Keywords:
Threat Modeling
DevSecOps
Java Development
Role Description:
Threat Modeler Security Architect with Development background
Experience with threat modeling frameworks attack vectors and vulnerability analysis: CAPEC ATT&CK STRIDE.
Experience with application security controls (Web API Mobile AI).
Experience with common information security management and application frameworks: NIST 800-53 CSF OWASP ASVS.
Experience with Application Security design and DevSecOps
Full stack knowledge of application architectures including: Single Page Applications REST APIs SOAP APIs Mobile Applications.
Experience with Java Javascript and mobile application development.
Knowledge or familiarity with database architectures including Oracle SQL DB2 and NoSQL Databases
Experience with Cloud security architecture design implementation and operations
Exposure to IAM Controls (OAuth 2.0 OIDC JWT)
Strong familiarity with Cryptography Controls (Data at rest in motion).
CISSP CISM CSSLP CISA CRISC OSCP
Competencies:
Cyber Security
Advanced Java Concepts
Cyber threat Intelligence
Experience (Years):
8-10