Skip to main content
CareerApp

Skill

Threat Modeling

Cybersecurity

Threat modeling is a structured process used in software and system design to identify potential security threats, vulnerabilities, and attack vectors before or during development. Security architects and developers use frameworks like STRIDE or PASTA to systematically analyze how a system could be attacked and design appropriate defenses. It is a proactive practice intended to reduce security risks early in the development lifecycle.

Threat Modeling in the job market

Last checked October 28, 2026

Open roles
39

on Career App

Employers
31

hiring for it

Median pay
$225,000

from 33 roles

Disclose pay
85%

of these roles

Open roles requiring Threat Modeling (39)

IT Cybersecurity Specialist (DEV/DTA)

U.S. Secret Service

Washington, DC · $143,913 – $187,093

This U.S. Secret Service role combines software development with database administration and cybersecurity oversight, suited for someone who can architect and secure applications while also managing data systems and leading security assessments.

Via USAJOBS · Apply there ↗

Bend Studio

Staff Security Architect

Bend Studio

San Mateo, CA

Sony is hiring a Staff Security Architect to design and oversee security across their enterprise cloud, platform, and AI systems. This role suits someone with 15+ years of hands-on security expertise who can influence technical direction, build scalable security patterns, and guide teams through complex architectural decisions across AWS, Google Cloud, and emerging AI technologies.

Listed on Bend Studio’s careers site · Apply there ↗

Director, Security Engineering

InstaLily

Full-time · New York, NY · $200,000 – $250,000

Lead security for an AI agent platform operating inside enterprise systems at scale, owning compliance programs, cloud hardening, and customer trust while spending 30–50% of your time writing automation and security tooling. This is a greenfield role reporting to the CEO at a well-funded Series B company where security directly influences deal closure and product design.

Listed on InstaLily’s careers site · Apply there ↗

Security Operations Engineer

AssemblyAI

Full-time · United States · $180,000 – $220,000

Join AssemblyAI's IT & Security team to own the operational execution of a mature security and compliance program protecting a high-scale Voice AI platform. You'll manage audit cycles, vendor risk, vulnerability triage, and security tooling for a lean, fast-moving company where your work directly shapes how security runs across the entire organization.

Listed on AssemblyAI’s careers site · Apply there ↗

Senior Security Engineer

Cohere

Full-time · New York, NY · CA$260,000 – CA$310,000 · Remote

This role leads security operations and application security practices across Cohere's AI products and infrastructure, integrating security throughout the development lifecycle. It suits experienced security engineers who can bridge technical security concerns with business priorities while collaborating across product and engineering teams.

Listed on Cohere’s careers site · Apply there ↗

AI Agent Security Architect

Replit

Full-time · Foster City, CA · $230 – $350 · Remote

This role leads AI security architecture for Replit's agent platform, designing defense systems and guardrails to safely govern autonomous AI code execution and tool use. It suits experienced security architects with deep expertise in AI/LLM threat modeling and a track record building production-grade security controls for non-deterministic systems.

Listed on Replit’s careers site · Apply there ↗

DevSecOps Engineer

Virta Health

Full-time · Remote · $179,451 – $187,900

Virta Health is hiring a DevSecOps Engineer to build and mature their application security program across GCP and Kubernetes infrastructure. This role suits someone who wants to shift security left in the development lifecycle, automate compliance and vulnerability detection, and help protect sensitive health data for a high-growth healthcare startup.

Listed on Virta Health’s careers site · Apply there ↗

Security Engineer, Application Security

Sentry

Full-time · San Francisco, CA · $150,000 – $200,000 · Remote

This role combines application and platform security work at a developer-focused company, requiring hands-on vulnerability management, security reviews, and threat modeling to keep Sentry's systems and customers safe as the product evolves. It suits engineers who enjoy cross-functional collaboration, automation, and ownership of security challenges in a fast-growing organization.

Listed on Sentry’s careers site · Apply there ↗

Senior Engineer

The Atlantic

Full-time · Washington, DC · $115,000 – $140,000

The Atlantic seeks a hands-on security engineer to protect their journalism platform and reader data by designing secure systems, reviewing code and architecture for vulnerabilities, and responding to incidents. This role is ideal for someone who combines backend and infrastructure expertise with security focus and wants to ship trustworthy products for a mission-driven organization.

Listed on The Atlantic’s careers site · Apply there ↗

State Street Corporation

Enterprise Identity & Access Management Architect

State Street Corporation

This role involves designing and validating security frameworks for blockchain and digital asset platforms at an enterprise level, working across engineering and cybersecurity teams. It suits experienced security architects who understand both traditional infrastructure hardening and the unique risks of distributed ledger systems.

Listed on State Street Corporation’s careers site · Apply there ↗

View all 39 on Jobs

Asked for alongside Threat Modeling

Measured from the 39 open roles that name Threat Modeling — not from a curated list.

What employers state they pay

Median

$225,000

Middle half

$183,000 – $290,000

From 33 of 39 open roles — the 85% that publish a range, annualized to USD. Only some employers state pay, and the ones that do skew to California and New York, where the law requires it.

Who employers are hiring

  • Mid18%
  • Senior53%
  • Lead / Staff / Principal24%
  • Management5%

From 38 roles whose posting states a level.

Where Threat Modeling roles are

Among the 26 of 39 open roles we could place on a map.

Employers hiring for Threat Modeling

31 in total, most open roles first.

Related skills

Curated neighbors in the taxonomy, whether or not employers ask for them together.

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.