IT Security Consultant - Threat Modeling activities

Project overview

🔹 For our Client from banking industry we are looking for🔹IT Security Consultant - Threat Modeling activities🔹

Start date: 2.10.2026

Possible locations: Gdańsk/Gdynia and Warsaw can be considerd as well. Hybrid setup: 3 days int he office per week.

We require a security specialist with foundational knowledge of cybersecurity, threat modelling, and AI-related threats. The specialist will support application-level assessments and threat mapping activities under the guidance of senior specialists.

Must-have knowledge and experience

Nice-to-have knowledge and experience

Contact person: [contact removed]

Client code: BN01

Do you know someone who would fit this position? Recommend a candidate by sending her/his CV to: [contact removed]

Whistleblowing Policy, which provides guidelines for reporting misconduct can be found on Ework website: https://www.eworkgroup.com/about-us/our-responsibility

• Knowledge of IT Security Architecture principles.
• General understanding of security threats related to AI agents, machine learning systems, and large language models.
• Basic knowledge of threat modelling methodologies, particularly STRIDE.
• Ability to support the identification of assets, trust boundaries, attack surfaces, threat actors, and abuse cases under guidance.
• Ability to use and update existing threat models and threat libraries.
• Ability to support the mapping of threats to predefined security controls and remediation actions.
• Ability to support the translation of technical threats into understandable business risks under guidance.
• Basic knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS, with the ability to use these frameworks as references during threat assessments.

Project details

• Start: 2026-11-02
• Remote: hybrid
• Location: Gdynia, Poland; Gdansk, Poland; Warsaw, Poland, PL
• Rate: 140-140 EUR/h