$89.34 - $100.66
Join our team as a Principal Security Engineer - Threat Modeling Automation Lead on a 12+ month contract. This hybrid role requires three days onsite and combines hands-on application security, threat modeling, AI/LLM-enabled automation, and security engineering at enterprise scale. This role can sit in Charlotte, NC, Irving, TX, Minneapolis, MN, Chandler, AZ or Columbus, OH (hybrid, 3 days on-site).
This is a senior individual-contributor role for an engineer who wants to stay hands-on while setting the technical direction for threat modeling. You’ll tackle complex threat models, build automation that improves delivery at scale, and help advance Continuous Threat Modeling across a large application portfolio.
Contract Duration: 12+ months
Required Skills & Experience
- 7+ years of engineering experience, including 7+ years in Application Security Engineering.
- 2+ years of hands-on threat modeling experience, including complex application and platform architectures.
- Experience building AI/LLM-enabled Application Security solutions for enterprise production environments.
- Strong automation and software engineering or scripting experience.
- Ability to analyze architectures, data flows, trust boundaries, APIs, controls, and security risks.
- Experience partnering with software engineering, architecture, cloud, and platform teams.
- Ability to remain a hands-on threat modeling practitioner while providing principal-level technical leadership.
Desired Skills & Experience
- Deep knowledge of secure application architecture, STRIDE or similar threat modeling methodologies, OWASP risks, API security, authentication, authorization, cryptography, and data protection.
- Programming experience with technologies such as Java, .NET, Python, JavaScript/TypeScript, Node.js, or Go.
- Cloud and platform security experience across Azure, AWS, or GCP, including CI/CD and modern distributed or microservices architectures.
- Experience with security tooling such as SAST, SCA, DAST, IaC scanning, container security, API testing, or software supply chain controls.
- Knowledge of AI/LLM security risks, guardrails, data protection, model or agent trust boundaries, evaluation, and human review.
- Experience defining reusable security standards, patterns, playbooks, reference architectures, or controls.
- CISSP, CSSLP, CCSP, GIAC GWEB, GIAC GWAPT, or comparable security certification preferred.
What You Will Be Doing
- Serve as the principal technical authority for threat modeling methodology, tooling, automation, and quality.
- Conduct approximately one complex or high-risk threat model per sprint and recommend practical mitigations.
- Build reusable threat patterns, architecture templates, control mappings, reference architectures, and playbooks.
- Design production-grade automation and AI/LLM-assisted capabilities that improve threat modeling throughput, consistency, and quality.
- Advance Threat Modeling as Code, automated diagram generation, threat selection, and ongoing model maintenance.
- Integrate threat modeling with GitHub, Jira, CI/CD pipelines, application inventories, architecture repositories, and security platforms.
- Develop mechanisms for Continuous Threat Modeling based on architecture, code, configuration, and dependency changes.
- Define quality and productivity metrics while mentoring security practitioners, architects, and Security Champions.
Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.