Threat Modeling Expert - AI / ML / LLM (f/m)

We are looking for a Threat Modeling Expert to support a cybersecurity project focused on solutions using AI, Machine Learning, and Large Language Models. Key responsibilities Conduct application-level security assessments. Identify assets, trust boundaries, attack surfaces, threats, and security risks. Map relevant Mythos threat scenarios to application architecture. Develop and maintain threat models using approved methodologies and tools. Review solution designs and architecture documentation to validate threat coverage. Translate identified threats into security controls and remediation actions. Collaborate with development, architecture, security, and business teams. Assign owners to mitigation actions and track their implementation. Report identified threats, risks, and remediation progress. Requirements Hands-on experience in threat modeling for AI agents, ML, or LLM-based solutions. Strong practical knowledge of threat modeling methodologies, particularly STRIDE. Experience with attack trees and/or kill chains. Ability to analyse assets, trust boundaries, attack surfaces, threat actors, and abuse cases. Experience in risk assessment and defining appropriate security controls and mitigation measures. Ability to review application architecture and technical documentation. Strong communication skills and experience working with business stakeholders. English proficiency suitable for working in an international environment. Nice to have Practical experience with the Mythos threat framework. Knowledge of the OWASP Top 10 for LLM Applications. Knowledge of MITRE ATLAS. Experience mapping AI-specific threat scenarios to technical and business risks. Experience working in a SAFe or another scaled Agile environment. Working conditions Remote work from within Poland. A one-time visit to an office in Warsaw or Gdańsk to collect the equipment. Part-time engagement: approximately 20% of a full-time role. Working hours arranged individually. Expected start date: as soon as possible. Project duration: until the end of 2026. The recruitment interview will be conducted in English.