IT Security Consultant

Industry: banking

Work model: hybrid in Gdańsk/Gdynia/Warsaw (3 days x week from the office)

Project length: 12 months + possible extensions

Project language: English / Polish

Assignment type: B2B

Rate: up to 135 PLN/h + VAT

Start: ASAP

Summary

The role of IT Security Consultant focuses on supporting application-level assessments and threat mapping activities, ensuring robust cybersecurity measures are in place against emerging threats, particularly in the realms of AI-related risks.

Main Responsibilities:

• Support threat modelling workshops with application and platform teams.

• Assist in identifying assets, trust boundaries, attack surfaces, threats, and security risks.

• Create and update threat models using approved tools, methodologies, and templates.

• Review solution designs and architecture documentation with guidance from senior team members.

• Assist in mapping relevant threat scenarios to application components and data flows.

• Document identified threats, risks, assumptions, and proposed mitigation actions.

• Collaborate with development and security teams to collect information and follow up on remediation activities.

• Track identified threats, mitigation actions, and remediation status.

Key Requirements:

• Knowledge of IT Security Architecture principles.

• General understanding of security threats related to AI agents, machine learning systems, and large language models.

• Basic knowledge of threat modelling methodologies, particularly STRIDE.

• Ability to identify assets, trust boundaries, attack surfaces, threat actors, and abuse cases with guidance.

• Ability to use and update existing threat models and threat libraries.

• Ability to support mapping threats to predefined security controls and remediation actions.

Nice to Have:

• Ability to translate technical threats into understandable business risks with guidance.

• Basic knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS.