Senior Consultant - Threat Modeler (TM)

Role - Threat Modeler (TM)

Technology - Threat Modeling, Cloud Security, Infrastructure as Code, Python

Location – Belfast/London

Compensation - Competitive (including bonus)

Job Description

We are seeking an experienced Threat Modeler to identify security threats, define appropriate mitigating controls, and deliver high-quality threat models within agreed timelines. The role requires strong cyber-security and cloud knowledge, an adversarial mindset, and the ability to work independently while collaborating with senior stakeholders and cross-functional technical teams.

Key Responsibilities - Perform threat modeling using a documented and repeatable process. - Identify threats and specify effective mitigating security controls while maintaining a high standard of quality. - Manage the lifecycle of identified threats and controls through completion. - Deliver threat models and supporting activities within established timelines. - Develop automation tools and scripts as required to support threat modeling activities. - Provide feedback, support, and recommendations to improve the existing threat modeling process. - Present threat model findings and recommendations to senior stakeholders, the team, and other technical teams. - Work with minimal supervision and collaborate effectively across diverse, cross-functional teams. Required Experience and Technical Skills - Minimum 6 years of IT experience, including at least 4 years in Cyber Security or Information Security. - Hands-on experience in threat modeling methodologies and techniques, including STRIDE, PASTA, attack trees, threat modeling tools, and MITRE ATT&CK. - Experience identifying vulnerabilities using CWE and OWASP guidance. - Practical experience in a cyber-security role. - Strong understanding of authentication, authorization, logging and monitoring, encryption, infrastructure security, and network segmentation. - Experience with scripting languages and Infrastructure as Code, such as Terraform or CloudFormation. - Experience using Jira or other ticketing systems. - Ability to design and review technical architectures. - Experience across several relevant areas, typically two to five years, such as operating-system hardening, CI/CD, pipelines, SDLC, CDK, GitOps, DevOps or Agile delivery, Docker, Kubernetes, serverless technologies, Helm, penetration testing, Snowflake, MongoDB, Terraform Cloud, GitHub, or Databricks. Essential Skills - Strong analytical ability, diligence, and attention to detail. - Adversarial mindset and effective problem-solving skills. - Ability to research using vendor documentation and continuously learn new technologies and methodologies. - Ability to create and maintain high-quality documentation. - Experience working in a regulated environment. - Strong communication, presentation, and collaboration skills. - Ability to build productive relationships across cross-functional teams. - Ability to work effectively with a diverse range of people and teams. Qualifications - Bachelor's degree in a computer-related field or equivalent work experience. Associate-level cloud certification from AWS, GCP, Azure, Oracle Cloud, or CompTIA Cloud+. - Associate-level or professional cyber-security certification. Relevant Cloud Certifications - AWS Certified Developer, AWS Certified Solutions Architect, or AWS Certified SysOps Administrator. - Google Associate Cloud Engineer or another professional GCP certification. - Microsoft Certified: Azure Developer Associate. - Oracle Cloud Infrastructure Certified Architect Associate or Cloud Operations Associate. - CompTIA Cloud+. Relevant Cyber-Security Certifications

• ISACA Certified Information Systems Auditor (CISA)

- EC-Council: Certified Cyber Threat Intelligence Analyst (CTIA) - EC-Council: Certified Ethical Hacker ver 9 (CEH) - GIAC Security Essentials (GSEC). - ISC2 Systems Security Certified Practitioner (SSCP). - CompTIA CySA+. - Microsoft Certified: Security Operations Analyst Associate or Information Protection Administrator Associate. Personal Attributes - High degree of initiative, flexibility, and ownership. - High customer orientation and quality awareness. - Excellent verbal and written communication skills. Why Infosys

Infosys is a global leader in next-generation digital services and consulting. We help clients navigate their digital transformation by combining deep industry expertise, an AI-powered core, agile delivery at scale, and a strong culture of continuous learning.