ZipRecruiter

Log In

1

Threat Modeling Jobs (NOW HIRING)

Allstate

Platform Consultant - Threat Modeling

The Platform Consultant - Threat Modeling is a senior security consultant responsible for driving the adoption of secure-by-design principles across enterprise technology platforms through the ...

Allstate

Platform Consultant - Threat Modeling

IL · Remote

The Platform Consultant - Threat Modeling is a senior security consultant responsible for driving the adoption of secure-by-design principles across enterprise technology platforms through the ...

State Street Global Advisors

Threat Modeler

Austin, TX · Hybrid

$90K - $157K/yr

You will be responsible for supporting threat modeling activities across enterprise applications, cloud platforms, APIs, and emerging technologies. Working closely with architects, engineers ...

State Street Global Advisors

Threat Modeler

Berwyn, PA · Hybrid

$90K - $157K/yr

You will be responsible for supporting threat modeling activities across enterprise applications, cloud platforms, APIs, and emerging technologies. Working closely with architects, engineers ...

State Street Global Advisors

Threat Modeler

Clifton, NJ · Hybrid

$90K - $157K/yr

You will be responsible for supporting threat modeling activities across enterprise applications, cloud platforms, APIs, and emerging technologies. Working closely with architects, engineers ...

State Street Corporation

Threat Modeler

Quincy, MA · On-site

$90K - $157K/yr

You will be responsible for supporting threat modeling activities across enterprise applications, cloud platforms, APIs, and emerging technologies. Working closely with architects, engineers ...

State Street Global Advisors

Threat Modeler

Quincy, MA · Hybrid

$90K - $157K/yr

You will be responsible for supporting threat modeling activities across enterprise applications, cloud platforms, APIs, and emerging technologies. Working closely with architects, engineers ...

Tata Consultancy Service Limited

Threat Modeler

Irving, TX · On-site

$100K - $125K/yr

Must Have Technical/Functional Skills • IT experience minimum of 6 years with minimum of 4 years Cyber-Security/Information Security must • Threat Modeling (STRIDE, PASTA, Attack trees, tooling ...

Purple Drive

Threat Modeler

Irving, TX · On-site

Must Have Technical/Functional Skills • IT experience minimum of 6 years with minimum of 4 years Cyber- Security/Information Security - must • Threat Modeling (STRIDE, PASTA, Attack trees ...

State Street Corporation

Senior Threat Modeler

Boston, MA · On-site

$120K - $202K/yr

Threat modeling enables the organization to proactively identify security weaknesses, reduce cyber risk, improve architectural resiliency, and ensure security requirements are incorporated into ...

Deloitte

Sr. Cloud Threat Modeler

Dallas, TX · On-site

Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) * 6+ years of experience in security practices pertaining to authentication, authorization, logging/monitoring, encryption ...

next page

Showing results 1-20

All JobsThreat Modeling Jobs

Threat Modeling information

See salary details

$47

$60

$72

How much do threat modeling jobs pay per hour?

As of Jul 26, 2026, the average hourly pay for threat modeling in the United States is $60.46, according to ZipRecruiter salary data. Most workers in this role earn between $55.77 and $65.87 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Threat Modeler, and why are they important?

To thrive as a Threat Modeler, you need a solid understanding of cybersecurity principles, risk assessment, and software architecture, often supported by a degree in computer science or information security. Familiarity with threat modeling frameworks (like STRIDE or PASTA), diagramming tools (such as Microsoft Threat Modeling Tool), and relevant certifications (like CISSP or CEH) is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for collaborating with cross-functional teams and clearly documenting risks. These skills enable the identification and mitigation of potential security threats, ensuring robust protection of organizational assets.

What is threat modeling?

Threat modeling is a structured process used to identify, evaluate, and address potential security threats and vulnerabilities in systems, applications, or processes. The goal is to proactively understand security risks and design effective defenses before problems occur. It typically involves identifying critical assets, potential attackers, attack vectors, and existing controls, which helps organizations prioritize their security efforts. Threat modeling is an essential part of secure software development and risk management.

What are some common challenges faced by professionals in threat modeling roles, and how can they be addressed?

