AI Agentic Threat-Modelling Consultant

@shaxzodj

Whats up Boss A few questions before we move forward: Are you working with LLM agents (OpenAI / Claude / custom models) or a traditional ML workflow? Is the infrastructure running on **Amazon Web Services, Microsoft Azure, or Google GCP? Do you already have architecture diagrams, or should I help design them from scratch for IriusRisk import? Are these Jira tickets focused mainly on compliance/documentation, or active engineering remediation work? Happy to discuss the technical architecture in detail. Best regards.

@minhpark

Shipped an AI agent that cut tier-1 support handling by 60%, including workflow mapping, control points, and risk review around data access and hand-offs. Your Cornerstone engagement needs a structured IriusRisk threat model with STRIDE, MITRE ATLAS, OWASP AI/LLM Top 10, architecture diagrams, Jira remediation items, CI/CD and security tooling guidance, and reporting your team can act on. I can help review the design, build the import-ready diagram, identify threats/controls, and turn the output into technical discussion points for your team. Do you already have architecture diagrams/data flows for the AI workflow, or should I derive them from Jira tickets and a discovery call? Next step: share the current Jira tickets and architecture notes, then we can do a short call and I’ll prepare the first scope and sample threat-model structure.

@HridayUpadhyaya

I would be a strong fit for this role because I have experience in AI security, threat modeling, risk assessment, and secure SDLC practices. I can effectively engage with architects, developers, and security teams to review designs, identify risks using STRIDE, MITRE ATLAS, and OWASP frameworks, and build actionable threat models in IriusRisk. Additionally, I can support CI/CD security integration, tooling onboarding, remediation planning, and provide practical security recommendations that align with both business and technical objectives.

@hafizharisali321

Could you please tell me if you have already defined your Trust Boundaries for the AI-powered Cornerstone workflow and which specific components are currently handling the untrusted inputs such as user prompts or external data sources that we need to prioritize within the Mitre Atlas AI framework? when performing threat modeling for AI agents, it is critical to distinguish between traditional software vulnerabilities and model-specific risks like prompt injection or model poisoning, and structuring our IriusRisk diagrams to map these vectors against your CI/CD pipelines will be the foundation for our risk assessment. My approach will be to perform a deep-dive analysis of your architecture, identifying the attack surfaces where the AI logic interacts with your backend services, and then drafting the technical specifications using STRIDE-per-element to feed directly into the IriusRisk threat modeler, ensuring we have a concrete basis for mapping OWASP Top 10 for LLMs. I have extensive experience in security architecture and threat modeling, and I can provide you with the technical depth and actionable diagrams needed to lead these discussions and manage the remediation lifecycle within your JIRA-based security program.

@mwaqasm5

Hello, I am an AI Security and Threat Modeling specialist with experience in STRIDE, MITRE ATT&CK/ATLAS, OWASP Top 10, CI/CD security, and AI system risk assessment. I can support your IriusRisk engagement end-to-end for your AI-powered Cornerstone workflow. My approach includes: • Reviewing high-level architecture and designing threat models aligned with STRIDE + OWASP AI risks • Identifying system-level risks across APIs, data flow, CI/CD pipelines, and AI agent interactions • Mapping threats using MITRE ATT&CK/ATLAS for AI-specific attack surfaces • Producing structured threat models compatible with IriusRisk import formats • Providing clear diagrams (DFD-level) for stakeholders and security tooling ingestion • Supporting Jira-driven security analysis with actionable remediation guidance • Assisting in CI/CD security hardening and control recommendations I focus on delivering practical, engineer-ready outputs that your team can directly use for discussions, backlog tickets, and mitigation planning. I would be happy to review your existing architecture and join ongoing security discussions with your engineering team. Best regards

@sadguns

Hello, I am an AI Engineer with experience in AI agents, multi-agent architectures, workflow automation, API integrations, and secure AI application development. I can assist with threat modeling for your AI-powered Cornerstone workflow and help translate security requirements into actionable Jira stories and technical recommendations. My approach includes: 1. STRIDE and MITRE ATT&CK threat analysis 2. OWASP Top 10 and AI security risk assessment 3. AI Agent and LLM threat modeling 4. CI/CD and DevSecOps security review 5. Data flow, trust boundary, and attack surface analysis 6. Architecture diagrams compatible with IriusRisk workflows 7. Security remediation recommendations and reporting 8. Technical discussions with engineering teams I can review the existing architecture, identify potential threats, document risks, prioritize mitigations, and provide structured outputs that your team can directly use for implementation and compliance discussions. To begin, I would like to review the current architecture, workflows, and security requirements. Based on that, I can provide a detailed threat model, risk register, attack scenarios, and recommendations suitable for import into IriusRisk and Jira tracking. Looking forward to discussing the project. Best Regards, Sadgun SriRam AI/ML Developer | AI Agents, Security & Automation Solutions Specialist