InfoSec

Role :: Threat Modeler Rate - $80-85/hr. on C2C Location :: Remote Responsibilities: - Develop training material for how to engage the Threat Management service, make use of technologies, and interpret findings. - Drive beneficial security change into the business through supporting Developers with creation of threat models for their applications and remediation of potential threats, balancing risk against business need. - Support the Security Architecture team to develop and mature an Application Threat Modeling Program by defining processes, procedures, controls, KRI’s/KPI’s, etc., that identify threats early in the development process reducing risks prior to deployment. - Work with the InfoSec functional teams in the development of the Information Security strategy and roadmap, including and with focus on Threat Modeling; liaison and consult with Enterprise Architecture, IT and the business for ongoing input and awareness - Advise and Contribute to Strategy and Roadmaps Qualifications: - 5-7 years related experience in Cyber Security, Insider Threat, Intelligence Community, Federal Law Enforcement, or a related field - Strong understanding of access controls and authentication mechanisms, PKI, and cryptography - Demonstrated experience developing technical threat models - Demonstrated experience performing security code reviews and explaining results to project teams - Strong understanding of protocols, networking, firewalls, caching, VIPs, proxies, web applications, and database systems · Experience with AWS - Knowledge of several of the following programming languages; Java, C#, Python, C++, Node.JS, JavaScript - Knowledge in one or several of the following Frontend frameworks; React, Angular, Ember, Vue - Minimum of 2 years’ experience working as an Information Security Threat Modeling subject matter expert at a senior level - Minimum of 2 years’ experience working as an Information Security Professional, preferably within the architecture or engineering disciplines Desirable: - Able to provide references to CVEs filled, Bug Bounty Username, or GitHub repositories - One or more security-related certifications associated with AWS, GCP, or Azure - CISSP (+ ISSAP), CCSP, CEH, OSCP, CSSLP Keys to Success in this Role: - Strong written and verbal communication skills - Able to mentor and guide team members - Self-starter, candidate must be able to anticipate tasks and take action - Excellent presentation, program management and relationship management skills Originally posted on Himalayas