Description

You will design and implement secure software, systems, and infrastructure to meet high security standards. You will own the security posture across mobile, IoT, cloud, and carrier network technologies.

Responsibilities

• Perform technical security assessments, code reviews, and vulnerability testing to identify and remediate risks.
• Design and build proactive methods to enhance security posture across mobile, IoT, cloud, and carrier network technologies.
• Lead information security reviews for new technologies and develop remediation plans.
• Collaborate with Engineering and Operations teams to address vulnerabilities found via scans, breaches, or PSIRTs.
• Develop threat models depicting trust boundaries, threat agents, vectors, and necessary safeguards.

Required Skills

• 10+ years of experience in Cybersecurity.
• 5+ years of experience with threat modeling frameworks such as STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, or CAPEC.
• 8+ years of experience with SSL certificate management.
• 5+ years of experience in firewall policy design and vulnerability analysis/mitigation.
• 5+ years of experience with Java, Python, or Node.js and related frameworks.
• Proficiency with AWS and Azure cloud environments.
• Experience with scripting tools including Python, Perl, Shell, HTML, or PHP.
• Hands-on experience with Splunk for log and event management.
• Working knowledge of web application development and RESTful APIs.

Preferred Skills

• Experience with load balancers (A10, F5), CheckPoint firewalls, Venafi, or Mobile Iron MDM.
• Familiarity with malware protection (FireEye), privileged accounts (CyberArk), or SIEM (ArcSight).
• Knowledge of federal and compliance regulations including SOX, PCI, and CPNI.

Key Skills

Education

Any Graduate