Manager - Cyber Security

Mphasis; Alpharetta (GA); On-site; USD 90,000 - 130,000; Full time

Job summary

Mphasis is seeking a Cyber Threat Intelligence professional in Alpharetta, GA to collaborate with regional teams, support incident response, purple team exercises, and vulnerability management by providing situational threat awareness.

You will monitor threat intelligence feeds, participate in threat modeling, conduct threat hunts, and perform testing per OWASP guidelines, using authorized tools like Burp Suite, while maintaining confidentiality and guiding remediation efforts.

Responsibilities

• Collaborate with Cyber Threat Intelligence in other regions.
• Support Incident Response, Purple team, and Vulnerability Management teams by providing situational awareness on threats.
• Monitor and evaluate cyber threat intelligence from multiple sources.
• Participate in threat modeling processes and methodologies.
• Execute threat hunts to proactively look for malicious activities.
• Conduct testing activities as per the agreed scope and timeline, avoid disruption to business operations, and adhere to industry-standard methodologies (e.g., OWASP).
• Testing methodologies for web applications including injection attacks, XSS, CSRF, broken authentication & session management, security misconfiguration, sensitive data exposure, and insecure direct object reference.
• Use authorized tools (e.g., Burp Suite) and techniques to identify vulnerabilities and assess risk.
• Maintain strict confidentiality and data security practices.
• Offer clarification or additional details on findings as needed, provide general guidance on improving security posture, and support retesting to validate remediation efforts.

Job description

• Collaborate with Cyber Threat Intelligence in other regions.
• Support Incident Response, Purple team, and Vulnerability Management teams by providing situational awareness on threats.
• Monitor and evaluate cyber threat intelligence from multiple sources.
• Participate in threat modeling processes and methodologies.
• Execute threat hunts to proactively look for malicious activities.
• Conduct testing activities as per the agreed scope and timeline, avoid disruption to business operations, and adhere to industry-standard methodologies (e.g., OWASP).
• Testing methodologies for web applications including injection attacks, XSS, CSRF, broken authentication & session management, security misconfiguration, sensitive data exposure, and insecure direct object reference.
• Use authorized tools (e.g., Burp Suite) and techniques to identify vulnerabilities and assess risk.
• Maintain strict confidentiality and data security practices.
• Offer clarification or additional details on findings as needed, provide general guidance on improving security posture, and support retesting to validate remediation efforts.