Description

You will enhance the security posture of software, systems, and infrastructure through technical assessments and threat modeling.

This role is remote.

Responsibilities

• Lead information security reviews for new technologies, designs, and remediation planning.
• Conduct technical security assessments, code reviews, and vulnerability testing to mitigate risks.
• Collaborate with Engineering and Operations teams to resolve vulnerabilities identified via scans, breaches, or PSIRTs.
• Implement and oversee threat modeling approaches including STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, and CAPEC.
• Define technical specifications and security requirements to ensure alignment with SOX, PCI, and CPNI compliance.

Required Skills

• 10+ years of experience in cybersecurity with expertise in network and application security.
• 5+ years of experience in Java, Python, and Node.js.
• 5+ years of experience in threat modeling methodologies.
• 8+ years of experience in SSL and firewall policy design.
• 5+ years of experience in vulnerability analysis, mitigation, and cloud security.
• Proficiency with AWS, Azure, PCF, and Docker.
• Experience with SIEM solutions like ArcSight and Splunk.
• Hands-on experience with Qualys, Veracode, CheckPoint, and CyberArk.
• Knowledge of load balancers (A10, F5) and malware protection (FireEye).

Preferred Skills

• Experience in the telecom industry.
• Proficiency in security automation and scripting using Python, Perl, Shell, HTML, or PHP.
• Advanced knowledge of Agile and DevOps methodologies.

Key Skills

Education

Any Gradute