Description

You design and secure enterprise application architectures, managing the full scope from app servers to networking dependencies. This role is on-site.

Responsibilities

• Deconstruct enterprise application architectures, mapping components including app servers, databases, middleware, and networking.
• Build application threat models and publish findings to stakeholders.
• Automate Application Security (AppSec) workflows using tooling, APIs, and CI/CD integration.
• Partner with application, service, and platform teams to capture accurate architecture details.

Required Skills

• 4+ years in Systems Architecture and/or Systems Development.
• 3+ years of Cybersecurity experience.
• 1+ year experience with AWS, Azure, or GCP.
• 1+ year proficiency in Python programming.
• Proficiency in at least one Threat Modeling methodology (e.g., STRIDE/PASTA).
• Familiarity with OWASP Top 10, CAPEC, and MITRE ATT&CK.
• Experience with CI/CD integration and security logic within pipelines.
• Ability to run multiple threat models in parallel with short cycle times.

Preferred Skills

• Java or C# proficiency.
• CISSP certification.

Key Skills

Education

Any Gradute