IT Security Consultant
Description
Industry: banking
Work model: hybrid in Gdańsk/Gdynia/Warsaw (3 days x week from the office)
Project length: 12 months + possible extensions
Project language: English / Polish
Assignment type: B2B
Rate: up to 135 PLN/h + VAT
Start: ASAP
Summary
The role of IT Security Consultant focuses on supporting application-level assessments and threat mapping activities, ensuring robust cybersecurity measures are in place against emerging threats, particularly in the realms of AI-related risks.
Main Responsibilities:
Support threat modelling workshops with application and platform teams.
Assist in identifying assets, trust boundaries, attack surfaces, threats, and security risks.
Create and update threat models using approved tools, methodologies, and templates.
Review solution designs and architecture documentation with guidance from senior team members.
Assist in mapping relevant threat scenarios to application components and data flows.
Document identified threats, risks, assumptions, and proposed mitigation actions.
Collaborate with development and security teams to collect information and follow up on remediation activities.
Track identified threats, mitigation actions, and remediation status.
Key Requirements:
Knowledge of IT Security Architecture principles.
General understanding of security threats related to AI agents, machine learning systems, and large language models.
Basic knowledge of threat modelling methodologies, particularly STRIDE.
Ability to identify assets, trust boundaries, attack surfaces, threat actors, and abuse cases with guidance.
Ability to use and update existing threat models and threat libraries.
Ability to support mapping threats to predefined security controls and remediation actions.
Nice to Have:
Ability to translate technical threats into understandable business risks with guidance.
Basic knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS.