Consultant

Job Description

• Perform threat modeling using a documented and repeatable process.
• Identify threats and specify effective mitigating security controls while maintaining a high standard of quality.
• Manage the lifecycle of identified threats and controls through completion.
• Deliver threat models and supporting activities within established timelines.
• Develop automation tools and scripts as required to support threat modeling activities.
• Provide feedback, support, and recommendations to improve the existing threat modeling process.
• Present threat model findings and recommendations to senior stakeholders, the team, and other technical teams.
• Work with minimal supervision and collaborate effectively across diverse, cross-functional teams.

• Minimum 6 years of IT experience, including at least 4 years in Cyber Security or Information Security.
• Hands-on experience in threat modeling methodologies and techniques, including STRIDE, PASTA, attack trees, threat modeling tools, and MITRE ATT&CK.
• Experience identifying vulnerabilities using CWE and OWASP guidance.
• Practical experience in a cyber-security role.
• Strong understanding of authentication, authorization, logging and monitoring, encryption, infrastructure security, and network segmentation.
• Experience with scripting languages and Infrastructure as Code, such as Terraform or CloudFormation.
• Experience using Jira or other ticketing systems.
• Ability to design and review technical architectures.
• Experience across several relevant areas, typically two to five years, such as operating-system hardening, CI/CD, pipelines, SDLC, CDK, GitOps, DevOps or Agile delivery, Docker, Kubernetes, serverless technologies, Helm, penetration testing, Snowflake, MongoDB, Terraform Cloud, GitHub, or Databricks.

• Strong analytical ability, diligence, and attention to detail.
• Adversarial mindset and effective problem-solving skills.
• Ability to research using vendor documentation and continuously learn new technologies and methodologies.
• Ability to create and maintain high-quality documentation.
• Experience working in a regulated environment.
• Strong communication, presentation, and collaboration skills.
• Ability to build productive relationships across cross-functional teams.
• Ability to work effectively with a diverse range of people and teams.

• Bachelor's degree in a computer-related field or equivalent work experience.

• Associate-level or professional cyber-security certification.

• AWS Certified Developer, AWS Certified Solutions Architect, or AWS Certified SysOps Administrator.
• Google Associate Cloud Engineer or another professional GCP certification.
• Microsoft Certified: Azure Developer Associate.
• Oracle Cloud Infrastructure Certified Architect Associate or Cloud Operations Associate.
• CompTIA Cloud+.

• ISACA Certified Information Systems Auditor (CISA)
• EC-Council: Certified Cyber Threat Intelligence Analyst (CTIA)
• EC-Council: Certified Ethical Hacker ver 9 (CEH)
• GIAC Security Essentials (GSEC).
• ISC2 Systems Security Certified Practitioner (SSCP).
• CompTIA CySA+.
• Microsoft Certified: Security Operations Analyst Associate or Information Protection Administrator Associate.

• High degree of initiative, flexibility, and ownership.
• High customer orientation and quality awareness.
• Excellent verbal and written communication skills.

• Role Designation description: Senior Consultant