Description

Lead technical security initiatives and defense strategies across infrastructure and application layers.

This role is on-site.

Responsibilities

• Execute threat modeling using STRIDE, PASTA, TRIKE, Attack Tree, DREAD, Kill Chain, and CAPEC.
• Design and implement firewall policies and manage SSL/TLS certificate lifecycles via Venafi.
• Perform vulnerability analysis and mitigation across cloud and on-premise environments.
• Manage security controls including IDS/IPS, SIEM, and privileged access management.
• Oversee application security scanning and malware protection protocols.

Required Skills

• 10+ years of experience with Java, Python, Node.js, and various frameworks.
• 8+ years of experience managing SSL.
• 5+ years of experience in threat modeling (STRIDE, PASTA, TRIKE, etc.).
• 5+ years of experience in firewall policy design and vulnerability mitigation.
• 5+ years of experience with Cloud platforms (AWS, Azure) and Cloud Platform services (PCF, Docker).
• 5+ years of experience with AppSec tools (VeraCode) and scanning (Qualys).
• Experience with load balancers (A10, F5) and firewalls (CheckPoint).
• Experience with MDM (Mobile Iron), Malware Protection (FireEye), and APT defense (Damballa).
• Experience with Privileged Accounts (CyberArk), SIEM (ArcSight), and Log/Event management (Splunk).
• Experience with Intrusion IDS/IPS (Symantec).

Preferred Skills

• Bachelor's degree in Computer Science.

Key Skills

Education

Bachelor's degree in Computer Science