Threat Modeling Associate

4 days ago


New York, New York, United States Sumitomo Mitsui Financial Group, Inc. Full time
Job Description

Sumitomo Mitsui Financial Group, Inc. is seeking a highly skilled Threat Modeling Associate to join our Cyber Resilience team. As a Threat Modeling Associate, you will play a critical role in identifying and mitigating potential threats to our organization's assets and systems.

The ideal candidate will have a deep understanding of enterprise architecture and security architectural elements as they relate to risks and controls. You will be responsible for executing day-to-day activities core to the Threat Modeling program, creating visual representations of assets, controls, threat agents, trust zones, attack paths, and potential attacks. Additionally, you will support other information technology, data management, cybersecurity, and operational resilience activities across businesses.

Key Responsibilities:

  • Execute on enterprise Threat Modeling Assessment program
  • Perform threat modeling to identify use cases, threat agents, attack vectors, and patterns, design patterns, and compensating controls needed to mitigate risk
  • Build Threat Models of enterprise services to identify and refine the attack surface
  • Implement, use, and maintain threat modeling technology applications and evidence created in the threat modeling process
  • Act as a Cyber Resilience champion of the Threat Modeling Assessment program
  • Participate in SDLC process and architecture approval routines related to cyber threat modeling
  • Create and deliver reports that capture identified risks, controls, assets, trust zones, and enhancement requirements
  • Partner with stakeholders on Threat Modeling Assessment Issues to create action plans identified during fieldwork
  • Determine alignment of Cyber Resilience controls in practice with those from authoritative sources such as NIST SP and ISO 27002 to provide holistic insight into current capabilities and risk themes as well as best practices

Requirements:

  • Deep understanding of enterprise architecture and security architectural elements as they relate to risks and controls
  • Well-versed in Cyber Resilience to include technology, incident response, and cyber risk practices with the ability to connect and align with the firm's processes and frameworks
  • 5+ years of direct work experience within the financial services industry with elements of security architecture and cyber threats
  • Working knowledge of business and cyber risk management process and controls, industry practices, and frameworks (e.g., NIST 800-53, ISO 27000 family)
  • Broad knowledge of cloud technologies (Related certifications a plus)
  • Detail-oriented, with proven ability to question the status quo and apply resilience activities to enhance capabilities, as appropriate
  • Strong organizational skills, with proven ability to successfully manage multiple, concurrent priorities and team members as the program is built out
  • Ability to communicate and work effectively in a matrixed environment and across various organizational levels, where flexibility, collaboration, and adaptability are important at all levels
  • Strong analytical skills and attention to detail
  • Able to communicate technical issues to a non-technical executive audience
  • Foundational knowledge of banking laws and regulations (FFIEC, BCBS, FCA, PRA, BoE, etc.)
  • Maintain a business cyber threat mindset to understand underlying risks and weaknesses to properly assist in mitigation and enhancement activities
  • Strong desire to continually deliver a quality and meaningful work product in a timely and efficient manner
  • BA/BS in Computer Engineering, Computer Science, Information Systems, Cyber Security, Business Administration, or demonstrated relevant industry background and/or military experience
  • CCSP Certified Cloud Security Professional (CCSP), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Microsoft Certified: Cybersecurity Architect Expert (MS SC-100 Exam), Certified Network Defense Architect (CNDA), CREST Registered Technical Security Architect (CRTSA), Global Information Assurance Certifications Defensible Security Architect (GDSA from GIAC) certifications preferred


  • New York, New York, United States Sumitomo Mitsui Financial Group, Inc. Full time

    Job SummarySumitomo Mitsui Financial Group, Inc. is seeking a highly skilled Threat Modeling Associate to join our Cyber Resilience team. As a Threat Modeling Associate, you will play a critical role in identifying and mitigating cyber threats to our enterprise services.Key ResponsibilitiesExecute threat modeling assessments to identify use cases, threat...


  • New York, New York, United States Publicis Sapient Full time

    Job Title: Threat Modeling EngineerAs a Senior Engineer - Threat Modeling at Publicis Sapient, you will be part of a smart cross-functional team delivering digital business transformation solutions to our clients. This position entails an individual contributor role focused on Security Architecture and Threat Modeling, encompassing governance, evaluation of...


  • New York, New York, United States Publicis Sapient Full time

    Job Title: Senior Engineer - Threat ModelingPublicis Sapient is a digital transformation partner helping established organizations get to their future, digitally enabled state. We help unlock value through a start-up mindset and modern methods, fusing strategy, consulting, and customer experience with agile engineering and problem-solving creativity.As a...


  • New York, New York, United States Crescens Full time

    Job SummaryCrescens is seeking a highly skilled Cyber Security Threat Modeling Integration Engineer to join our team. The ideal candidate will have a strong background in cyber threat intelligence and experience with threat modeling and integration.Key Responsibilities Enhance prevention, detection, response, and recovery efforts through various technical...


  • New York, New York, United States Crescens Full time

    Cyber Security Threat Modeling Integration SpecialistThe Cyber Security Threat Modeling Integration Specialist will play a critical role in enhancing the security posture of tools across multiple platforms. This involves designing and implementing solutions that improve the security of these tools, as well as developing security content for tools and...


