🔹 For our Client from banking industry we are looking for🔹IT Security Consultant - Threat Modeling activities🔹
Start date: 2.10.2026
Possible locations: Gdańsk/Gdynia and Warsaw can be considerd as well. Hybrid setup: 3 days int he office per week.
We require a security specialist with foundational knowledge of cybersecurity, threat modelling, and AI-related threats. The specialist will support application-level assessments and threat mapping activities under the guidance of senior specialists.
Must-have knowledge and experience
- Knowledge of IT Security Architecture principles.
- General understanding of security threats related to AI agents, machine learning systems, and large language models.
- Basic knowledge of threat modelling methodologies, particularly STRIDE.
- Ability to support the identification of assets, trust boundaries, attack surfaces, threat actors, and abuse cases under guidance.
- Ability to use and update existing threat models and threat libraries.
- Ability to support the mapping of threats to predefined security controls and remediation actions.
Nice-to-have knowledge and experience
- Ability to support the translation of technical threats into understandable business risks under guidance.
- Basic knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS, with the ability to use these frameworks as references during threat assessments.
Contact person: dominika.kisiel@eworkgroup.com
Client code: BN01
Do you know someone who would fit this position? Recommend a candidate by sending her/his CV to: polecenia@eworkgroup.com
Whistleblowing Policy, which provides guidelines for reporting misconduct can be found on Ework website: https://www.eworkgroup.com/about-us/our-responsibility