Senior Threat Modeler

State Street

Confirmed live yesterday High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Boston, MABerwyn, PAPrinceton, NJClifton, NJAustin, TX
Employment: Full-time
Posted: 113 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $188k

$133k $235k

below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $154,900–$222,000.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 335 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 182 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Senior Threat Modeler

Role Posting Log in to save

JOB TITLE: Senior Threat Modeler The Senior Threat Modeler joins the Security Architecture organization to identify security risks early in the development lifecycle and drive secure-by-design outcomes. You will perform threat modeling for enterprise applications, cloud-native platforms, APIs, and strategic technology initiatives. Day-to-day responsibilities include analyzing application architectures, data flows, and trust boundaries to recommend practical risk mitigation strategies. You will utilize established methodologies such as STRIDE, MITRE ATT&CK, attack trees, and risk-based analysis. The role requires deep knowledge of cloud-native architectures across AWS, Azure, and Google Cloud, as well as microservices, containers, Kubernetes, and CI/CD pipelines. You will also contribute to developing threat modeling standards and reusable patterns to strengthen the security posture of critical business systems and distributed technology platforms.

Skills

Threat Modeling STRIDE MITRE ATT&CK AWS Azure Google Cloud Platform Kubernetes CI/CD DevSecOps API Security OWASP Top 10 Microservices Containers Secure Software Development Lifecycle Attack Trees Risk Assessment

What you'll do

Conduct threat modeling for business applications, cloud-native platforms, APIs, and strategic technology initiatives.
Analyze application architectures, data flows, trust boundaries, and cloud deployments to identify security weaknesses.
Recommend practical risk mitigation strategies and secure design improvements to development and engineering teams.
Perform security assessments using STRIDE, MITRE ATT&CK, attack trees, and risk-based analysis techniques.
Develop threat modeling standards, reusable patterns, and training materials for secure-by-design practices.
Identify and mitigate security risks in distributed, containerized, and platform-based cloud environments across AWS, Azure, and GCP.
Translate technical security findings into actionable recommendations to reduce business risk.

What we're looking for

Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.
12 years or more of experience in application security, cloud security, cybersecurity architecture, threat modeling, or related technology disciplines.
At least 7 years of hands-on cybersecurity experience (preferred).
Demonstrated experience conducting threat modeling for enterprise applications, APIs, cloud platforms, and distributed systems.
Strong expertise in application security principles, secure software development lifecycles, OWASP Top 10, API security, and secure coding practices.
Experience assessing and securing cloud environments across AWS, Azure, and/or Google Cloud Platform.
Knowledge of microservices, containers, Kubernetes, CI/CD pipelines, DevSecOps practices, and modern software architectures.
Professional certifications such as CISSP, CCSP, CSSLP, GWAPT, GWEB, AWS Security Specialty, Azure Security Engineer, or equivalent (preferred).

Similar roles

Platform Consultant, Threat Modeling

Allstate

Remote (IL) 116 days ago $90,700–$195,700

Threat Modeling STRIDE CI/CD AWS Azure GCP Python Java Go Rust JavaScript OWASP Top 10 MITRE ATT&CK NIST Cybersecurity Framework OAuth 2.0 OpenID Connect SAML IAM RESTful APIs OpenAPI Swagger Zero Trust Agile Source Control

3+ yrs exp Remote

Save

Senior Application Security Architect

State Street

Quincy, MA +4 113 days ago $120,000–$202,500

Application Security AI Security Kubernetes DevSecOps CI/CD Infrastructure as Code SAST DAST IAST Software Composition Analysis Threat Modeling Zero Trust API Security OWASP Top 10 RAG Cloud-Native Containers SaaS SSDLC

10+ yrs exp Hybrid

Save

Senior Cloud Security Architect

State Street

Quincy, MA +3 40 days ago

AWS Microsoft Azure Google Cloud Platform Kubernetes Containers Infrastructure as Code CI/CD DevSecOps Identity and Access Management Network Security Data Protection Encryption Zero Trust SaaS Cloud Security Architecture TOGAF SABSA

10+ yrs exp Hybrid

Save

Senior Threat Intelligence Analyst

JLL (Jones Lang LaSalle)

Remote (Chicago, IL) +7 5 days ago $170,000–$200,000

Threat Intelligence EDR SIEM TIP IPS WAF MITRE ATT&CK NIST 800-53 ISO 27001 CIS AI SOC IR Detection Engineering Cybersecurity

5+ yrs exp Remote

Save

Senior Threat Intelligence Engineer

Coinbase

Remote 17 days ago $180,370–$212,200

Threat Intelligence Python Go SQL OSINT Incident Response Security Research Cyber Investigations Data Analysis Scripting Vertex Synapse Threat Intelligence Platform

5+ yrs exp Remote

Save

Advanced Threat Analyst, Assistant Vice President

State Street

Kilkenny, Ireland, Ireland +1 13 days ago

Threat Hunting SIEM Incident Response MITRE ATT&CK Cyber Intelligence Artificial Intelligence Cyber Architecture Offensive Security CISSP CISA CRISC OSCP OSCE GREM GCFA GNFA

5+ yrs exp

Save