Application Security Architect – Threat Modeling

Outstanding long-term contract opportunity! A well-known Financial Services Company is looking for an Application Security Architect in Charlotte, NC (Hybrid).

Work with the brightest minds at one of the largest financial institutions in the world. This is a long-term contract opportunity that includes a competitive benefit package! Our client has been around for over 150 years and is continuously innovating in today's digital age. If you want to work for a company that is not only a household name, but also truly cares about satisfying customers' financial needs and helping people succeed financially, apply today.

Contract Duration: 12 Months extensions/conversion

Successful Candidate Will

• Engage and collaborate with application, service, and platform teams to derive a deep, detailed, and accurate description of their application architectures and the services and platforms they consume.
• Model the architectures in our threat modeling tool.
• Apply our threat modeling methodology to identify and prioritize threats to those applications and to apply mitigating controls.
• Review evidence (designs, configurations, and/or source code) of mitigations to threats.
• Propose solutions to mitigate threats.
• Publish and present threat modeling results.
• Collaborate with Cybersecurity Architecture in the creation of new mitigating controls where a sufficient mitigation does not previously exist for a threat.
  
  

Required Qualifications

• 4 years of Systems Architecture and/or Systems Development experience
• 3 years of Cybersecurity experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education, Cybersecurity certifications.
• 1 years of engineering experience with Azure, GCP, or AWS.
• 1 years of experience in Python programming.
• Proficient in at least one Threat Modeling methodology, such as STRIDE, PASTA, OCTAVE, LINDDUN, or VAST
• Experience using Threat Modeler, Microsoft Threat Modeling tool, or OWASP Threat Dragon to develop threat models
• Understanding of OWASP Top 10, CAPEC, MITRE ATT&CK and Secure Design principles
• The ability to juggle multiple threat models actively in the work-in-progress state, working with a sense of urgency, delivering with short cycle times and a high throughput without sacrificing quality.
• Strong collaboration and communication skills, and the ability to work effectively with cross-functional teams.
  
  

Posted By: Natalie DeWitt