Job Description
This role requires a senior cyber security professional with expertise in threat modeling, vulnerability assessment, secure architecture, and DevOps practices.
Required Technical/Functional Skills
- IT experience minimum of 6 years, with at least 4 years in Cyber‑Security/Information Security
- Threat Modeling (STRIDE, PASTA, Attack Trees, tooling, ATT&CK)
- Identifying vulnerabilities using CWE or OWASP
- Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation, and operating system hardening
- Development concepts such as CI/CD, pipelines, and SDLC
- Scripting languages and Infrastructure as Code (Terraform, CloudFormation)
- Cloud Development Kit (CDK) and GitOps practices
- Experience with Docker, Kubernetes, serverless, and Helm
- Support or perform penetration testing
- Experience with Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks
- Design and review technical architectures
- Operating in a DevOps / agile team structure
- Jira or other ticketing systems
- Ability to work with little supervision
Roles & Responsibilities
- Conduct threat modeling using a documented process
- Develop automation tools as required
- Identify threats and specify mitigating controls with a high standard of work
- Manage the lifecycle of identified threats and controls
- Deliver threat models and supporting tasks within existing timeframes
- Provide feedback, support, and improvements to the existing threat modeling process
- Present work to seniors, the team, and other technical teams
- Complete work independently
Bachelor’s degree in a computer‑related field or equivalent work experience.
Associate Level Cloud Certification
- AWS Certified Developer, AWS Certified Solutions Architect, AWS Certified SysOps Administrator
- CompTIA Cloud+
- Google Associate Cloud Engineer or other professional GCP certification
- Oracle Cloud Infrastructure Certified Architect Associate, Oracle Cloud Infrastructure Certified Cloud Operations Associate
- Microsoft Certified: Azure Developer Associate
Associate or Professional Cyber‑Security Certifications
- ISACA Certified Information Systems Auditor (CISA)
- GIAC Security Essentials (GSEC)
- ISC2 Systems Security Certified Practitioner (SSCP)
- CompTIA CySA+
- Microsoft Certified: Security Operations Analyst Associate; Information Protection Administrator Associate
Salary Range: $100,000 to $125,000 per year.
Qualifications
BACHELOR OF COMPUTER SCIENCE.