VS
Application Security Architect
Veracity Software Inc
🇺🇸 United States
Hybrid
11 months ago
- Threat Modeling
- Azure
- GCP
- AWS
- Python
- OWASP
- CISSP
- CCSP
- AWS Cloud
- Machine Learning
11 months ago
Duration: 12+ Months
Location: Charlotte, NC & Iselin, NJ (Hybrid Role)
Description:
Application Security Secure Development is seeking an application security architect to threat model applications, services, and platforms.
A successful candidate will:
- Engage and collaborate with application, service, and platform teams to derive a deep, detailed, and accurate description of their application architectures and the services and platforms they consume.
- Model the architectures in our threat modeling tool.
- Apply our threat modeling methodology to identify and prioritize threats to those applications and to apply mitigating controls.
- Review evidence (designs, configurations, and/or source code) of mitigations to threats.
- Propose solutions to mitigate threats.
- Publish and present threat modeling results.
- Collaborate with Cybersecurity Architecture in the creation of new mitigating controls where a sufficient mitigation does not previously exist for a threat.
Required Qualifications:
- 4+ years of Systems Architecture and/or Systems Development experience
- 3+ years of Cybersecurity experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education, Cybersecurity certifications.
- 1+ years of engineering experience with Azure, GCP, or AWS.
- 1+ years of experience in Python programming.
- Proficient in at least one Threat Modeling methodology, such as STRIDE, PASTA, OCTAVE, LINDDUN, or VAST
- Experience using Threat Modeler, Microsoft Threat Modeling tool, or OWASP Threat Dragon to develop threat models
- Understanding of OWASP Top 10, CAPEC, MITRE Telecommunication&CK and Secure Design principles
- The ability to juggle multiple threat models actively in the work-in-progress state, working with a sense of urgency, delivering with short cycle times and a high throughput without sacrificing quality.
- Strong collaboration and communication skills, and the ability to work effectively with cross-functional teams.
Desired Qualifications:
- Security and cloud certifications, such as CISSP, CCSP and Azure, GCP, or AWS cloud certifications.
- 3+ years leading Architecture Risk Reviews and building threat models
- 1+ years of experience Threat Modeling GenAI.
- 1+ years of experience leveraging Threat modeling-as-a-Code (TaaC)
Application Security Architect · Veracity Software Inc