Must Have Technical/Functional Skills
- IT experience minimum of 6 years with minimum of 4 years Cyber-Security/Information Security – must
- Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) – must.
- Identifying vulnerabilities using CWE or OWASP.
- Experience working in a cyber-security role - must.
- Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security,
network/segmentation – must.
- Operating systems and their hardening.
- Development concepts (such as: CICD, Pipelines, SDLC).
- Scripting languages, Infrastructure as Code (Terraform, CloudFormation) – must.
- Cloud Development Kit (CDK), GitOps.
- Operating in a DevOps / agile team structure.
- Jira or other ticketing systems – must.
- Understanding of docker/K8S/serverless/helm.
- Support or perform pen testing.
- Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
- Design and review technical architectures – must.
Roles & Responsibilities
- Threat Modeling using a documented process.
- Development of automation tools as required.
- Maintain a high standard of work in identifying threats and specifying mitigating controls.
- Attending to the lifecycle of identified threats and controls.
- Delivery of threat models and supporting tasks within existing timeframes.
- Provide feedback, support, and improvements to the existing threat modeling process.
- Present work to seniors, the team, and other technical teams.
- Work with little supervision to complete work
Bachelor's degree in computer related field or equivalent work experience.
Associate level cloud certification
- AWS Certified Developer, AWS Certified Solutions Architect, AWS Certified SysOps Administrator
- Google Associate Cloud Engineer or other professional GCP certification
- Oracle Cloud Infrastructure Certified Architect Associate, Oracle Cloud Infrastructure Certified Cloud Operations Associate
- Microsoft Certified: Azure Developer Associate
Associate or professional cyber-security
- ISACA Certified Information Systems Auditor (CISA)
- GIAC Security Essentials (GSEC)
- ISC2 Systems Security Certified Practitioner (SSCP)
- Microsoft Certified: Security Operations Analyst Associate; Information Protection Administrator A ssociate
Salary Range: $110,000 to $125,000 per year
Desired Skills
Cyber Threat Hunting
Salary Range
$110,000-$125,000 a year
Desired Candidate Profile
Qualifications : BACHELOR OF COMPUTER SCIENCE