Senior Consultant - Threat Modeler (TM)

Job DescriptionRole - Threat Modeler (TM)Technology - Threat Modeling, Cloud Security, Infrastructure as Code, PythonLocation – Belfast/LondonCompensation - Competitive (including bonus)Job DescriptionWe are seeking an experienced Threat Modeler to identify security threats, define appropriate mitigating controls, and deliver high-quality threat models within agreed timelines. The role requires strong cyber-security and cloud knowledge, an adversarial mindset, and the ability to work independently while collaborating with senior stakeholders and cross-functional technical teams.Key ResponsibilitiesPerform threat modeling using a documented and repeatable process.Identify threats and specify effective mitigating security controls while maintaining a high standard of quality.Manage the lifecycle of identified threats and controls through completion.Deliver threat models and supporting activities within established timelines.Develop automation tools and scripts as required to support threat modeling activities.Provide feedback, support, and recommendations to improve the existing threat modeling process.Present threat model findings and recommendations to senior stakeholders, the team, and other technical teams.Work with minimal supervision and collaborate effectively across diverse, cross-functional teams.Required Experience and Technical SkillsMinimum 6 years of IT experience, including at least 4 years in Cyber Security or Information Security.Hands-on experience in threat modeling methodologies and techniques, including STRIDE, PASTA, attack trees, threat modeling tools, and MITRE ATT&CK.Experience identifying vulnerabilities using CWE and OWASP guidance.Practical experience in a cyber-security role.Strong understanding of authentication, authorization, logging and monitoring, encryption, infrastructure security, and network segmentation.Experience with scripting languages and Infrastructure as Code, such as Terraform or CloudFormation.Experience using Jira or other ticketing systems.Ability to design and review technical architectures.Experience across several relevant areas, typically two to five years, such as operating-system hardening, CI/CD, pipelines, SDLC, CDK, GitOps, DevOps or Agile delivery, Docker, Kubernetes, serverless technologies, Helm, penetration testing, Snowflake, MongoDB, Terraform Cloud, GitHub, or Databricks.Essential SkillsStrong analytical ability, diligence, and attention to detail.Adversarial mindset and effective problem-solving skills.Ability to research using vendor documentation and continuously learn new technologies and methodologies.Ability to create and maintain high-quality documentation.Experience working in a regulated environment.Strong communication, presentation, and collaboration skills.Ability to build productive relationships across cross-functional teams.Ability to work effectively with a diverse range of people and teams.QualificationsBachelor's degree in a computer-related field or equivalent work experience.Associate-level cloud certification from AWS, GCP, Azure, Oracle Cloud, or CompTIA Cloud+.Associate-level or professional cyber-security certification.Relevant Cloud CertificationsAWS Certified Developer, AWS Certified Solutions Architect, or AWS Certified SysOps Administrator.Google Associate Cloud Engineer or another professional GCP certification.Microsoft Certified: Azure Developer Associate.Oracle Cloud Infrastructure Certified Architect Associate or Cloud Operations Associate.CompTIA Cloud+.Relevant Cyber-Security Certifications ISACA Certified Information Systems Auditor (CISA)EC-Council: Certified Cyber Threat Intelligence Analyst (CTIA)EC-Council: Certified Ethical Hacker ver 9 (CEH)GIAC Security Essentials (GSEC).ISC2 Systems Security Certified Practitioner (SSCP).CompTIA CySA+.Microsoft Certified: Security Operations Analyst Associate or Information Protection Administrator Associate.Personal AttributesHigh degree of initiative, flexibility, and ownership.High customer orientation and quality awareness.Excellent verbal and written communication skills.Why InfosysInfosys is a global leader in next-generation digital services and consulting. We help clients navigate their digital transformation by combining deep industry expertise, an AI-powered core, agile delivery at scale, and a strong culture of continuous learning.All aspects of employment at Infosys are based on merit, competence, and performance. We are committed to embracing diversity and creating an inclusive environment for all employees. Infosys is proud to be an equal opportunity employer.Work LocationLondon CountryUnited KingdomState / Region / ProvinceLondonCompanyITL UK Interest GroupInfosys Limited Job RoleConsultantRole Designation descriptionSenior Consultant: BR