# Threat Modeling

Skill · Cybersecurity

Canonical page: https://career.thegoodapps.co/skills/threat-modeling

Threat modeling is a structured process used in software and system design to identify potential security threats, vulnerabilities, and attack vectors before or during development. Security architects and developers use frameworks like STRIDE or PASTA to systematically analyze how a system could be attacked and design appropriate defenses. It is a proactive practice intended to reduce security risks early in the development lifecycle.

## Threat Modeling in the job market

- Open roles: 41
- Employers hiring: 31
- Median stated pay: $229,000 (middle half $185,000 – $285,000), from 35 of 41 open roles — the 85% that publish a range, annualized to USD. Only some employers state pay, and the ones that do skew to California and New York, where the law requires it.
- Last checked: September 12, 2026

## Asked for alongside Threat Modeling

Measured from the 41 open roles that name Threat Modeling, not from a curated list.

- [Python](https://career.thegoodapps.co/skills/python) — 16 roles (39.0%)
- [Amazon Web Services (AWS)](https://career.thegoodapps.co/skills/amazon-web-services-aws) — 13 roles (31.7%)
- [Cloud Security](https://career.thegoodapps.co/skills/cloud-security) — 10 roles (24.4%)
- [Go](https://career.thegoodapps.co/skills/go) — 9 roles (22.0%)
- [Kubernetes](https://career.thegoodapps.co/skills/kubernetes) — 9 roles (22.0%)
- [Microsoft Azure](https://career.thegoodapps.co/skills/microsoft-azure) — 7 roles (17.1%)
- [Identity And Access Management](https://career.thegoodapps.co/skills/identity-and-access-management) — 6 roles (14.6%)
- [Rust](https://career.thegoodapps.co/skills/rust) — 6 roles (14.6%)

## Seniority of these roles

- Mid: 4 (11%)
- Senior: 27 (73%)
- Lead / Staff / Principal: 5 (14%)
- Management: 1 (3%)

From 37 roles whose posting states a level.

## Roles that use Threat Modeling

- [Security Engineer](https://career.thegoodapps.co/occupations/security-engineer) — 6
- [Senior Security Engineer](https://career.thegoodapps.co/occupations/senior-security-engineer) — 5
- [Application Security Lead](https://career.thegoodapps.co/occupations/application-security-lead) — 1
- [Cloud Security Engineer](https://career.thegoodapps.co/occupations/cloud-security-engineer) — 1
- [Cyber Security Architect](https://career.thegoodapps.co/occupations/cyber-security-architect) — 1
- [Engineering Manager](https://career.thegoodapps.co/occupations/engineering-manager) — 1

## Employers hiring for Threat Modeling

- [Menlo Ventures Portfolio](https://career.thegoodapps.co/organizations/menlo-ventures-portfolio) — 5 open roles
- [Astranis](https://career.thegoodapps.co/organizations/astranis) — 2 open roles
- [CrowdStrike](https://career.thegoodapps.co/organizations/crowdstrike) — 2 open roles
- [Expedia Group](https://career.thegoodapps.co/organizations/expedia-group) — 2 open roles
- [Moderna](https://career.thegoodapps.co/organizations/moderna) — 2 open roles
- [Suno](https://career.thegoodapps.co/organizations/suno) — 2 open roles

Related skills: [Penetration Testing](https://career.thegoodapps.co/skills/penetration-testing), [Risk Assessment](https://career.thegoodapps.co/skills/risk-assessment), [Secure Coding](https://career.thegoodapps.co/skills/secure-coding), [Security Architecture Review](https://career.thegoodapps.co/skills/security-architecture-review), [OWASP](https://career.thegoodapps.co/skills/owasp), [Security Engineering](https://career.thegoodapps.co/skills/security-engineering), [Security Requirements Analysis](https://career.thegoodapps.co/skills/security-requirements-analysis), [Vulnerability](https://career.thegoodapps.co/skills/vulnerability)

## Open roles requiring Threat Modeling (41)

- [Senior Security Engineer](https://career.thegoodapps.co/jobs/7dbbf23a-a858-455a-82c0-d8a54db78681/senior-security-engineer-at-cohere) at [Cohere](https://career.thegoodapps.co/organizations/cohere) — Full-time, New York, NY · Remote, CA$260,000 – CA$310,000
- [AI Security Consulting Director](https://career.thegoodapps.co/jobs/679d2cc7-dc14-445e-8af3-4eaa5b402c31/ai-security-consulting-director-at-cna-financial) at [CNA Financial](https://career.thegoodapps.co/organizations/cna-financial) — Chicago, IL, $97,000 – $189,000
- [Sr. Product Security Engineer](https://career.thegoodapps.co/jobs/ec32b783-ea57-47c1-bf07-6b8afd5f9904/sr-product-security-engineer-at-medtronic) at [Medtronic](https://career.thegoodapps.co/organizations/medtronic) — Full-time, $132,000 – $198,000
- [API Security Engineer](https://career.thegoodapps.co/jobs/e565610a-2ad7-424b-803c-f6f02582768b/api-security-engineer-at-moderna) at [Moderna](https://career.thegoodapps.co/organizations/moderna) — $145,900 – $234,200
- [Sr. Manager, Threat Engineering](https://career.thegoodapps.co/jobs/a994f842-271f-4683-a918-4ed06f5069e5/sr-manager-threat-engineering-at-tory-burch) at [Tory Burch](https://career.thegoodapps.co/organizations/tory-burch) — Jersey City, NJ, $165,000 – $200,000
- [Intellectual Property Security Engineer](https://career.thegoodapps.co/jobs/84632960-5798-478e-9e9e-4d6195171733/intellectual-property-security-engineer-at-nvidia) at [NVIDIA](https://career.thegoodapps.co/organizations/nvidia) — Full-time, $184,000 – $356,500
- [Principle, Vulnerability Analyst](https://career.thegoodapps.co/jobs/d265541d-7964-4a20-b9b6-91fc15a58c8a/principle-vulnerability-analyst-at-mastercard) at [Mastercard](https://career.thegoodapps.co/organizations/mastercard) — Full-time, O Fallon, MO, $152,000 – $258,000
- [Senior Vulnerability Management Engineer](https://career.thegoodapps.co/jobs/1a33039f-160f-4a08-a5ec-8fdc668487ea/senior-vulnerability-management-engineer-at-lseg) at [LSEG](https://career.thegoodapps.co/organizations/lseg)
- [Sr. Security Architect](https://career.thegoodapps.co/jobs/fae83c1d-22b8-4e58-9ee1-5f7c47e76658/sr-security-architect-at-intel) at [Intel](https://career.thegoodapps.co/organizations/intel) — Full-time, $190,610 – $361,480
- [Strategic Advisory Services, AI Security Consultant (Remote)](https://career.thegoodapps.co/jobs/1a08e243-850b-41c2-8373-9dfd7c0ca4b0/strategic-advisory-services-ai-security-consultant-remote-at-crowdstrike) at [CrowdStrike](https://career.thegoodapps.co/organizations/crowdstrike) — Full-time, Remote, $95,000 – $140,000

All 41 open roles: https://career.thegoodapps.co/jobs?skills=92d09573-b33e-4fcb-a034-dafe9adb004b