Threat Modeling Expert - AI / ML / LLM

We are looking for a Threat Modeling Expert to support a cybersecurity project focused on solutions using AI, Machine Learning, and Large Language Models.

Key responsibilities

• Conduct application-level security assessments.
• Identify assets, trust boundaries, attack surfaces, threats, and security risks.
• Map relevant Mythos threat scenarios to application architecture.
• Develop and maintain threat models using approved methodologies and tools.
• Review solution designs and architecture documentation to validate threat coverage.
• Translate identified threats into security controls and remediation actions.
• Collaborate with development, architecture, security, and business teams.
• Assign owners to mitigation actions and track their implementation.
• Report identified threats, risks, and remediation progress.

Requirements

• Hands-on experience in threat modeling for AI agents, ML, or LLM-based solutions.
• Strong practical knowledge of threat modeling methodologies, particularly STRIDE.
• Experience with attack trees and/or kill chains.
• Ability to analyse assets, trust boundaries, attack surfaces, threat actors, and abuse cases.
• Experience in risk assessment and defining appropriate security controls and mitigation measures.
• Ability to review application architecture and technical documentation.
• Strong communication skills and experience working with business stakeholders.
• English proficiency suitable for working in an international environment.

Nice to have

• Practical experience with the Mythos threat framework.
• Knowledge of the OWASP Top 10 for LLM Applications.
• Knowledge of MITRE ATLAS.
• Experience mapping AI-specific threat scenarios to technical and business risks.
• Experience working in a SAFe or another scaled Agile environment.

Working conditions

• Remote work from within Poland.
• A one-time visit to an office in Warsaw or Gdańsk to collect the equipment.
• Part-time engagement: approximately 20% of a full-time role.
• Working hours arranged individually.
• Expected start date: as soon as possible.
• Project duration: until the end of 2026.
• The recruitment interview will be conducted in English.