US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other
What You Will Do:
- Analyze Complex Security Data: Securely parse and analyze raw JSON/SBOM/CBOM scans (generated by tools like Sonatype and CBOM Kit) across an enterprise portfolio of ~128 applications.
- Map Cryptographic Vulnerabilities: Identify critical deviations from target North Star standards, specifically mapping migrations from TLS 1.0/1.2 to TLS 1.3, weak ciphers to AES-256-GCM, and outdated SSH host keys to modern standards.
- Identify Ecosystem Patterns: Group applications by their infrastructure characteristics and vulnerability signatures, factoring in complex constraints like hardware load balancers, IoT device memory limits, and legacy undocumented business rules.
- Architect Characteristic Maps: Build comprehensive, sanitized technical mapping tables that define exactly what remediation templates need to be built by the offshore Cloud/AI team, ensuring zero proprietary vulnerability data leaves the secure network.
- Drive PQC Readiness: Guide the structural transition logic for Post-Quantum Cryptography (PQC) readiness, focusing on hybrid TLS implementations and modern key management.
Must-Have Qualifications:
- Senior-Level Expertise: Extensive, hands-on background in Cybersecurity, Cryptography, and Security Data Analysis.
- Deep Cryptographic Knowledge: Absolute technical mastery of enterprise encryption protocols, including TLS 1.3, IKEv2 IPsec, AES-256, and modern PQC concepts (e.g., ML-KEM, ML-DSA).
- Data Parsing Skills: High proficiency in parsing, querying, and analyzing raw security data logs (JSON, SBOM, CBOM formats) to extract actionable trends.
- Legacy Infrastructure Acumen: Ability to understand and navigate the constraints of 10-to-20-year-old revenue-generating enterprise applications and hardware.
- Security Clearance/Compliance: Must be eligible and willing to clear expedited enterprise security onboarding and work on-site under strict, zero-data-export handling protocols
We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.