Security Architect

Delta System & Software, Inc.; Berkeley Heights (NJ); On-site; USD 90,000 - 130,000; Full time

Job summary

Delta System & Software, Inc. in Berkeley Heights, NJ seeks a cybersecurity professional to join our threat intelligence and incident response teams. You will monitor threats, assist in threat modeling, and support vulnerability management to strengthen our security posture.

Responsibilities include conducting threat hunts, testing web applications per OWASP guidelines, using tools like Burp Suite, and communicating findings with clear remediation guidance while maintaining data confidentiality.

Responsibilities

• Collaborate with Cyber Threat Intelligence in other regions.
• Support Incident Response, Purple team, and Vulnerability Management teams by providing situational awareness on threats.
• Monitor and evaluate cyber threat intelligence from multiple sources.
• Participate in threat modeling processes and methodologies.
• Execute threat hunts to proactively look for malicious activities.
• Conduct testing activities as per the agreed scope and timeline, avoid disruption to business operations, and adhere to industry-standard methodologies (e.g., OWASP).
• Testing methodologies for web applications including injection attacks, XSS, CSRF, broken authentication & session management, security misconfiguration, sensitive data exposure, and insecure direct object reference.
• Use authorized tools (e.g., Burp Suite) and techniques to identify vulnerabilities and assess risk.
• Maintain strict confidentiality and data security practices.
• Offer clarification or additional details on findings as needed, provide general guidance on improving security posture, and support retesting to validate remediation efforts.

Tools

Burp Suite

Job description

• Collaborate with Cyber Threat Intelligence in other regions.
• Support Incident Response, Purple team, and Vulnerability Management teams by providing situational awareness on threats.
• Monitor and evaluate cyber threat intelligence from multiple sources.
• Participate in threat modeling processes and methodologies.
• Execute threat hunts to proactively look for malicious activities.
• Conduct testing activities as per the agreed scope and timeline, avoid disruption to business operations, and adhere to industry-standard methodologies (e.g., OWASP).
• Testing methodologies for web applications including injection attacks, XSS, CSRF, broken authentication & session management, security misconfiguration, sensitive data exposure, and insecure direct object reference.
• Use authorized tools (e.g., Burp Suite) and techniques to identify vulnerabilities and assess risk.
• Maintain strict confidentiality and data security practices.
• Offer clarification or additional details on findings as needed, provide general guidance on improving security posture, and support retesting to validate remediation efforts.