Looking for a strong Threat Modeling IT Security Consultant to work on a new project in London.
Responsibilities
* Threat Modeling using a documented process.
* Development of automation tools as required.
* Maintain a high standard of work in identifying threats and specifying mitigating controls.
* Attending to the lifecycle of identified threats and controls.
* Delivery of threat models and supporting tasks within existing timeframes.
* Provide feedback, support, and improvements to the existing threat modeling process.
* Present work to seniors, the team, and other technical teams.
* Work with little supervision to complete work
* Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.
Certification Requirements
* You’re expected to have an associate level cloud certification (defined further below) from either AWS, GCP or Azure.
* You’re expected to have an associate or professional cyber-security (defined further below) certification.
Technical skills
You’re expected to have two to five years of experience in several of the following:
* IT experience minimum of 6 years with minimum of 4 years Cyber-Security/Information Security – must
* Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) – must.
* Identifying vulnerabilities using CWE or OWASP.
* Experience working in a cyber-security role - must.
* Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation – must.
* Operating systems and their hardening
Salary description
£400.00 - £500.00 per year