Description

You will own technical architecture reviews and threat modeling processes to identify exploitable threats and propose mitigation strategies.

Responsibilities

• Conduct thorough threat modeling exercises utilizing established methodologies and frameworks.
• Manage the lifecycle of identified threats and associated controls to ensure timely updates.
• Perform technical architecture reviews to pinpoint security opportunities and vulnerabilities.
• Present findings and progress updates to senior leadership and technical stakeholders.

Required Skills

• 8+ years of experience in Cybersecurity.
• 4+ years of experience working with Azure.
• Proficiency with threat modeling methodologies such as MITRE ATT&CK, STRIDE, or PASTA.
• Experience with Infrastructure as Code including Terraform and CloudFormation.
• Strong understanding of security practices: authentication, authorization, encryption, and network segmentation.
• Knowledge of REST APIs and cloud security frameworks.
• Experience with SDLC, CI/CD pipelines, and DevOps/Agile environments.
• Ability to identify vulnerabilities using CWE or OWASP.
• Familiarity with Jira or similar ticketing systems.
• Knowledge of operating system hardening, Docker, Kubernetes, and serverless architecture.

Preferred Skills

• Professional certifications such as CISSP, CCSP, CISAm, or AZ-500.
• Hands-on experience with Cloud Development Kit (CDK), GitOps, or Helm.
• Development experience in Python or Node.

Key Skills

Education

Any Graduate