, you'll work with colleagues and clients in person, as needed for the specific role.
Threat Modeling Engineer, Senior
Posted today
Job Viewed
Job Description
About the job Threat Modeling Engineer, Senior
Top Secret Clearance Jobs is dedicated to helping those with the most exclusive security clearance find their next career opportunity and get interviews within 48 hours.
Job Number: R0206267 Threat Modeling Engineer, Senior
Key Role: Research, design, develop, test, or supervise the manufacturing and installation of electrical equipment, components, or systems for commercial, industrial, military, or scientific use. Employ knowledge of electrical theory and materials properties. Apply advanced consulting skills or extensive technical expertise, including full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction, and mentor and supervise team members.
Basic Qualifications:
- Experience with software modeling and a variety of fidelity levels, including ground force weapon and C4ISR systems
- Knowledge of C++, Python, and Java
- Knowledge of MATLAB or Simulink
- Ability to learn or understand an engineering level system such as Radars, RF sensors, EW, tanks, artillery, rockets, UAS, radios, and directed energy systems
- Top Secret clearance
- Bachelor's degree in Science, Technology, Engineering, or Mathematics
- Experience working with Army ground systems
- Knowledge of fidelity levels of modeling, including parametric, engineering, and emulative
- Knowledge of simulation environments, including the Integrated Threat Analysis Simulation Environment (ITASE) and Advanced Framework for Simulation, Integration, and Modeling (AFSIM)
- TS/SCI clearance
- Master's degree in Science, Technology, Engineering, or Mathematics
Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $75,600.00 to $172,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Work Model Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.
- If this position is listed as remote or hybrid, you'll periodically work from a Booz Allen or client site facility.
- If this position is listed as onsite, you'll work with colleagues and clients in person, as needed for the specific role.
Cloud Security Engineer - Threat Modeling
Posted 16 days ago
Job Viewed
Job Description
Must Have Technical/Functional Skills-
•3+ years of experience in cloud security and 2+ years in threat modeling.
•Strong understanding of at least one major cloud provider (AWS, Azure, or GCP).
•Familiarity with threat modeling frameworks (e.g., STRIDE, DREAD, PASTA, LINDDUN).
•Knowledge of cloud architecture patterns, containers, microservices, and serverless technologies.
•Hands-on experience with cloud-native security tools (e.g., AWS Security Hub, Azure Defender).
•Understanding of secure coding principles, DevSecOps, and IaC (e.g., Terraform, CloudFormation).
•Excellent communication and documentation skills.
Roles & Responsibilities
•Conduct threat modeling exercises for cloud-native applications, services, and infrastructure.
Work closely with DevOps, Cloud Engineering, and Application Security teams to identify potential threats early in the SDLC.
•Develop and maintain threat models using tools like Microsoft Threat Modeling Tool, IriusRisk, or equivalent.
•Recommend appropriate security controls and mitigation strategies based on modeling outcomes.
•Collaborate with architecture and engineering teams to integrate threat modeling into CI/CD pipelines.
•Translate technical risks into actionable items for business and technical stakeholders.
•Analyze new and existing cloud services for potential misconfigurations or vulnerabilities.
•Provide expertise in secure cloud design patterns and reference architectures.
•Assist in maintaining compliance with relevant standards such as ISO 27001, SOC 2, NIST, or CIS benchmarks.
Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.