Threat Model Analyst

Perform architecture-first security analysis using STRIDE-A: classic STRIDE plus explicit abuse-case thinking.

When to Use

• A new system or subsystem needs an initial threat model
• A major change landed and the question is "what changed security-wise?"
• You need to reason about trust boundaries, data flows, or risky integrations before implementation
• A security review needs architecture evidence, not only code-pattern scanning

When NOT to Use