Professionals in threat modeling often encounter challenges such as keeping up with evolving threats, effectively communicating risk to stakeholders, and integrating threat modeling into fast-paced development cycles. Addressing these challenges involves continuous learning, fostering strong collaboration with development and security teams, and leveraging automated tools to streamline the process. Proactively engaging with cross-functional teams and maintaining clear documentation can also help ensure that threat modeling remains an integral part of the software development lifecycle.

What is the difference between Threat Modeling vs Security Analyst?

AspectThreat ModelingSecurity Analyst
Primary FocusIdentifying potential security threats during system design and developmentMonitoring, analyzing, and responding to security incidents and vulnerabilities
Skills & CertificationsKnowledge of security frameworks, risk assessment, threat identificationSecurity certifications (e.g., CISSP, CompTIA Security+), incident response skills
Work EnvironmentTypically involved in early-stage design, often within development teamsOperational, monitoring security tools, and incident management teams

Threat Modeling and Security Analysts both play vital roles in cybersecurity. Threat Modeling focuses on proactively identifying potential threats during system design, while Security Analysts respond to ongoing security incidents. Understanding their distinct responsibilities helps organizations strengthen their security posture effectively.

More about Threat Modeling jobs
What cities are hiring for Threat Modeling jobs? Cities with the most Threat Modeling job openings:
What states have the most Threat Modeling jobs? States with the most job openings for Threat Modeling jobs include:
What job categories do people searching Threat Modeling jobs look for? The top searched job categories for Threat Modeling jobs are:
Threat Modeling jobs near you
Infographic showing various Threat Modeling job openings in the United States as of July 2026, with employment types broken down into 33% Full Time, and 67% Contract. Highlights an 100% In-person job distribution, with an average salary of $125,752 per year, or $60.5 per hour.
Platform Consultant - Threat Modeling

Platform Consultant - Threat Modeling

Allstate

Remote

Full-time

Posted 20 days ago

Allstate Insurance rating

7.5

Company rating: 7.5 out of 10

Based on 560 frontline employees who took The Breakroom Quiz

213th of 298 rated insurance

Job description

At Allstate, great things happen when our people work together to protect families and their belongings from life's uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers' evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.
Job Description
**For this opportunity, the business is flexible to hire at Sr Consultant, Lead Consultant, and Expert level depending on qualifications & interview evaluation.**
Product Security Engineering designs, builds, and operates enterprise security capabilities that integrate directly into cloud platforms, software development lifecycles, and enterprise engineering practices. The organization applies modern engineering approaches to embed security early in the development process, enabling teams to deliver secure, resilient, and scalable technology solutions.
The Platform Consultant - Threat Modeling is a senior security consultant responsible for driving the adoption of secure-by-design principles across enterprise technology platforms through the application of advanced threat modeling practices.
The role focuses on embedding threat modeling into both new and existing applications, influencing architectural decisions, improving security posture, and guiding engineering organizations through complex security challenges. Working across Product Security, Engineering, Security Operations, and Architecture teams, the consultant helps ensure security is treated as a foundational element of platform design rather than a downstream activity.
Key Responsibilities
  • Serve as a trusted security consultant to engineering teams, providing guidance on secure architecture, platform design, and threat modeling practices
  • Lead and facilitate threat modeling engagements across multiple applications, platforms, and business domains to identify and mitigate security risks early in the development lifecycle
  • Embed secure-by-design principles into software delivery processes, ensuring security considerations are incorporated from discovery through production deployment
  • Define, communicate, and influence platform security strategies and architectural decisions with both technical and non-technical stakeholders
  • Partner with engineering, architecture, and security teams to develop risk-based security recommendations that balance security, business objectives, and developer experience
  • Drive the adoption of modern engineering and security practices, including reusable security patterns, architectural standards, and secure development frameworks
  • Collaborate with Security Operations and Product Security teams to improve threat detection capabilities, breach modeling initiatives, and security resilience
  • Facilitate architectural reviews, discovery workshops, and threat modeling sessions that enable teams to make informed security decisions
  • Mentor engineers and technical leaders on systems thinking, threat identification, security architecture principles, and secure design methodologies
  • Champion emerging security capabilities including AI Security, API Security, SaaS Security, and threat modeling automation initiatives

