IT Security Consultant - Threat Modeling Activities

Contract: B2B

Rate: 130 PLN/h

Location: Gdańsk/Tricity OR Warsaw

Hybrid mode: 3 days per week at the office

Language: English (fluent)

Summary: The role of the IT Security Consultant focuses on enhancing cybersecurity by supporting threat modeling activities, specifically in assessing application-level security concerns related to emerging AI threats.

Main Responsibilities:

• Support threat modeling workshops with application and platform teams.

• Assist in identifying assets, trust boundaries, attack surfaces, threats, and security risks.

• Create and update threat models using the approved tooling, methodology, and provided templates.

• Review solution designs and architecture documentation with support from senior team members.

• Assist in mapping relevant threat scenarios to application components and data flows.

• Document identified threats, risks, assumptions, and proposed mitigation actions.

• Collaborate with development and security teams to collect information and follow up on remediation activities.

• Track identified threats, mitigation actions, and remediation status.

Key Requirements:

• Knowledge of IT Security Architecture principles.

• General understanding of security threats related to AI agents, machine learning systems, and large language models.

• Basic knowledge of threat modeling methodologies, particularly STRIDE.

• Ability to support the identification of assets, trust boundaries, attack surfaces, threat actors, and abuse cases under guidance.

• Ability to use and update existing threat models and threat libraries.

• Ability to support the mapping of threats to predefined security controls and remediation actions.

Nice to Have:

• Ability to support the translation of technical threats into understandable business risks under guidance.

• Basic knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS, with the ability to use these frameworks as references during threat assessments.