Description

Lead threat modeling and security assessment efforts to identify and mitigate architectural risks.

Responsibilities

• Configure the Threat Modeler tool and manage the onboarding process for new applications.
• Develop threat modeling frameworks, libraries, and technical documentation.
• Perform manual and gray box penetration testing focusing on authentication, session management, access controls, input validation, and business logic.
• Manage the bug bounty program and oversee vulnerability remediation workflows.
• Train developers on secure coding responsibilities and security best practices.

Required Skills

• 5+ years of experience in threat modeling and cyber security policy development.
• Proficiency with Threat Modeler tool.
• Hands-on experience with DAST tools including Burp Suite Pro, Rapid7 App Spider, OpenVAS, and ZAP proxy.
• Experience with IAST and Contrast Security.
• Knowledge of JFrog Artifactory and Xray scanner.
• Deep understanding of OWASP and OSSTMM standards.
• Proven ability in risk management, risk alignment, and vulnerability reporting.
• Experience in web application penetration testing.

Preferred Skills

• Experience in presenting security risks and remediation strategies to stakeholders.

Key Skills

Education

ANY GRADUATE