Cyber Security Architect (Azure Cloud Security)

Pipe Recruit; California (MO); In loco; USD 165.000 - 248.000; Tempo pieno

Descrizione del lavoro

A cybersecurity recruitment firm is looking for a Cyber Security Architect specializing in Azure Cloud Security. The role demands extensive knowledge of Azure security services, including AKS and Active Directory. Key responsibilities include designing security controls, conducting threat modeling, and creating detailed security documentation. Candidates must have strong analytical abilities and be adept at managing multiple tasks independently. This is a contract position based in California with onsite requirements.

Competenze

• In-depth knowledge of Azure security services, including AKS, Active Directory, MFA, and ADB2C.
• Proficiency in threat modeling methodologies (e.g., STRIDE).
• Ability to create high-quality security documents, including CBOMs, traceability matrices, and risk reports.
• Proficiency in threat modeling methodologies (e.g., STRIDE).
• Experience with CVSS 3.0/3.1 for risk scoring and analysis.
• Ability to create security documents such as CBOMs, traceability matrices, and risk reports.
• Strong analytical and organizational skills; able to work independently.

Mansioni

• Design and implement security controls for Azure environments.
• Conduct threat modeling using frameworks like STRIDE.
• Monitor security at both platform and application levels.
• Conduct threat modeling using STRIDE and perform security risk analyses.
• Develop and maintain a Security Risk Management Plan, Traceability Matrix, and Security Risk Management Report.
• Monitor security at platform and application levels; document designs, threats, and mitigations; create CBOMs.

Conoscenze

Azure security services

Threat modeling methodologies

Documentation and reporting

Analytical skills

Attention to detail

Problem-solving abilities

mTLS

Azure Managed Identities

Control plane security

Data plane security

Threat modeling

CVSS 3.0/3.1

CBOM

Traceability matrix

Risk reports

Documentation

Descrizione del lavoro

Cyber Security Architect (Azure Cloud Security)

About the job Cyber Security Architect (Azure Cloud Security)

Job Title: Cyber Security Architect (Azure Cloud Security)
Location: Sylmar, CA (Day 1 Onsite)

Job Type: Contract

Key Responsibilities:

• Azure Security Implementation:
  • Design and implement security controls for AKS Cluster, Active Directory, MFA, APIs, and Azure AD B2C.
  • Apply zero trust architecture principles and implement mTLS and Azure Managed Identities.
  • Secure both control plane and data plane in Azure environments.
• Threat Modeling and Risk Management:
  • Conduct threat modeling using frameworks like STRIDE (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege).
  • Perform security risk analysis using CVSS 3.0/3.1 and evaluate residual risks.
  • Develop and maintain a Security Risk Management Plan, Traceability Matrix, and Security Risk Management Report.
• Security Monitoring and Documentation:
  • Monitor security at both platform and application levels.
  • Document system designs, threats, and mitigation strategies, including screenshots and detailed reports.
  • Create a Cybersecurity Bill of Materials (CBOM) and ensure compliance with security standards.
• Threat Modeling Process:
  • Identify critical assets, decompose applications, and map threats using STRIDE.
  • Rate risks using appropriate tools and generate comprehensive reports.

Required Skills and Qualifications:

• Technical Expertise:
  • In-depth knowledge of Azure security services, including AKS, Active Directory, MFA, and ADB2C.
  • Strong understanding of zero trust architecture, mTLS, and Azure Managed Identities.
  • Familiarity with control plane and data plane security implementation.
• Threat Modeling and Risk Management:
  • Proficiency in threat modeling methodologies (e.g., STRIDE).
  • Experience with CVSS 3.0/3.1 for risk scoring and analysis.
• Documentation and Reporting:
  • Ability to create high-quality security documents, including CBOMs, traceability matrices, and risk reports.
• Soft Skills:
  • Strong analytical and problem-solving abilities.
  • Excellent attention to detail and organizational skills.
  • Ability to work independently and manage multiple tasks effectively.