Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Senior Consultant- Threat Modeler (TM) role.
Rezi rewrites your resume against Infosys's job description. Free.
Tailor your resume to this Senior Consultant- Threat Modeler (TM) role.
Rezi rewrites your resume against Infosys's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Consultant- Threat Modeler (TM) posting at Infosys — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Consultant- Threat Modeler (TM) posting at Infosys — free, in seconds.
About the Role
We are seeking an experienced Threat Modeler to identify security threats, define appropriate mitigating controls, and deliver high-quality threat models within agreed timelines. The role requires strong cyber-security and cloud knowledge, an adversarial mindset, and the ability to work independently while collaborating with senior stakeholders and cross-functional technical teams.
Responsibilities
- Perform threat modeling using a documented and repeatable process.
- Identify threats and specify effective mitigating security controls while maintaining a high standard of quality.
- Manage the lifecycle of identified threats and controls through completion.
- Deliver threat models and supporting activities within established timelines.
- Develop automation tools and scripts as required to support threat modeling activities.
- Provide feedback, support, and recommendations to improve the existing threat modeling process.
- Present threat model findings and recommendations to senior stakeholders, the team, and other technical teams.
- Work with minimal supervision and collaborate effectively across diverse, cross-functional teams.
Requirements
- Minimum 6 years of IT experience, including at least 4 years in Cyber Security or Information Security.
- Hands-on experience in threat modeling methodologies and techniques, including STRIDE, PASTA, attack trees, threat modeling tools, and MITRE ATT&CK.
- Experience identifying vulnerabilities using CWE and OWASP guidance.
- Practical experience in a cyber-security role.
- Strong understanding of authentication, authorization, logging and monitoring, encryption, infrastructure security, and network segmentation.
- Experience with scripting languages and Infrastructure as Code, such as Terraform or CloudFormation.
- Experience using Jira or other ticketing systems.
- Ability to design and review technical architectures.
- Experience across several relevant areas, typically two to five years, such as operating-system hardening, CI/CD, pipelines, SDLC, CDK, GitOps, DevOps or Agile delivery, Docker, Kubernetes, serverless technologies, Helm, penetration testing, Snowflake, MongoDB, Terraform Cloud, GitHub, or Databricks.
- Strong analytical ability, diligence, and attention to detail.
- Adversarial mindset and effective problem-solving skills.
- Ability to research using vendor documentation and continuously learn new technologies and methodologies.
- Ability to create and maintain high-quality documentation.
- Experience working in a regulated environment.
- Strong communication, presentation, and collaboration skills.
- Ability to build productive relationships across cross-functional teams.
- Ability to work effectively with a diverse range of people and teams.
- High degree of initiative, flexibility, and ownership.
- High customer orientation and quality awareness.
- Excellent verbal and written communication skills.
Skills
- Threat Modeling
- Cloud Security
- Infrastructure as Code
- Python
- STRIDE
- PASTA
- Attack trees
- Threat modeling tools
- MITRE ATT&CK
- CWE
- OWASP
- Authentication
- Authorization
- Logging and monitoring
- Encryption
- Infrastructure security
- Network segmentation
- Scripting languages
- Terraform
- CloudFormation
- Jira
- Operating-system hardening
- CI/CD
- SDLC
- CDK
- GitOps
- DevOps
- Agile delivery
- Docker
- Kubernetes
- Serverless technologies
- Helm
- Penetration testing
- Snowflake
- MongoDB
- Terraform Cloud
- GitHub
- Databricks
Location
- Belfast
- London
Work Type
- Full-time
Experience Level
- Minimum 6 years of IT experience
- At least 4 years in Cyber Security or Information Security
- Typically two to five years of experience in specific areas
Education Level
- Bachelor's degree in a computer-related field or equivalent work experience
- Associate-level cloud certification from AWS, GCP, Azure, Oracle Cloud, or CompTIA Cloud+
- Associate-level or professional cyber-security certification
Salary/Compensations
- Competitive (including bonus)
About the Company
- Infosys is a global leader in next-generation digital services and consulting.
- We help clients navigate their digital transformation by combining deep industry expertise, an AI-powered core, agile delivery at scale, and a strong culture of continuous learning.
Equal Opportunity
- All aspects of employment at Infosys are based on merit, competence, and performance.
- We are committed to embracing diversity and creating an inclusive environment for all employees.
- Infosys is proud to be an equal opportunity employer.