SecurityHigh signal

Threat Modeling

The practice of proactively identifying how a system could be attacked and what its weak points are, before it ships — rather than discovering vulnerabilities only after an incident.

Think of it like

Like a heist movie's crew studying a building's blueprints to find every possible way in, except this time the goal is to seal those ways in, not use them.

Junior or senior?

Junior sounds like

Only thinks about security after an incident happens.

Senior sounds like

Has built a threat model proactively and can name a weak point it surfaced that wasn't obvious beforehand.

Ask them

“Walk me through a threat model you built for a system. What weak point did it surface that wasn't obvious beforehand?”