Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Senior Threat Modeler role.
Rezi rewrites your resume against State Street's job description. Free.
Tailor your resume to this Senior Threat Modeler role.
Rezi rewrites your resume against State Street's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Threat Modeler posting at State Street — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Threat Modeler posting at State Street — free, in seconds.
About the Role
We are seeking a Senior Threat Modeler to perform threat modeling across enterprise applications, cloud platforms, APIs, and emerging technologies. This role is crucial for identifying security risks early in the development lifecycle and ensuring secure-by-design outcomes by partnering with architects, engineers, developers, and cybersecurity teams.
Responsibilities
- Conduct threat modeling activities for business applications, cloud-native platforms, APIs, and strategic technology initiatives.
- Analyze application architectures, data flows, trust boundaries, and cloud deployments to identify security threats and design weaknesses.
- Partner with application development, cloud engineering, and security teams to recommend practical risk mitigation strategies and secure design improvements.
- Perform security assessments using established methodologies such as STRIDE, MITRE ATT&CK, attack trees, and risk-based analysis techniques.
- Contribute to the development of threat modeling standards, reusable patterns, training materials, and secure-by-design practices across the enterprise.
Requirements
- Strong analytical, problem-solving, and risk assessment skills with the ability to identify complex security threats and vulnerabilities.
- Deep understanding of application security, cloud security, secure software development, and modern technology architectures.
- Strong communication and stakeholder management skills, with the ability to influence engineering and architecture teams.
- Experience working in large-scale, complex environments with diverse technology stacks and distributed teams.
- Ability to translate technical security findings into actionable recommendations that reduce business risk.
- Ability to effectively collaborate with development, engineering, architecture, and cybersecurity teams.
- Strong written and verbal communication skills with the ability to present technical findings to both technical and non-technical audiences.
Skills
- Cloud-native architectures and security controls across AWS, Azure, and Google Cloud
- Identify and mitigate risks in distributed, containerized, and platform-based environments
- Application security
- Cloud security
- Secure software development
- Modern technology architectures
- STRIDE
- MITRE ATT&CK
- Attack trees
- Risk-based analysis techniques
- OWASP Top 10
- API security
- Secure coding practices
- Microservices
- Containers
- Kubernetes
- CI/CD pipelines
- DevSecOps practices
Location
- State Street
Work Type
- Hybrid
- Standard business hours with flexibility to support global stakeholders across multiple time zones.
Experience Level
- Senior
- 12 years or more of experience in application security, cloud security, cybersecurity architecture, threat modeling, or related technology disciplines, with at least 7 years of hands-on cybersecurity experience preferred.
Education Level
- Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
- Professional certifications such as CISSP, CCSP, CSSLP, GWAPT, GWEB, AWS Security Specialty, Azure Security Engineer, or equivalent security certifications are highly desirable.
Salary/Compensations
- $120,000 - $202,500 Annual
Benefits
- Retirement savings plan (401K) with company match
- Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
- Paid-time off including vacation, sick leave, short term disability, and family care responsibilities
- Access to our Employee Assistance Program
- Incentive compensation including eligibility for annual performance-based awards
- Eligibility for certain tax advantaged savings plans
About the Company
- Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability.
- We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
- We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential.
- As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most.
- Join us in shaping the future.
- Discover more information on jobs at StateStreet.com/careers
- Read our CEO Statement
Equal Opportunity
- As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
- It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.