Skill
Threat Modeling
Cybersecurity
Threat modeling is a structured process used in software and system design to identify potential security threats, vulnerabilities, and attack vectors before or during development. Security architects and developers use frameworks like STRIDE or PASTA to systematically analyze how a system could be attacked and design appropriate defenses. It is a proactive practice intended to reduce security risks early in the development lifecycle.
Threat Modeling in the job market
Last checked October 28, 2026
- Open roles
- 39
- Employers
- 31
- Median pay
- $225,000
- Disclose pay
- 85%
on Career App
hiring for it
from 33 roles
of these roles
Open roles requiring Threat Modeling (39)
IT Cybersecurity Specialist (DEV/DTA)
U.S. Secret Service
Washington, DC · $143,913 – $187,093
This U.S. Secret Service role combines software development with database administration and cybersecurity oversight, suited for someone who can architect and secure applications while also managing data systems and leading security assessments.
Via USAJOBS · Apply there ↗
Staff Security Architect
Bend Studio
San Mateo, CA
Sony is hiring a Staff Security Architect to design and oversee security across their enterprise cloud, platform, and AI systems. This role suits someone with 15+ years of hands-on security expertise who can influence technical direction, build scalable security patterns, and guide teams through complex architectural decisions across AWS, Google Cloud, and emerging AI technologies.
Listed on Bend Studio’s careers site · Apply there ↗
Director, Security Engineering
InstaLily
Full-time · New York, NY · $200,000 – $250,000
Lead security for an AI agent platform operating inside enterprise systems at scale, owning compliance programs, cloud hardening, and customer trust while spending 30–50% of your time writing automation and security tooling. This is a greenfield role reporting to the CEO at a well-funded Series B company where security directly influences deal closure and product design.
Listed on InstaLily’s careers site · Apply there ↗
Security Operations Engineer
AssemblyAI
Full-time · United States · $180,000 – $220,000
Join AssemblyAI's IT & Security team to own the operational execution of a mature security and compliance program protecting a high-scale Voice AI platform. You'll manage audit cycles, vendor risk, vulnerability triage, and security tooling for a lean, fast-moving company where your work directly shapes how security runs across the entire organization.
Listed on AssemblyAI’s careers site · Apply there ↗
Senior Security Engineer
Cohere
Full-time · New York, NY · CA$260,000 – CA$310,000 · Remote
This role leads security operations and application security practices across Cohere's AI products and infrastructure, integrating security throughout the development lifecycle. It suits experienced security engineers who can bridge technical security concerns with business priorities while collaborating across product and engineering teams.
Listed on Cohere’s careers site · Apply there ↗
AI Agent Security Architect
Replit
Full-time · Foster City, CA · $230 – $350 · Remote
This role leads AI security architecture for Replit's agent platform, designing defense systems and guardrails to safely govern autonomous AI code execution and tool use. It suits experienced security architects with deep expertise in AI/LLM threat modeling and a track record building production-grade security controls for non-deterministic systems.
Listed on Replit’s careers site · Apply there ↗
DevSecOps Engineer
Virta Health
Full-time · Remote · $179,451 – $187,900
Virta Health is hiring a DevSecOps Engineer to build and mature their application security program across GCP and Kubernetes infrastructure. This role suits someone who wants to shift security left in the development lifecycle, automate compliance and vulnerability detection, and help protect sensitive health data for a high-growth healthcare startup.
Listed on Virta Health’s careers site · Apply there ↗
Security Engineer, Application Security
Sentry
Full-time · San Francisco, CA · $150,000 – $200,000 · Remote
This role combines application and platform security work at a developer-focused company, requiring hands-on vulnerability management, security reviews, and threat modeling to keep Sentry's systems and customers safe as the product evolves. It suits engineers who enjoy cross-functional collaboration, automation, and ownership of security challenges in a fast-growing organization.
Listed on Sentry’s careers site · Apply there ↗
Senior Engineer
The Atlantic
Full-time · Washington, DC · $115,000 – $140,000
The Atlantic seeks a hands-on security engineer to protect their journalism platform and reader data by designing secure systems, reviewing code and architecture for vulnerabilities, and responding to incidents. This role is ideal for someone who combines backend and infrastructure expertise with security focus and wants to ship trustworthy products for a mission-driven organization.
Listed on The Atlantic’s careers site · Apply there ↗
Enterprise Identity & Access Management Architect
State Street Corporation
This role involves designing and validating security frameworks for blockchain and digital asset platforms at an enterprise level, working across engineering and cybersecurity teams. It suits experienced security architects who understand both traditional infrastructure hardening and the unique risks of distributed ledger systems.
Listed on State Street Corporation’s careers site · Apply there ↗
Asked for alongside Threat Modeling
Measured from the 39 open roles that name Threat Modeling — not from a curated list.
- Python21 roles53.8%
- Amazon Web Services (AWS)14 roles35.9%
- Kubernetes12 roles30.8%
- Cloud Security10 roles25.6%
- Go10 roles25.6%
- Rust8 roles20.5%
- CI/CD6 roles15.4%
- Microsoft Azure6 roles15.4%
What employers state they pay
Median
$225,000
Middle half
$183,000 – $290,000
From 33 of 39 open roles — the 85% that publish a range, annualized to USD. Only some employers state pay, and the ones that do skew to California and New York, where the law requires it.
Who employers are hiring
- Mid18%
- Senior53%
- Lead / Staff / Principal24%
- Management5%
From 38 roles whose posting states a level.
Where Threat Modeling roles are
Among the 26 of 39 open roles we could place on a map.
Roles that use Threat Modeling
Employers hiring for Threat Modeling
31 in total, most open roles first.
- MPMenlo Ventures Portfolio6 roles
- AAstranis2 roles
- Moderna2 roles
- TTemporal2 roles
- AAssemblyAI1 role
Bend Studio1 role
Related skills
Curated neighbors in the taxonomy, whether or not employers ask for them together.