Threat Modeling Expert – AI / ML / LLM (f/m)

We are looking for a Threat Modeling Expert to support a cybersecurity project focused on solutions using AI, Machine Learning, and Large Language Models.

Key responsibilities

• Conduct application-level security assessments.

• Identify assets, trust boundaries, attack surfaces, threats, and security risks.

• Map relevant Mythos threat scenarios to application architecture.

• Develop and maintain threat models using approved methodologies and tools.

• Review solution designs and architecture documentation to validate threat coverage.

• Translate identified threats into security controls and remediation actions.

• Collaborate with development, architecture, security, and business teams.

• Assign owners to mitigation actions and track their implementation.

• Report identified threats, risks, and remediation progress.

Requirements

• Hands-on experience in threat modeling for AI agents, ML, or LLM-based solutions.

• Strong practical knowledge of threat modeling methodologies, particularly STRIDE.

• Experience with attack trees and/or kill chains.

• Ability to analyse assets, trust boundaries, attack surfaces, threat actors, and abuse cases.

• Experience in risk assessment and defining appropriate security controls and mitigation measures.

• Ability to review application architecture and technical documentation.

• Strong communication skills and experience working with business stakeholders.

• English proficiency suitable for working in an international environment.

Nice to have

• Practical experience with the Mythos threat framework.

• Knowledge of the OWASP Top 10 for LLM Applications.

• Knowledge of MITRE ATLAS.

• Experience mapping AI-specific threat scenarios to technical and business risks.

• Experience working in a SAFe or another scaled Agile environment.

Working conditions

• Remote work from within Poland.

• A one-time visit to an office in Warsaw or Gdańsk to collect the equipment.

• Part-time engagement: approximately 20% of a full-time role.

• Working hours arranged individually.

• Expected start date: as soon as possible.

• Project duration: until the end of 2026.

• The recruitment interview will be conducted in English.