Threat Modeler

Must Have Technical/Functional Skills

• IT experience minimum of 6 years with minimum of 4 years Cyber-Security/Information Security must

• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) must.

• Identifying vulnerabilities using CWE or OWASP.

• Experience working in a cyber-security role - must.

• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security,

network/segmentation must.

• Operating systems and their hardening.

• Development concepts (such as: CICD, Pipelines, SDLC).

• Scripting languages, Infrastructure as Code (Terraform, Cloud Formation) must.

• Cloud Development Kit (CDK), Git Ops.

• Operating in a Dev Ops / agile team structure.

• Jira or other ticketing systems must.

• Understanding of docker/K8S/serverless/helm.

• Support or perform pen testing.

• Snowflake/Mongo

DB/Terraform Cloud/Git Hub/Databricks.

• Design and review technical architectures must.

Roles & Responsibilities

• Threat Modeling using a documented process.

• Development of automation tools as required.

• Maintain a high standard of work in identifying threats and specifying mitigating controls.

• Attending to the lifecycle of identified threats and controls.

• Delivery of threat models and supporting tasks within existing time frames.

• Provide feedback, support, and improvements to the existing threat modeling process.

• Present work to seniors, the team, and other technical teams.

• Work with little supervision to complete work

Bachelor's degree in computer related field or equivalent work experience.

Associate level cloud certification

• AWS Certified Developer, AWS Certified Solutions Architect, AWS Certified Sys Ops Administrator

• CompTIA Cloud+

• Google Associate Cloud Engineer or other professional GCP certification

• Oracle Cloud Infrastructure Certified Architect Associate, Oracle Cloud Infrastructure Certified Cloud Operations Associate

• Microsoft Certified:
Azure Developer Associate

Associate or professional cyber-security

• ISACA Certified Information Systems Auditor (CISA)

• GIAC Security Essentials (GSEC)

• ISC2 Systems Security Certified Practitioner (SSCP)

• CompTIA CySA+

• Microsoft Certified:
Security Operations Analyst Associate;
Information Protection Administrator A ssociate

Salary Range: $110,000 to $125,000 per year