Principal Threat Modeling Architect

State Street

Principal Threat Modeling Architect leading the enterprise Threat Modeling program for security at State Street. Partnering with development and cybersecurity teams to enhance security practices and mitigate risks.

Posted 7/9/2026full-timeLondon • 🇬🇧 United KingdomLeadWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityMicroservices

About the role

Key responsibilities & impact

Lead and mature the enterprise Threat Modeling program, including methodologies, standards, tooling, governance, and metrics
Build, lead, and mentor a team of threat modelers responsible for conducting threat assessments across enterprise applications, cloud platforms, APIs, and emerging technologies
Partner with Security Architecture, Application Security, Cloud Security, Engineering, and Development teams to embed threat modeling throughout the software development lifecycle
Conduct and oversee threat modeling exercises for critical business applications, cloud-native services, AI solutions, and strategic transformation initiatives
Define actionable risk mitigation strategies and architectural recommendations to address identified threats and security weaknesses
Establish security architecture patterns, guidance, and best practices related to application security, cloud security, and secure-by-design principles
Drive adoption of automated and scalable threat modeling capabilities while measuring program effectiveness through meaningful metrics and reporting
Evaluate emerging threats, attack techniques, and technology trends to continuously enhance the firm's threat modeling capabilities

Requirements

What you’ll need

Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline
13 years or more of experience leading large-scale application security, cloud security, threat modeling, security architecture, or cybersecurity transformation initiatives in complex, global environments
At least 8 years of cybersecurity leadership experience preferred
Deep expertise in threat modeling methodologies such as STRIDE, MITRE ATT&CK, Kill Chain, attack trees, and risk-based security analysis
Strong application security and cloud security experience, including modern cloud-native architectures, APIs, containers, microservices, and DevSecOps practices
Proven leadership experience building, mentoring, and leading highly skilled technical teams
Strong communication, stakeholder management, and executive presentation skills with the ability to influence strategic technology decisions
Ability to translate complex technical risks into practical, business-aligned security recommendations
Must be fluent in English.

Benefits

Comp & perks

Inclusive development opportunities
Flexible work-life support
Paid volunteer days
Vibrant employee networks

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Threat ModelingSTRIDEMITRE ATT&CKKill ChainRisk-Based Security AnalysisCloud-Native ArchitecturesAPIsContainersMicroservicesDevSecOps

Soft Skills

LeadershipCommunicationStakeholder ManagementExecutive PresentationInfluencing