Description

Individual contributor role focused on security architecture and threat modeling within Azure cloud environments.

Responsibilities

• Conduct threat modeling exercises using STRIDE, PASTA, or MITRE ATT&CK to identify exploitable threats and propose mitigation strategies.
• Perform technical architecture reviews to pinpoint security opportunities and evaluate public cloud services.
• Manage the full lifecycle of identified threats and associated controls, ensuring timely updates and adjustments.
• Deliver comprehensive threat models and maintain high-quality documentation within specified timeframes.
• Present findings and progress updates to senior leadership and technical stakeholders.

Required Skills

• 8+ years of experience in cybersecurity.
• 4+ years of experience working specifically in Microsoft Azure.
• Strong technical architecture design and review skills.
• Experience with security practices including authentication, authorization, encryption, logging, monitoring, and network segmentation.
• Knowledge of vulnerability identification using CWE or OWASP.
• Experience with Infrastructure as Code (Terraform, CloudFormation) and scripting languages.
• Understanding of development concepts including CI/CD, pipelines, and SDLC.
• Familiarity with REST APIs and ticketing systems like Jira.
• Knowledge of operating system hardening techniques.

Preferred Skills

• Professional certifications such as CISSP, CCSP, CISA, CISM, or ITIL.
• Azure-specific certifications like AZ-500 or Microsoft Certified: Security Operations Analyst Associate.
• Hands-on development experience in Python or Node.js.

Key Skills

Education

Any Graduate