Description

You will design and implement secure software, systems, and infrastructure to maintain high security standards across mobile, IoT, cloud, and carrier network technologies.

This role is hybrid.

Responsibilities

• Perform technical security assessments, code reviews, and vulnerability testing to identify and remediate risks.
• Design and build proactive methods to enhance security posture across mobile, IoT, cloud, and carrier network technologies.
• Lead information security reviews for new technologies and develop remediation plans.
• Collaborate with Engineering and Operations teams to address vulnerabilities found via scans, breaches, or PSIRTs.
• Develop threat models depicting trust boundaries, threat agents, vectors, and necessary safeguards.

Required Skills

• 10+ years of experience in Cybersecurity.
• 5+ years of experience with threat modeling frameworks such as STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, or CAPEC.
• 8+ years of experience with SSL certificate management.
• 5+ years of experience in firewall policy design and vulnerability analysis/mitigation.
• 5+ years of experience with Java, Python, or Node.js and related frameworks.
• Proficiency with AWS and Azure cloud environments.
• Experience with scripting tools including Python, Perl, Shell, HTML, or PHP.
• Hands-on experience with Splunk for log and event management.
• Working knowledge of web application development and RESTful APIs.

Preferred Skills

• Experience with load balancers (A10, F5), CheckPoint firewalls, Venafi, or Mobile Iron MDM.
• Familiarity with malware protection (FireEye), privileged accounts (CyberArk), or SIEM (ArcSight).
• Knowledge of federal and compliance regulations including SOX, PCI, and CPNI.

Key Skills

Education

Any Graduate