Threat Modeling - Cyber Security

• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Train newer members of the team
• Supervise junior members of the team
• Run parts of our threat model service
• Work with little supervision to complete work
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.

You will be responsible for mapping systems, anticipate threats, prioritize risks and design defences., * You must have a cloud certification and from either AWS, GCP or Azure.

• You must have cloud security certification from either AWS, GCP or Azure.
• You must have a cyber-security certification

Essential experience

• Experience working in Cyber-Security/Information Security - must
• Threat Modelling (STRIDE, PASTA, Attack trees, tooling, Att&ck)
• Experience in security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation
• Development concepts (such as: CICD, Pipelines, SDLC)
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation)
• Understanding of docker/K8S/serverless/helm - must.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI
• Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality
• Ensure all software platforms adhere to security standards and Software Development Life Cycle (SDLC) processes