Threat Modeler

Covetus; Irving (TX); On-site; USD 90,000 - 150,000; Full time

Job summary

Covetus is seeking an experienced cybersecurity software engineer in Irving, TX to develop secure Python-based applications and threat models. Responsibilities include designing and reviewing architectures, implementing automation, and ensuring adherence to SDLC and security standards.

The role requires strong Python skills (asynchronous programming), FastAPI, unit testing with Pytest, and hands-on experience with Terraform, CloudFormation, Docker, and Kubernetes.

Qualifications

• IT experience minimum of 6 years with minimum of 4 years Cybersecurity/Information Security – must have.
• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) – must have demonstrated experience.
• Experience working in a cybersecurity role – must have.
• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation – must have.
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) – must have.
• Jira or other ticketing systems – must have.
• Design and review technical architectures – must have.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (must have).
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (must have).
• Ensure all software platforms adhere to Citi's security standards and Software Development Life Cycle (SDLC) processes (must have).
• Identifying vulnerabilities using CWE or OWASP.
• Operating systems and their hardening.
• Operating in a DevOps / agile team structure.
• Understanding of docker/K8S/serverless/helm.
• Karat Assessment (Python focus) is required for consideration.
• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete work
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.

Responsibilities

• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.
• Present work to seniors, the team, and other technical teams.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Attend to lifecycle of identified threats and controls.

Skills

Threat modeling

Python

FastAPI

Unit testing

Scripting

Terraform

CloudFormation

Jira

Architecture design

DevOps

Docker

Kubernetes

Serverless

Helm

CWE/OWASP

Tools

Jira

Terraform

CloudFormation

Docker

Kubernetes

Helm

Job description

Expected to have two to five years of experience in several of the following:

• IT experience minimum of 6 years with minimum of 4 years Cybersecurity/Information Security – must have.
• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) – must have demonstrated experience.
• Experience working in a cybersecurity role – must have.
• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation – must have.
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) – must have.
• Jira or other ticketing systems – must have.
• Design and review technical architectures – must have.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (must have).
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (must have).
• Ensure all software platforms adhere to Citi's security standards and Software Development Life Cycle (SDLC) processes (must have).
• Identifying vulnerabilities using CWE or OWASP.
• Operating systems and their hardening.
• Operating in a DevOps / agile team structure.
• Understanding of docker/K8S/serverless/helm.
• Karat Assessment (Python focus) is required for consideration.
• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete work
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.