  • New York, New York, United States RightTalents LLC Full time

    Cyber Security Threat Intelligence SpecialistAt RightTalents LLC, we are seeking a highly skilled Cyber Security Threat Intelligence Specialist to join our team. The ideal candidate will have at least 8 years of experience in Cyber Threat Intelligence initiatives, including enhancing prevention, detection, response and recovery efforts through various...


  • New York, New York, United States RightTalents LLC Full time

    Cyber Security Threat Intelligence EngineerRightTalents LLC is seeking a highly skilled Cyber Security Threat Intelligence Engineer to join our team. As a key member of our Cyber Threat Intelligence team, you will play a critical role in enhancing our prevention, detection, response, and recovery efforts through various technical and operational methods.Key...


  • New York, New York, United States Warner Music Full time

    Job Title: Cyber Security AnalystAbout the Role:We are seeking a highly skilled Cyber Security Analyst to join our team at Warner Music Group. As a Cyber Security Analyst, you will be responsible for designing and implementing security solutions to protect our enterprise from cyber threats.Key Responsibilities:Develop and maintain a security architecture...

  • FP&A Associate

    1 week ago


    New York, New York, United States Bowery Farming Full time

    About the RoleBowery Farming is seeking an FP&A Associate to join our finance team. As a key member of our team, you will provide financial modeling and analysis to support long-range growth and financial planning. You will also analyze key performance indicators and support strategic decisions.We are looking for an experienced FP&A Associate with a...


  • New York, New York, United States BNY Mellon Full time

    About the RoleWe are seeking a highly skilled Senior Associate to join our Pricing and Data Modelling team at BNY Mellon. As a key member of our team, you will be responsible for implementing and building product and services pricing models, providing costs and revenue control analysis, and developing pricing matrices and rate cards.Key...


  • New York, New York, United States Antares Capital Full time

    Job Title: Assistant Vice President, ValuationsAntares Capital is seeking a highly skilled and experienced Assistant Vice President, Valuations to join our team. As a key member of our valuation team, you will be responsible for developing financial models, researching industry and market trends, evaluating company financials, and performing investment...


  • New York, New York, United States Hazen and Sawyer Full time

    Job Title: Process Mechanical Lead Revit ModelerHazen and Sawyer is a leading engineering firm specializing in water and wastewater facilities. Our team of experts is dedicated to providing safe drinking water and controlling water pollution.We are seeking an advanced Revit Modeler with Process Mechanical experience to join our dynamic Northeast CADBIM...


  • New York, New York, United States Sumitomo Mitsui Banking Corporation Full time

    Job SummarySumitomo Mitsui Banking Corporation is seeking a highly skilled Quantitative Risk Specialist to join our team. As a key member of our risk management department, you will be responsible for creating and implementing risk models to help us navigate the complexities of the financial markets.In this role, you will work closely with our treasury,...


  • New York, New York, United States Wells Fargo Full time

    About the Role:We are seeking a highly skilled Senior Model Risk Specialist to join our Corporate Banking Control team. As a key member of our team, you will be responsible for designing and implementing first-line controls to mitigate risks associated with model development and counterparty credit.Key Responsibilities:Collaborate with leadership to...


  • New York, New York, United States Sumitomo Mitsui Financial Group, Inc. Full time

    Job Title: Quantitative Risk SpecialistSMBC Group is a leading global financial institution with a rich history and diverse range of financial services. As a Quantitative Risk Specialist, you will play a critical role in developing and implementing risk management strategies to ensure the stability and growth of the organization.Key Responsibilities:Create...


  • New York, New York, United States KPMG-UnitedStates Full time

    Business Modeling Services Senior ManagerWe are seeking a highly skilled Senior Manager to join our Business Modeling practice at KPMG-UnitedStates. As a Senior Manager, you will be responsible for leading a team in building custom financial analytical forecast models, conducting robust data and information analysis, and undertaking advanced scenario...


  • New York, New York, United States Bloomberg Full time

    Key Responsibilities: As a Senior Structured Products Cashflow Modeler at Bloomberg, you will be responsible for managing our library of cashflow models to ensure we deliver best-in-class data and analytics across various asset sectors of the structured finance market. You will diagnose complex user-reported issues with our products, working autonomously and...


  • New York, New York, United States Certified Kernel Tech LLC (CertiK) Full time

    Cybersecurity ExpertiseAs a Senior Cybersecurity Specialist at Certified Kernel Tech LLC (CertiK), you will be responsible for designing and implementing robust security solutions to safeguard our networks and systems. Your expertise in threat modeling, security review, and binary analysis will be crucial in detecting and mitigating security threats. You...


  • New York, New York, United States Stantec Full time

    Job Title: Coastal Engineer/Coastal ModelerWe are seeking a highly skilled Coastal Engineer/Coastal Modeler to join our team at Stantec. As a key member of our Coastal Engineering practice, you will be responsible for leading and supporting a wide range of coastal projects across the globe.Key Responsibilities:Complete complex engineering calculations and...


  • New York, New York, United States Intuit Inc Full time

    Job DescriptionWe are seeking a highly skilled Staff Security Engineer to join our team at Intuit Inc. The ideal candidate will have over 10 years of overall experience, including 5+ years of coding experience, and a robust background in security reviews, threat modeling, and incident response.This role requires a unique combination of advanced software...