Cybersecurity Threat Modeling Engineer

1 month ago


Atlanta, United States Publicis Sapient Full time

Job Description

As a senior Security Engineer- Threat Modeling (Senior associate/Manager/Senior Manager level), you will be a part of a smart cross-functional team delivering digital business transformation solutions to our clients. This position entails an individual contributor role focused on Security Architecture and Threat Modeling, encompassing governance, evaluation of public cloud services, and conducting security reviews for Public Cloud Providers. Collaboration and partnership with Engineering, Information Security, Program Management, and Development teams are essential. The candidate will conduct technical architecture reviews to pinpoint security opportunities, identify exploitable threats, and propose mitigation strategies.

Your Impact:

Conduct thorough threat modeling exercises utilizing established methodologies and frameworks. Maintain a rigorous standard of excellence in identifying potential threats and specifying effective mitigation controls. Manage the lifecycle of identified threats and associated controls, ensuring timely updates and adjustments as necessary. Deliver comprehensive threat models and related tasks within specified timeframes. Offer constructive feedback, support, and suggestions for enhancing the existing threat modeling process. Present findings and progress updates to senior leadership, team members, and relevant technical stakeholders.

Qualifications

Your Skills and Qualifications:

We are seeking an ideal candidate with 8+ years of experience in a range of technologies and processes including:

Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc. Experience in Azure- 4+ years Overall experience in Cybersecurity- 8+ years Security practices encompassing authentication, authorization, logging/monitoring, encryption, infrastructure security, and network/segmentation Knowledge of cloud security frameworks knowledge of Rest API Knowledge in scripting languages and Infrastructure as Code (Terraform, CloudFormation) Familiarity with Jira or other ticketing systems – essential Technical architecture design and review skills – essential Ability to identify vulnerabilities using CWE or OWASP Knowledge of operating systems and their hardening techniques Understanding of development concepts such as CICD, Pipelines, and SDLC Penetration testing knowledge is also super useful Familiarity with Cloud Development Kit (CDK) and GitOps Experience operating in a DevOps/agile team environment Understanding of docker, Kubernetes, serverless architecture, and Helm Exposure to platforms like Snowflake, MongoDB, Terraform Cloud, GitHub, and Databricks Strong analytical skills, diligence, and attention to detail Willingness to conduct research using vendor documentation Capability to create and maintain high-quality documentation Possession of an adversary mindset Continuous learning attitude towards new technologies and methodologies Strong problem-solving skills Excellent communication and collaboration abilities Ability to build and nurture relationships across cross-functional teams

Set Yourself Apart With:

Professional Security Certifications: CISSP, CCSP, CISA, CISM, ITIL Cloud Computing certifications such as CCSK, Microsoft Certified: Security Operations Analyst Associate, AZ-500 is a plus Strong knowledge of industry standards as they relate to Cloud and Application security management to include ISO, NIST, and Cloud Security Alliance (CSA) Experience working in regulated environments Exposure to agile development, DevOps, SecOps and scrum teams Hands-on-experience with cloud security designs on Azure Development experience (python, Node) Strong desire to learn and contribute solutions and ideas to broader team

  • Atlanta, United States VerSprite Cybersecurity Full time

    VerSprite VerSprite is an Inc. 5000 2020 fastest growing company and industry leader in PASTA threat modeling. Founded in 2007, VerSprite is a private cybersecurity consulting firm helping organizations tighten their risk-gaps with evolved security solutions and advanced threat intel tools. VerSprite has a 97% client retention rate providing organizations...


  • Atlanta, United States Motion Recruitment Partners, LLC Full time

    We are partnered with one of the top insurance companies who is dedicated to provide personalized, affordable, and accessible healthcare solutions to millions of individuals and organizations globally. They are currently seeking a Threat Detection Engineer to join their dynamic and innovative Cybersecurity team. In this role, you will be responsible for the...


  • Atlanta, Georgia, United States Truist Full time

    The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.Need...


  • Atlanta, Georgia, United States Truist Full time

    The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.Need...


  • Atlanta, United States Motion Recruitment Full time

    We are partnered with one of the top insurance companies who is dedicated to provide personalized, affordable, and accessible healthcare solutions to millions of individuals and organizations globally. They are currently seeking a Threat Detection Engineer to join their dynamic and innovative Cybersecurity team. In this role, you will be responsible for the...


  • Atlanta, United States Motion Recruitment Full time

    We are partnered with one of the top insurance companies who is dedicated to provide personalized, affordable, and accessible healthcare solutions to millions of individuals and organizations globally. They are currently seeking a Threat Detection Engineer to join their dynamic and innovative Cybersecurity team. In this role, you will be responsible for the...


  • Atlanta, United States Motion Recruitment Full time

    We are partnered with one of the top insurance companies who is dedicated to provide personalized, affordable, and accessible healthcare solutions to millions of individuals and organizations globally. They are currently seeking a Threat Detection Engineer to join their dynamic and innovative Cybersecurity team. In this role, you will be responsible for the...


  • Atlanta, Georgia, United States Cognizant Full time

    Cybersecurity Engineer- Distributed Denial-of-Service (DDoS) Location: Anywhere in United States, remote Job Profile Summary Responsible for developing and maintaining the technical IT/cyber security capabilities necessary for safeguarding the firm's information systems and applications (software development lifecycle), including every phase of the SDLC and...


  • Atlanta, Georgia, United States Cognizant Full time

    Cybersecurity Engineer- Distributed Denial-of-Service (DDoS) Location: Anywhere in United States, remote Job Profile Summary Responsible for developing and maintaining the technical IT/cyber security capabilities necessary for safeguarding the firm's information systems and applications (software development lifecycle), including every phase of the SDLC and...


  • Atlanta, United States Motion Recruitment Full time

    We are partnered with one of the top insurance companies who is dedicated to provide personalized, affordable, and accessible healthcare solutions to millions of individuals and organizations globally. They are currently seeking a Threat Detection Engineer to join their dynamic and innovative Cybersecurity team. In this role, you will be responsible for the...


  • Atlanta, United States Motion Recruitment Full time

    We are partnered with one of the top insurance companies who is dedicated to provide personalized, affordable, and accessible healthcare solutions to millions of individuals and organizations globally. They are currently seeking a Threat Detection Engineer to join their dynamic and innovative Cybersecurity team. In this role, you will be responsible for the...


  • Atlanta, Georgia, United States Truist Full time

    The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.Need...


  • Atlanta, Georgia, United States Truist Full time

    The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.Need...


  • Atlanta, United States Visionaire Partners Full time

    Senior Cybersecurity Engineer This is a tremendous opportunity for a Cybersecurity Engineer to join a growing company where you can take your career to the next level. RESPONSIBILITIES: You will own and be the primary point of contact for all of our security-related functions. Partner with Security Consulting firms and MSPs on projects. Plan, implement and...


  • Atlanta, United States Chick-fil-A Full time

    Responsibilities Triage and respond to security events and incidents from various sources, primarily coordinating with your peers through our SOAR platform. Partner with groups outside of Cybersecurity on triage and response efforts as needed for security events and incidents. Identify and propose new technologies, methodologies, and/or approaches to...


  • Atlanta, United States Chick-fil-A Full time

    Responsibilities Triage and respond to security events and incidents from various sources, primarily coordinating with your peers through our SOAR platform. Partner with groups outside of Cybersecurity on triage and response efforts as needed for security events and incidents. Identify and propose new technologies, methodologies, and/or approaches to...


  • Atlanta, United States Cognizant Full time

    Cybersecurity Engineer- Distributed Denial-of-Service (DDoS) Location: Anywhere in United States, remote Job Profile Summary Responsible for developing and maintaining the technical IT/cyber security capabilities necessary for safeguarding the firm's information systems and applications (software development lifecycle), including every phase of the SDLC and...


  • Atlanta, United States Logistics Management Institute Full time

    Cybersecurity Specialist - Clearance Required Logistics Management Institute With a legacy of solving the governments most complex challenges and an outcome-driven model to execute above expectation, LMI transforms missions with solutions that define the new speed of possible. View company page LMI is seeking a skilled Cybersecurity Specialist with a...


  • Atlanta, United States Logistics Management Institute Full time

    Cybersecurity Specialist - Clearance Required Logistics Management Institute With a legacy of solving the government’s most complex challenges and an outcome-driven model to execute above expectation, LMI transforms missions with solutions that define the new speed of possible. View company page LMI is seeking a skilled Cybersecurity Specialist with a...


  • Atlanta, United States Visionaire Partners Full time

    Senior Cybersecurity EngineerThis is a tremendous opportunity for a Cybersecurity Engineer to join a growing company where you can take your career to the next level. RESPONSIBILITIES: You will own and be the primary point of contact for all of our security-related functions.Partner with Security Consulting firms and MSPs on projects.Plan, implement and...