Haystack
← Back to Jobs
Other
CO

Threat Modeler

Covetus, LLCIrving, TX🇺🇸United StatesPosted 11 Aug 2026

Why This Role Stands Out

This hybrid role at Covetus, LLC offers significant opportunities to shape security strategies and advance your career in threat modeling. You'll thrive here if you have a strong background in cybersecurity, deep experience with threat modeling methodologies, and a passion for designing secure architectures. Apply now to join a dynamic team and make a real impact.

Quick Overview

Work Type
Hybrid
Level
Mid Senior

Job Description

Job Location: Irving, TX/Jersey City, NJ/Tampa, FL
Exp: 6 years
Employement type: Full time
 
Job Description:
Must Have Technical/Functional Skills
 
Technical skills:
Expected to have two to five years of experience in several of the following:
• IT experience minimum of 6 years with minimum of 4 years Cybersecurity/Information Security – must have.
• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) – must have demonstrated experience.
• Experience working in a cybersecurity role – must have.
• Security practices pertaining to authentication, authorization, logging/monitoring,  encryption, infrastructure security, network/segmentation – must have.
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) – must have.
• Jira or other ticketing systems – must have.
• Design and review technical architectures – must have.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (must have).
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (must have).
• Ensure all software platforms adhere to Citi''''s security standards and Software Development Life Cycle (SDLC) processes (must have).
• Identifying vulnerabilities using CWE or OWASP.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Cloud Development Kit (CDK), GitOps.
• Operating in a DevOps / agile team structure.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Karat Assessment (Python focus) is required for consideration.
 
Roles & Responsibilities:
 
• Threat Modeling using a documented process. 
• Development of automation tools as required. 
• Maintain a high standard of work in identifying threats and specifying mitigating controls. 
• Attending to the lifecycle of identified threats and controls. 
• Delivery of threat models and supporting tasks within existing timeframes. 
• Provide feedback, support, and improvements to the existing threat modeling process. 
• Present work to seniors, the team, and other technical teams. 
• Work with little supervision to complete work 
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.

Skills

Docker
FastAPI
MongoDB
Encryption
OWASP
Snowflake
Agile
CDK
CloudFormation
Databricks
Helm
Jira
Python
Terraform
Ticketing Systems
pytest

Similar jobs

Browse related jobs

Apply now