Description

You will lead the design and implementation of security standards across software, systems, and infrastructure.

Responsibilities

• Lead security reviews of new technologies, architectural designs, and remediation planning.
• Collaborate with Engineering and Operations teams to resolve vulnerabilities identified through scans, breaches, or PSIRTs.
• Apply threat modeling techniques including STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, and CAPEC.
• Design Mobile Application Threat Models and Cyber Threat Trees using data flow diagrams.
• Serve as a subject matter expert for network and information security, including firewall policy design and SSL certificate management.
• Develop technical specifications and manage security research with minimal supervision.

Required Skills

• 10+ years of cybersecurity experience.
• 5+ years of experience with Java, frameworks, Python, and Node.js.
• 5+ years of hands-on experience with threat modeling (STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, CAPEC).
• 8+ years of experience with SSL and 5+ years with firewall policy design.
• 5+ years of experience in vulnerability analysis and mitigation.
• Proficiency with security tools including A10, F5, CheckPoint, Venafi, Mobile Iron, FireEye, ArcSight, Splunk, and Symantec.
• Experience with Cloud platforms (AWS, Azure, PCF, Docker) and scanning tools like Qualys.
• Experience with application security tools such as Veracode and mobile application security.
• Strong scripting skills in Python, Perl, Shell, HTML, and PHP.
• Knowledge of RESTful APIs, web application development, and compliance regulations (SOX, PCI, CPNI).

Key Skills

Education

Any Gradute