{"id":3448777,"url":"https://alion.io/job/state-street-threat-modeler-avp-2","title":"Threat Modeler, AVP","company":{"id":1806,"name":"State Street","domain":"statestreet.com","url":"https://alion.io/company/state-street","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":208,"ghost_share":0.019,"stale_share":0.38,"repost_share":0.106,"time_to_fill_p50_days":30,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India","Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":47000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":291},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"GCP","optional":true},{"name":"Kubernetes","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"STRIDE","optional":true}],"status":"live","first_seen_at":"2026-10-29T10:04:28Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-10-31T22:33:24Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Who We Are Looking For\nWe are looking for aThreat Modeler.You will be responsible for supporting threatmodelingactivities across enterprise applications, cloud platforms, APIs, and emerging technologies. Working closely with architects, engineers, developers, and cybersecurity teams, you will help identify security risks early in the technology lifecycle and contribute to secure-by-design initiatives across the organization.\nWhy This Role Is ImportantToUs\nThe team you will be joining is part of theSecurity Architectureorganization, a function that is critical to safeguarding the firm's applications, cloud environments, data, and technology services. Threatmodelingenables the organization to proactively identify security weaknesses, reduce cyber risk, and incorporate security requirements into technology solutions before they are deployed.\nWhat You Will Be Responsible For\nAs aThreat Modeler, you will:\nParticipate in threatmodelingassessments for applications, APIs, cloud platforms, and technology initiatives.\n\nAnalyzeapplication architectures, data flows, trust boundaries, and cloud deployments to identify potential threats and security weaknesses.\n\nSupport the development of risk mitigation recommendations and secure design guidance.\n\nCollaborate with application development, cloud engineering, and cybersecurity teams to improve security outcomes.\n\nContribute to threatmodelingstandards, reusable patterns, documentation, and security awareness initiatives.\n\nWhat We Value\nThese skills will help you succeed in this role:\nStrong analytical, problem-solving, and critical-thinking skills.\n\nKnowledge of application security, cloud security, and secure software development principles.\n\nUnderstanding of modern architectures including APIs, microservices, containers, and cloud-native technologies.\n\nStrong communication and collaboration skills with technical and non-technical stakeholders.\n\nWillingness to learn, adapt, and develop expertise in threatmodelingand security architecture.\n\nEducation & Preferred Qualifications\nDegree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline.\n\n12yearsor more of experience in application security, cloud security, cybersecurity architecture, threatmodeling, or related technology disciplines, with at least5years of hands-on cybersecurity experience preferred.\n\nFamiliarity with threatmodelingmethodologies such as STRIDE, MITRE ATT&CK, attack trees, or similar security assessment techniques.\n\nUnderstanding of secure software development practices, OWASP Top 10, API security, and cloud security fundamentals.\n\nExperience with AWS, Azure, and/or Google Cloud platforms is preferred.\n\nKnowledge of AI security is an added advantage\n\nKnowledge ofDevSecOps, CI/CD pipelines, containers, Kubernetes, or modern application architectures is desirable.\n\nSecurity certifications such as Security+, SSCP, CCSK, AWS Cloud Practitioner, Azure Fundamentals, or equivalent certifications are a plus.\n\nAdditional Requirements\nStrong desire to build expertise in threatmodeling, application security, and cloud security.\n\nAbility to work effectively in a collaborative, global team environment.\n\nWork Requirement\nHybrid work environment - required to be in office 3 days a week\n\nCandidate is expected to work out of base location\n\nShift: Standard business hours with flexibility to support global stakeholders across multiple time zones.\n\nAbout State Street\nAcross the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.\nWe are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.\nAs an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.\nDiscover more information on jobs at StateStreet.com/careers\nRead our CEO Statement","description_format":"text","description_chars":4630,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Hybrid work"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Asset Management & Funds","Application Security","Custody & Fund Administration"],"lifecycle":[{"event":"open","at":"2026-10-29T10:04:28Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:4","velocity","win:early","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/state-street-threat-modeler-avp-2","json_url":"https://alion.io/job/state-street-threat-modeler-avp-2.json","meta":{"generated_at":"2026-11-01T02:59:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4521,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1806},"rest":"https://alion.io/mcp/rest/get_company?id=1806"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstate-street-threat-modeler-avp-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstate-street-threat-modeler-avp-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstate-street-threat-modeler-avp-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/state-street-threat-modeler-avp-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstate-street-threat-modeler-avp-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3448777}},{"tool":"search_jobs","arguments":{"company":"statestreet.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3448777},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}