Threat Modeling Engineer

Job Location- Chennai / Pune

Must have skills which are non-negotiable

• Threat modeling (STRIDE, PASTA, MITRE ATT&CK)
• Security architecture, vulnerability management, secure design reviews Cloud security,
• IaC (Terraform/CloudFormation), DevSecOps, CI/CD Python; containers (Docker/Kubernetes)

Threat Modelling Engineering position

Responsibilities

• Threat Modeling using a documented process.
• Development of automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attending to the lifecycle of identified threats and controls.
• Delivery of threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams. • Work with little supervision to complete work

Certification Requirements

Youre expected to have an associate level cloud certification (defined further below) from either AWS, GCP or Azure.

Youre expected to have an associate or professional cyber-security (defined further below) certification.

Technical skills

Youre expected to have two to five years of experience in several of the following:

• IT experience minimum of 6 years with minimum of 4 years Cyber-Security/Information Security must
• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) must. Identifying vulnerabilities using CWE or OWASP.
• Experience working in a cyber-security role - must.
• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation must.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation)
• • Cloud Development Kit (CDK), GitOps.
• Operating in a DevOps / agile team structure.
• Jira or other ticketing systems must.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Design and review technical architectures must.

Essential skills

• Analytical, diligence and attention to detail.
• Eagerness to research using vendor documentation.
• Create and maintain quality documentation.
• Experience of regulated environment.
• Adversary mindset.
• Work with diverse set of people and teams.
• Constant learner of new technologies and methodologies.
• Problem solver.
• Communication and collaboration skills.
• Builder of relationships across cross-functional teams.

Education Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
• Certification Requirements
  1. Associate-Level Cloud Certification
  
• AWS Certified Developer Associate
• AWS Certified Solutions Architect Associate
• AWS Certified SysOps Administrator Associate
• CompTIA Cloud+
• Google Associate Cloud Engineer or other professional-level GCP certification
• Oracle Cloud Infrastructure Certified Architect Associate
• Oracle Cloud Infrastructure Certified Cloud Operations Associate
• Microsoft Certified: Azure Developer Associate
• 2. Associate or Professional-Level Cybersecurity Certification
  
• ISACA Certified Information Systems Auditor (CISA)
• GIAC Security Essentials (GSEC)
• ISC2 Systems Security Certified Practitioner (SSCP)
• CompTIA Cybersecurity Analyst (CySA+)
• Microsoft Certified: Security Operations Analyst Associate
• Microsoft Certified: Information Protection Administrator Associate

Important :

Notice period : Immediate to 15-30 days ONLY.

Candidates serving Notice period will be preferred.

Please note - There should not be Career Gap more than 6 months(No Career Break)

Graduation score should be 60% & above is mandatory.

Pre Screening BGV (Background Verification)is mandatory [UAN/PF without any overlap issue is required.]