IT Security Consultant – Threat Modeling
The full posting
About the Offer
We are currently looking for an IT Security Consultant to support threat modeling activities for our global client from the banking industry. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.
You will support application-level security assessments and threat mapping, with a particular focus on threats related to AI agents, machine learning systems and large language models, working under the guidance of senior specialists.
Key Details
- Rate: up to 120 PLN/h (B2B)
- Work Model: Hybrid, 3 days a week from the office, full-time (40h/week)
- Location: Gdańsk or Gdynia preferred; Warsaw will also be considered
Responsibilities
- Support application-level security assessments and threat modeling activities
- Help identify assets, trust boundaries, attack surfaces, threat actors and abuse cases
- Use and update existing threat models and threat libraries
- Support the mapping of threats to predefined security controls and remediation actions
- Help translate technical threats into understandable business risks
- Work closely with and learn from senior security specialists
Requirements
- Knowledge of IT security architecture principles
- General understanding of security threats related to AI agents, machine learning systems and large language models
- Basic knowledge of threat modeling methodologies, particularly STRIDE
- Ability to support threat identification and mapping activities under guidance
- Advanced English
Nice to have
- Basic knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS, and the ability to use them as references during threat assessments
- Ability to translate technical threats into business risks
Text as Optiveum published it; last compared with the original on 13 Nov 2026.
The employer: Optiveum
Optiveum places IT specialists with corporate clients, mostly banks, and its board carries seven security contracts across Polish cities.
Pay and benefits: B2B contractor agreements signed directly with Optiveum for full-time client assignments.
Other security roles worth a look
A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists. Roles from partners who pay us a fee rank a little higher in this list.

Cybersecurity Engineer (shows the role here)
Inetum · Security Engineering · Lisbon, Lisbon, Portugal· 1mo agoDetails

Information Security Engineer (shows the role here)
Inetum · Security Engineering · Brussels, Brussels, Belgium· 2w agoDetails

Application Security Engineer – CVE & Vulnerability Research (shows the role here)
Anyone AI · Offensive Security · Remote· 1mo agoDetails
$65/hr
Cybersecurity Technical Trainer (shows the role here)
Thales · Architecture & Consulting · Mexico City· 1w agoDetails

Cyber Threat Intelligence SME (shows the role here)
micro1 · Threat Intel & Research · Remote· 3w agoDetails
$70–$110/hr
Designed security for a whole company before?
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Optiveum posts a security role
We read Optiveum's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.