Threat Modeling Security Architect

We are seeking a skilled professional with a strong background in threat modeling and development. This role is crucial for ensuring the security and integrity of our applications and systems.

• Experience with threat modeling frameworks, attack vectors, and vulnerability analysis: CAPEC, Telecommunication&CK, STRIDE.
• Experience with application security controls (Web, API, Mobile, AI).
• Experience with common information security management and application frameworks: NIST 800-53, CSF, OWASP ASVS.
• Full stack knowledge of application architectures including Single Page Applications, REST APIs, SOAP APIs, Mobile Applications.
• Experience with Java, Javascript, and mobile application development.
• Knowledge or familiarity with database architectures including Oracle, SQL, DB2, and NoSQL Databases.
• Experience with Cloud security, architecture, design, implementation, and operations.
• Exposure to IAM Controls (OAuth 2.0, OIDC, JWT).
• Strong familiarity with Cryptography Controls (Data at rest, in motion).
• CISSP, CISM, CSSLP, CISA, CRISC, OSCP certifications.
• Prior work experience at client or in client's industry.

• Cyber threat intelligence experience.
• Additional relevant certifications or training.
• Experience with DevSecOps in a cloud environment.

• Conduct threat modeling and vulnerability analysis to identify potential security risks.
• Collaborate with development teams to integrate security controls into applications.
• Design and implement cloud security solutions and architectures.