Senior Threat Modeler

Job Title: Senior Threat Modeler
Duration- Fulltime Permanent
Location: Irving, TX/Jersey City, NJ/Tampa, FL (Onsite From Day 1)

Job Description:
Must Have Technical/Functional Skills

Technical skills

Expected to have two to five years of experience in several of the following:
" IT experience minimum of 6 years with minimum of 4 years Cybersecurity/Information Security must have.
" Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Telecommunication&ck) must have demonstrated experience.
" Experience working in a cybersecurity role must have.
" Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation must have.
" Scripting languages, Infrastructure as Code (Terraform, CloudFormation) must have.
" Jira or other ticketing systems must have.
" Design and review technical architectures must have.
" Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (must have).
" Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (must have).
" Ensure all software platforms adhere to Client's security standards and Software Development Life Cycle (SDLC) processes (must have).
" Identifying vulnerabilities using CWE or OWASP.
" Operating systems and their hardening.
" Development concepts (such as: CICD, Pipelines, SDLC).
" Cloud Development Kit (CDK), GitOps.
" Operating in a DevOps / agile team structure.
" Understanding of docker/K8S/serverless/helm.
" Support or perform pen testing.
" Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
" Karat Assessment (Python focus) is required for consideration.

Roles & Responsibilities:-
" Threat Modeling using a documented process.
" Development of automation tools as required.
" Maintain a high standard of work in identifying threats and specifying mitigating controls.
" Attending to the lifecycle of identified threats and controls.
" Delivery of threat models and supporting tasks within existing timeframes.
" Provide feedback, support, and improvements to the existing threat modeling process.
" Present work to seniors, the team, and other technical teams.
" Work with little supervision to complete work
" Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.