As a Threat Modeler at Stryker, you play a crucial role in identifying and mitigating security risks within our software, systems, and networks. You will be responsible for conducting thorough threat assessments, creating threat models, and providing actionable recommendations to ensure the security and integrity of our products. In this role, you will collaborate with cross-functional teams and contribute to our commitment to safeguarding our digital assets and maintaining the trust of our customers.

Responsibilities:

Threat Assessment: Conduct comprehensive assessments of potential security threats and vulnerabilities in software, systems, and networks.

Model Development: Create threat models and attack trees to visualize and communicate security risks effectively.

Risk Analysis: Analyze and prioritize security risks based on potential impact and likelihood, taking into consideration business objectives.

Recommendations: Provide actionable recommendations for mitigating identified security threats and vulnerabilities.

Collaboration: Work closely with cross-functional teams, including developers, security professionals, and product managers, to integrate security practices into the development lifecycle.

Security Education: Educate team members on threat modeling best practices and security awareness.

Documentation: Maintain clear and detailed documentation of threat models and findings.

Stay Informed: Keep up to date with the latest security threats, vulnerabilities, and industry best practices.

Qualifications:

Education: Bachelor's degree in Computer Science, Cybersecurity, or a related field. A Master's degree is a plus. Cyber certifications like Security + or CEH also a plus.

Experience: Several years of experience in threat modeling, security analysis, or related roles.

Security Knowledge: Strong understanding of security principles, common vulnerabilities, and risk assessment.

Modeling Tools: Proficiency in using threat modeling tools and software.

Programming Knowledge: Familiarity with programming languages and the ability to identify security issues in code.

Certifications: Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) are advantageous.

Communication: Excellent communication and interpersonal skills to convey complex security concepts to diverse teams.

Problem-Solving: Strong problem-solving and critical thinking skills.

About Stryker