IT Security Consultant (Threat Modeling)

Location: Hybrid, 3 days per week from the office in Gdańsk or Gdynia preferred; Warsaw also considered

Rate: up to 120 PLN/h (B2B)

Company

hirify.global is a recruitment and consulting company providing project-based and permanent opportunities for clients in Poland and abroad through remote or office-based models. For this role, hirify.global is the recruitment and contracting party.

What you will do

• Support application-level security assessments and threat modeling activities.
• Identify assets, trust boundaries, attack surfaces, threat actors, and abuse cases.
• Use and update existing threat models and threat libraries.
• Map threats to predefined security controls and remediation actions.
• Translate technical threats into understandable business risks.
• Work with and learn from senior security specialists.

Requirements

• Knowledge of IT security architecture principles.
• General understanding of security threats related to AI agents, machine learning systems, and large language models.
• Basic knowledge of threat modeling methodologies, particularly STRIDE.
• Ability to support threat identification and mapping activities under guidance.
• Advanced English.

Nice to have

• Basic knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS, with the ability to use them as references during threat assessments.
• Ability to translate technical threats into business risks.

Culture & Benefits

• Full-time work at 40 hours per week.
• Hybrid work model with three office days per week.
• B2B cooperation agreement signed directly with hirify.global.
• Opportunity to support a global banking-industry client.
• Work under the guidance of senior security specialists.