Essential Skills
  • 3+years' experience in software engineering, security engineering, solution architecture, technical project management, or platform engineering roles within complex enterprise environments
  • Experience acting as a technical advisor, consultant, architect, or security partner supporting engineering teams during design and implementation activities
  • Deep understanding of threat modeling methodologies such as STRIDE, Attack Trees, Kill Chains, or equivalent risk assessment frameworks
  • Demonstrated experience identifying, documenting, and mitigating security threats within cloud-native, distributed, API-driven, or enterprise applications
  • Practical experience with modern software development practices including CI/CD, source control, automated testing, and Agile delivery methodologies
  • Working knowledge of cloud platforms such as AWS, Azure, or GCP and associated security considerations

Desirable Skills
  • Working knowledge of industry security frameworks and standards including OWASP Top 10, MITRE ATT&CK, NIST Cybersecurity Framework, OAuth 2.0, OpenID Connect, and SAML
  • Experience supporting Security Operations, Incident Response, SOC, or breach modeling activities
  • Strong software engineering background with experience in Java, JavaScript, Python, Go, Rust, or other modern programming languages
  • Experience designing and reviewing RESTful APIs and API-first architectures using specifications such as OpenAPI or Swagger
  • Knowledge of Zero Trust architectures, Identity and Access Management (IAM), authentication, authorization, and privileged access management concepts
  • Experience integrating security controls and automated security testing into CI/CD pipelines
  • Practical understanding of modern cryptographic principles and secure data protection strategies
  • Experience applying AI, automation, and modern engineering tools to enhance security effectiveness and productivity, with exposure to AI, SaaS, and API security
  • Demonstrated interest in mentoring engineers, driving innovation, and improving engineering outcomes through secure-by-design practices

Supervisory Responsibilities
  • This role does not have direct people management responsibilities but is expected to provide technical leadership, mentorship, and strategic guidance across engineering and security teams.

#LI-JJ1
Skills
Agile Methodology, Application Programming Interface (API) Security, CI/CD, Cloud Platform, Cybersecurity Risk Assessment, Platform Management, Platform Security, Security Engineering, Software Engineering, Solution Architecture, Technical Consulting, Technical Project Management, Threat Modeling
Compensation
Compensation offered for this role ranges from $90,700 - 195,700 annually and is based on experience and qualifications.
The candidate(s) offered this position will be required to submit to a background investigation.
Joining our team isn't just a job - it's an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger - a winning team making a meaningful impact.
Allstate generally does not sponsor individuals for employment-based visas for this position.
Effective July 1, 2014, under Indiana House Enrolled Act (HEA) 1242, it is against public policy of the State of Indiana and a discriminatory practice for an employer to discriminate against a prospective employee on the basis of status as a veteran by refusing to employ an applicant on the basis that they are a veteran of the armed forces of the United States, a member of the Indiana National Guard or a member of a reserve component.
For jobs in San Francisco, please click "here" for information regarding the San Francisco Fair Chance Ordinance.
For jobs in Los Angeles, please click "here" for information regarding the Los Angeles Fair Chance Initiative for Hiring Ordinance.
To view the "EEO Know Your Rights" poster click "here". This poster provides information concerning the laws and procedures for filing complaints of violations of the laws with the Office of Federal Contract Compliance Programs.
To view the FMLA poster, click "here". This poster summarizing the major provisions of the Family and Medical Leave Act (FMLA) and telling employees how to file a complaint.
It is the Company's policy to employ the best qualified individuals available for all jobs. Therefore, any discriminatory action taken on account of an employee's ancestry, age, color, disability, genetic information, gender, gender identity, gender expression, sexual and reproductive health decision, marital status, medical condition, military or veteran status, national origin, race (include traits historically associated with race, including, but not limited to, hair texture and protective hairstyles), religion (including religious dress), sex, or sexual orientation that adversely affects an employee's terms or conditions of employment is prohibited. This policy applies to all aspects of the employment relationship, including, but not limited to, hiring, training, salary administration, promotion, job assignment, benefits, discipline, and separation of employment.
Allstate provides a comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse. Employees eligible to work from home also receive a monthly connectivity reimbursement to help offset internet costs.
When working from home, you must have a dedicated, private workspace free from distractions, along with appropriate desk and seating. Reliable internet is required, with minimum speeds of 50 MB download and 5 MB upload.

What Allstate Insurance employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply