Senior Threat Modeler

State Street

Confirmed live today High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Boston, MABerwyn, PAPrinceton, NJClifton, NJAustin, TX
Salary: $120,000–$202,500 / yr
Posted: 66 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $187k

This role $161k

$108k most similar roles pay here $236k

This role pays less than 70% of similar roles. Most pay $154,862–$219,131 — the shaded band above. At the midpoint, this role pays about $161k versus about $187k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 186 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 182 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Senior Threat Modeler

Role Posting Log in to save

As a Senior Threat Modeler within the Security Architecture organization, you will perform threat modeling activities across enterprise applications, cloud platforms, APIs, and emerging technologies to drive secure-by-design outcomes. You will analyze application architectures, data flows, and trust boundaries to identify security risks early in the development lifecycle while partnering with architects and engineers to recommend mitigation strategies. Your daily work involves performing assessments using STRIDE, MITRE ATT&CK, attack trees, and risk-based analysis. You will also develop threat modeling standards and reusable patterns. The role requires expertise in cloud-native architectures across AWS, Azure, and Google Cloud, as well as knowledge of microservices, containers, Kubernetes, CI/CD pipelines, and DevSecOps. You must possess strong skills in application security, OWASP Top 10, and translating technical findings into actionable recommendations to reduce risk in complex environments.

Skills

Threat Modeling STRIDE MITRE ATT&CK AWS Azure Google Cloud Platform Kubernetes CI/CD DevSecOps OWASP Top 10 API Security Microservices Containers Secure Software Development Lifecycle Risk Assessment Security Architecture

What you'll do

Perform threat modeling for business applications, cloud-native platforms, APIs, and strategic technology initiatives.
Analyze application architectures, data flows, trust boundaries, and cloud deployments to identify security weaknesses.
Recommend practical risk mitigation strategies and secure design improvements to engineering and product teams.
Execute security assessments using methodologies such as STRIDE, MITRE ATT&CK, and attack trees.
Develop threat modeling standards, reusable patterns, and training materials for enterprise-wide use.
Identify and mitigate risks within distributed, containerized, and multi-cloud environments (AWS, Azure, GCP).
Translate technical security findings into actionable recommendations to reduce business risk.

What we're looking for

Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
12 years or more of experience in application security, cloud security, cybersecurity architecture, threat modeling, or related technology disciplines.
At least 7 years of hands-on cybersecurity experience is preferred.
Demonstrated experience conducting threat modeling for enterprise applications, APIs, cloud platforms, and distributed systems.
Expertise in application security principles, secure software development lifecycles, OWASP Top 10, API security, and secure coding practices.
Experience assessing and securing cloud environments across AWS, Azure, and/or Google Cloud Platform.
Proficiency with threat modeling methodologies such as STRIDE, MITRE ATT&CK, attack trees, and adversary-based risk analysis.
Professional certifications such as CISSP, CCSP, CSSLP, GWAPT, GWEB, or relevant cloud security certifications are highly desirable.

Similar roles

Platform Consultant, Threat Modeling

Allstate

Remote (IL) 69 days ago $90,700–$195,700

Threat Modeling STRIDE Attack Trees Kill Chains CI/CD AWS Azure GCP Python Java JavaScript Go Rust RESTful APIs OpenAPI Swagger OWASP Top 10 MITRE ATT&CK NIST Cybersecurity Framework OAuth 2.0 OpenID Connect SAML IAM Zero Trust

3+ yrs exp Remote

Save

Senior Cyber Threat Defense Security Operations Engineer

Proofpoint

Draper, UT 25 days ago $136,200–$214,005

Incident Response SIEM SOAR EDR XDR Python PowerShell Bash MITRE ATT&CK Threat Hunting Threat Modeling AWS Microsoft Azure Google Cloud Platform Digital Forensics AI DLP STRIDE

8+ yrs exp

Save

Senior Application Security Architect

State Street

Quincy, MA +4 66 days ago $120,000–$202,500

Application Security AI Security Kubernetes Containers API Security DevSecOps CI/CD Infrastructure as Code SAST DAST IAST SCA Threat Modeling Zero Trust OWASP Top 10 RAG Cloud-Native SSDLC

10+ yrs exp Hybrid

Save

Cloud Security Architect

State Street

Quincy, MA +4 65 days ago $90,000–$157,500

AWS Microsoft Azure Google Cloud Platform Kubernetes Containers Identity and Access Management Network Security Data Protection Encryption DevSecOps CI/CD Infrastructure as Code Zero Trust SaaS Cloud-Native Architecture Security Automation

8+ yrs exp Hybrid

Save

Security Architecture & Engineering

JPMorgan Chase

McLean, VA 31 days ago

IAM OAuth2.0 SCIM WebAuthn OPA RBAC Python Java C/C++ AWS Azure GCP Kubernetes Terraform CI/CD Kafka RabbitMQ SQL Microservices STRIDE MITRE ATT&CK NIST ISO 27001 SOC 2 IaC API Security Encryption

Save

Application Security Engineer

State Street

Quincy, MA +3 47 days ago $120,000–$202,500

AppSec ADR DevSecOps SAST DAST SCA RASP WAAP API Security OWASP Top 10 Java Python .NET Node.js AWS Azure Ansible Terraform Kubernetes CI/CD Infrastructure as Code

6+ yrs exp

Save