Information Security Consultant: Threat Modeling & SSDLC

Tata Consultancy Services; Titusville (NJ); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

401K Plan

Certification & Training Reimbursement

Job summary

Tata Consultancy Services in the United States is seeking an Information Security professional to support risk management, secure development, and threat modeling for a global CRM deployment using Salesforce Life Sciences Cloud.

The role focuses on implementing secure-by-design practices, coordinating with ISRM capabilities, and guiding remediation activities while communicating cybersecurity risks to leadership and project teams.

Qualifications

• Bachelor of Computer Science required.
• Strong knowledge of Information Security Risk Management (ISRM).
• Familiarity with Secure-by-Design and SSDLC.
• Experience with threat modeling and remediation.
• Ability to communicate cybersecurity risks to leadership.

Responsibilities

• Provide Business Information Security consulting for Salesforce Life Sciences Cloud CRM deployment.
• Ensure the application is developed following secure-by-design principles and ISRM controls.
• Define remediation activities and coordinate with Third-Party Risk Management, Data Security and Security Architecture.
• Align security controls with regulatory requirements and enterprise goals.
• Review AI capabilities for security implications.
• Communicate risks to project team and leadership.

Skills

ISRM

SSDLC

Threat Modeling

Vulnerability Management

Security Architecture

Regulatory Alignment

Education

Bachelor's degree in Computer Science

Job description

Tata Consultancy Services in the United States is seeking an Information Security professional to support risk management, secure development, and threat modeling for a global CRM deployment using Salesforce Life Sciences Cloud.

The role focuses on implementing secure-by-design practices, coordinating with ISRM capabilities, and guiding remediation activities while communicating cybersecurity risks to leadership and project teams.