Senior Threat Modeler

Mandatory Skills: Threat Modeling, Python Software Engineering, AWS/Google Cloud Platform, Terraform/CloudFormation, * Minimum 6 years of overall IT experience, including at least 4 years in Cybersecurity/Information Security roles across on-premises and cloud environments.

• Mandatory associate or professional-level cloud certification (AWS or Google Cloud Platform).
• Mandatory associate or professional-level cybersecurity certification.

Core Threat Modeling & Security Practices

• Demonstrated expertise in Threat Modeling methodologies, including any of the following:

• STRIDE
• PASTA
• MITRE ATT&CK / MITRE ATLAS

Strong understanding of security practices covering:

• Authentication and Authorization
• Logging and Monitoring
• Encryption
• Infrastructure Security
• Network Security and Segmentation

Ability to design, assess, and review technical architectures.

Technical Skills - Python, IaC & DevSecOps

• Strong hands-on Python Software Engineering expertise, including:

• Object-Oriented Programming (OOP)
• Classes and Objects
• Dictionaries
• init functions
• Function Calling and Function Passing
• Error Handling
• Code Quality and Best Practices

Ability to write, interpret, and analyze Python scripts.

Strong AWS/Google Cloud Platform infrastructure knowledge.

Hands-on experience understanding and analyzing Infrastructure as Code (IaC), particularly:

• Terraform
• AWS CloudFormation

Understanding of Software Development Lifecycle (SDLC) and CI/CD pipelines.

Technical Assessment

Candidates must be prepared to clear the Karat Python Software Engineering - Junior Assessment.

Important: Python coding proficiency and strong AWS/Google Cloud Platform infrastructure knowledge (particularly Terraform/CloudFormation) are mandatory alongside Threat Modeling and Cybersecurity expertise.