Expert IT Security Specialist / Threat Modelling Expert
Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · DevOps
In short
Nordea is seeking an Expert IT Security Specialist / Threat Modelling Expert to develop and implement a robust Threat Modelling Program within the banking sector. This role involves leveraging AI tools, identifying and mitigating risks early in the SDLC, and influencing the product roadmap for enhanced security automation.
Responsibilities
- Develop and deliver a robust Threat Modelling Program for a customer in the banking sector industry.
- Leverage AI tools to support and enhance threat modelling.
- Participate in threat modeling to identify and mitigate risks before code is written.
- Ensure security requirements are translated into actionable, developer-friendly guidance.
- Work with customer stakeholders to evaluate the current state of customer threat modelling capabilities.
- Recommend and develop supporting infrastructure (tools, applications) to support threat modelling efforts.
- Develop, maintain, update, and enhance secure design patterns and secure coding standards.
- Integrate the current threat modelling process into the Threat Modelling Platform.
- Influence the Threat Model product vision and roadmap to elevate business outcomes and build scalable, efficient, and fault-resistant automation solutions.
- Utilize tools for process automation.
Requirements
- Excellent written and spoken communication skills.
- Proven ability to develop project plans incorporating AI solutions.
- Experience as a Security Champion in SDLC Development.
- Experience working with threat modelling methodologies/frameworks such as STRIDE, MITRE ATLAS, OWASP Top 10, MITRE ATT&CK™, or other.
- 3-5+ years of experience in the Threat Modelling area.
- Hands-on experience with AI-driven tools.
- Experience with threat modelling techniques and processes in an enterprise-level organization.
- Experience interpreting networking, data flow, and architectural diagrams to identify vectors an adversary may seek to exploit.
- Detailed knowledge of cyber threats, threat actors, and the tactics, techniques, and procedures commonly used by cyber adversaries.
- Understanding of networking technologies.
Desired Qualifications
- A real problem solver and good with people.
- A tech-obsessed individual comfortable in learning and sharing new concepts.
- Strong willingness to learn and ability to translate technical requirements to the business.
- A good listener who asks the right questions and enjoys conversing with customers.
- Proven ability to design and implement automation solutions.
- Hands-on experience with tools that support process automation.
Benefits
- Opportunities to expand skills and advance career.
- Inspiring working environment with international teams.
- Hybrid working model balancing collaboration and flexibility.
- A culture that fosters performance and growth.
- Various opportunities to evolve, develop, and learn from brilliant colleagues with diverse backgrounds.
#IT#Security#Threat Modelling#Banking
Company
Nordea
Job Posted
2 weeks ago
Expires
in 1 day
Employment Type
Full Time
WorkMode
Hybrid
Experience Level
Mid-Senior
Locations
Warszawa, Poland
Gdańsk, Poland
Applicants
Be an early applicant