вчера

IT Security Consultant – Threat Modeling

ориентир по рынку
вакансия зп не указана
в среднем 161 774 ₽
Загрузи резюме, чтобы видеть мэтчи с вакансиейЗагрузи резюме, чтобы видеть мэтч с вакой

подготовься к отклику

ai-инструменты

Чтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузи резюме

описание

IT Security Consultant – Threat Modeling

We are currently looking for an IT Security Consultant to support threat modeling activities for our global client from the banking industry. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.

You will support application-level security assessments and threat mapping, with a particular focus on threats related to AI agents, machine learning systems and large language models, working under the guidance of senior specialists.

Key Details:

- Rate: up to 120 PLN/h (B2B)

- Work Model: Hybrid, 3 days a week from the office, full-time (40h/week)

- Location: Gdańsk or Gdynia preferred; Warsaw will also be considered

задачи

  • Support application-level security assessments and threat modeling activities
  • Help identify assets, trust boundaries, attack surfaces, threat actors and abuse cases
  • Use and update existing threat models and threat libraries
  • Support the mapping of threats to predefined security controls and remediation actions
  • Help translate technical threats into understandable business risks
  • Work closely with and learn from senior security specialists

требования

  • Knowledge of IT security architecture principles
  • General understanding of security threats related to AI agents, machine learning systems and large language models
  • Basic knowledge of threat modeling methodologies, particularly STRIDE
  • Ability to support threat identification and mapping activities under guidance
  • Advanced English
  • Basic knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS, and the ability to use them as references during threat assessments
  • Ability to translate technical threats into business risks

условия

Условий нет

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.