Cyber-Security - Threat Modeler

Job Title

Job Description Must Have Technical/Functional Skills

• IT experience minimum of 6 years with minimum of 4 years Cyber-Security/Information Security – must

• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Attack) – must.

• Identifying vulnerabilities using CWE or OWASP.

• Experience working in a cyber-security role - must.

• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation – must.

• Operating systems and their hardening.

• Development concepts (such as: CICD, Pipelines, SDLC).

• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) – must.

• Cloud Development Kit (CDK), GitOps.

• Operating in a DevOps / agile team structure.

• Jira or other ticketing systems – must.

• Understanding of docker/K8S/serverless/helm.

• Support or perform pen testing.

• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.

• Design and review technical architectures – must.

Roles & Responsibilities

• Threat Modeling using a documented process.

• Development of automation tools as required.

• Maintain a high standard of work in identifying threats and specifying mitigating controls.

• Attending to the lifecycle of identified threats and controls.

• Delivery of threat models and supporting tasks within existing timeframes.

• Provide feedback, support, and improvements to the existing threat modeling process.

• Present work to seniors, the team, and other technical teams.

• Work with little supervision to complete work

Bachelor's degree in computer related field or equivalent work experience. Associate level cloud certification

AWS Certified Developer, AWS Certified Solutions Architect, AWS Certified SysOps Administrator

CompTIA Cloud+, Google Associate Cloud Engineer or other professional GCP certification

Oracle Cloud Infrastructure Certified Architect Associate, Oracle Cloud Infrastructure Certified Cloud Operations Associate

Microsoft Certified: Azure Developer Associate Associate or professional cyber-security

ISACA Certified Information Systems Auditor (CISA), GIAC Security Essentials (GSEC), ISC2 Systems Security Certified Practitioner (SSCP), CompTIA CySA+, Microsoft Certified: Security Operations Analyst Associate; Information Protection Administrator Associate

Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.