Description

You will focus on building and maintaining cyber threat models to secure technical architectures.

Responsibilities

• Build cyber threat models following defined standards and define the scope and depth of analysis.
• Create component diagrams with control flow graphs to visualize execution paths and attack possibilities.
• Identify assets, security controls, trust zones, and threat agents to create a traceability matrix of security gaps.
• Execute cyber-attack simulations using defined methodologies and tools.
• Write and maintain technical documentation relating to threat models and analyzed systems.
• Partner with stakeholders to provide technical guidance and learning opportunities.

Required Skills

• 6+ years of experience in Information Technology with at least 3 years in Cyber Security.
• 1+ years of direct experience in threat modeling.
• Familiarity with threat modeling methodologies such as MITRE, STRIDE, PASTA, LINDDUN, CVSS, Attack Trees, Security Cards, hTMM, Quantitative Threat Modeling, VAST, or OCTAVE.
• Knowledge of cybersecurity processes referencing the NIST CSF framework.
• Experience with network attack simulation tools including AttackIQ, Cymulate, Pentera, SafeBreach, or Mandiant Security Validation.
• Proficiency in writing professional technical documentation.
• Strong critical thinking and problem-solving skills.

Preferred Skills

• Microsoft Azure Security Technologies or AWS Security Specialty certifications.
• ATT&CK for Cyber Threat Intelligence, CISSP, or CCSP certifications.

Key Skills

Education

Any Graduate