Threat Modeler: Python Security Architect & DevOps

Tata Consultancy Services Limited; Irving (TX); Presencial; USD 100 000 - 130 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Discretionary Annual Incentive

Comprehensive Medical Coverage (Health

Dental & Vision

401K Plan

Certification & Training Reimbursement

Resumo da oferta

Tata Consultancy Services Limited in Irving, TX is seeking an experienced cybersecurity engineer to lead threat modeling, automate security workflows, and ensure secure software development across CI/CD pipelines. The role emphasizes Python development, FastAPI, and adherence to SDLC processes.

You will collaborate within an agile DevOps team, perform security reviews, and contribute to secure cloud and on-prem infrastructure with strong focus on threat mitigation and tooling enhancements.

Qualificações

• IT experience minimum of 6 years with minimum of 4 years Cybersecurity/Information Security - must have.
• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) - must have demonstrated experience.
• Experience working in a cybersecurity role - must have.
• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation - must have.
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) - must have.
• Jira or other ticketing systems - must have.
• Design and review technical architectures - must have.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (must have).
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (must have).
• Ensure all software platforms adhere to Citi's security standards and Software Development Life Cycle (SDLC) processes (must have).
• Identifying vulnerabilities using CWE or OWASP.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Cloud Development Kit (CDK), GitOps.
• Operating in a DevOps / agile team structure.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Karat Assessment (Python focus) is required for consideration.

Responsabilidades

• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Work with little supervision to complete work
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.

Conhecimentos

Threat Modeling

STRIDE/PASTA/Attack trees

Cybersecurity experience

Security best practices

Scripting (Terraform/CloudFormation)

Jira

Architecture design review

Python

FastAPI

Unit testing Pytest

SDLC compliance

CWE/OWASP

Docker/Kubernetes

DevOps

CDK / GitOps

Penetration testing

Snowflake

MongoDB

Terraform Cloud/GitHub/Databricks

Karat (Python)

Formação académica

Bachelor of Computer Science

Ferramentas

Terraform

CloudFormation

Jira

Docker

Kubernetes

CDK

GitOps

Snowflake

MongoDB

Terraform Cloud

GitHub

Databricks

Descrição da oferta de emprego

Tata Consultancy Services Limited in Irving, TX is seeking an experienced cybersecurity engineer to lead threat modeling, automate security workflows, and ensure secure software development across CI/CD pipelines. The role emphasizes Python development, FastAPI, and adherence to SDLC processes.

You will collaborate within an agile DevOps team, perform security reviews, and contribute to secure cloud and on-prem infrastructure with strong focus on threat mitigation and tooling enhancements.