Cyber Security Architect

Mphasis; Berkeley Heights (NJ); On-site; USD 110,000 - 150,000; Full time

Job summary

Mphasis is seeking a cybersecurity professional to join our team in Berkeley Heights, NJ. You will collaborate with Cyber Threat Intelligence across regions, support Incident Response and Vulnerability Management, and monitor threat intelligence from multiple sources to inform defense decisions.

You will conduct threat modeling, run proactive threat hunts, and perform web application testing in line with OWASP and approved scopes, using tools like Burp Suite, while maintaining data

Responsibilities

• Collaborate with Cyber Threat Intelligence in other regions.
• Support Incident Response, Purple team, and Vulnerability Management teams by providing situational awareness on threats.
• Monitor and evaluate cyber threat intelligence from multiple sources.
• Participate in threat modeling processes and methodologies.
• Execute threat hunts to proactively look for malicious activities.
• Conduct testing per scope/timeline, avoid disruption, and follow industry methods (OWASP).
• Testing for web app flaws including injection, XSS, CSRF, broken authentication & session management, misconfiguration, data exposure, and insecure direct object reference.
• Use authorized tools (e.g., Burp Suite) and techniques to identify vulnerabilities and assess risk.
• Maintain strict confidentiality and data security practices.
• Provide findings, guidance to improve security posture, and support retesting for remediation validation.

Skills

Threat intelligence collaboration

Incident response support

Threat hunting

Threat modeling

Web security testing

Burp Suite

Data confidentiality

Tools

Burp Suite

Job description

• Collaborate with Cyber Threat Intelligence in other regions.
• Support Incident Response, Purple team, and Vulnerability Management teams by providing situational awareness on threats.
• Monitor and evaluate cyber threat intelligence from multiple sources.
• Participate in threat modeling processes and methodologies.
• Execute threat hunts to proactively look for malicious activities.
• Conduct testing activities as per the agreed scope and timeline, avoid disruption to business operations, and adhere to industry-standard methodologies (e.g., OWASP).
• Testing methodologies for web applications including injection attacks, XSS, CSRF, broken authentication & session management, security misconfiguration, sensitive data exposure, and insecure direct object reference.
• Use authorized tools (e.g., Burp Suite) and techniques to identify vulnerabilities and assess risk.
• Maintain strict confidentiality and data security practices.
• Offer clarification or additional details on findings as needed, provide general guidance on improving security posture, and support retesting to validate remediation efforts.