Description

Own security architecture and threat modeling processes to identify exploitable threats and propose mitigation strategies.

Responsibilities

• Conduct thorough threat modeling exercises using established methodologies and frameworks.
• Perform technical architecture reviews to pinpoint security opportunities and vulnerabilities.
• Manage the lifecycle of identified threats and associated mitigation controls.
• Deliver comprehensive threat models and documentation within specified timeframes.
• Present findings and progress updates to senior leadership and technical stakeholders.

Required Skills

• 8+ years of experience in Cybersecurity.
• 4+ years of experience working with Azure.
• Proficiency with threat modeling methodologies such as MITRE ATT&CK, STRIDE, or PASTA.
• Hands-on experience with Azure, Rest API, Kubernetes, Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks.
• Technical architecture design and review expertise.
• Ability to identify vulnerabilities using CWE or OWASP.
• Knowledge of security practices including authentication, authorization, logging/monitoring, encryption, and network segmentation.
• Experience with Infrastructure as Code (Terraform, CloudFormation) and scripting languages.
• Understanding of CI/CD pipelines, SDLC, and operating system hardening.
• Familiarity with Jira or similar ticketing systems.

Preferred Skills

• Professional certifications such as CISSP, CCSP, CISA, or AZ-500.
• Knowledge of industry standards including ISO, NIST, and Cloud Security Alliance (CSA).
• Development experience in Python or Node.

Key Skills

Education

Any Graduate