Senior Threat Modeler

Role: Senior Threat Modeler Location: London / Belfast Start Date: ASAP End Date: 6 Months Daily Rate: Competitive Day Rate, Inside IR35 Payroll provider – Rockford Payroll Info for Contingent Workers – Rockford Pay Responsibilit • iesThreat Modeling using a documented proce • ss.Development of automation tools as requir • ed.Maintain a high standard of work in identifying threats and specifying mitigating contro • ls.Attending to the lifecycle of identified threats and contro • ls.Delivery of threat models and supporting tasks within existing timefram • es.Provide feedback, support, and improvements to the existing threat modeling proce • ss.Present work to seniors, the team, and other technical tea • ms.Train newer members of the t • eamSupervise junior members of the t • eamRun parts of our threat model serv • iceWork with little supervision to complete w • orkDevelop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standar ds.Certification Requireme • ntsYou’re expected to have a professional level cloud certification (defined further below) from either AWS, GCP or Azu • re.You’re expected to have a vendors cloud security certification (defined further below) from either AWS, GCP or Azu • re.You’re expected to have a professional cyber-security certification (defined further belo w).Technical ski • llsYou’re expected to have five or more years of experience in several of the followi • ng:IT experience minimum of 10 years with minimum of 4 years Cyber-Security/Information Security – m • ustThreat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) – mu • st.Identifying vulnerabilities using CWE or OWA • SP.Experience working in a cyber-security role - mu • st.Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation – mu • st.Operating systems and their hardeni • ng.Development concepts (such as: CICD, Pipelines, SDLC) – mu • st.Scripting languages, Infrastructure as Code (Terraform, CloudFormation) – mu • st.Cloud Development Kit (CDK), GitO • ps.Operating in a DevOps / agile team structu • re.Jira or other ticketing syste • ms.Understanding of docker/K8S/serverless/helm – mu • st.Support or perform pen testi • ng.Snowflake/MongoDB/Terraform Cloud/GitHub/Databric • ks.Design and review technical architectur • es.Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI (mus • t).Unit Testing: Developing and executing unit tests using frameworks like Pytest to ensure code quality (mus • t).Ensure all software platforms adhere to the client’s security standards and Software Development Life Cycle (SDLC) processes (mus t).Essential ski • llsAnalytical, diligence and attention to deta • il.Eagerness to research using vendor documentati • on.Create and maintain quality documentati • on.Experience of regulated environme • nt.Adversary minds • et.Work with diverse set of people and tea • ms.Constant learner of new technologies and methodologi • es.Problem solv • er.Communication and collaboration skil • ls.Builder of relationships across cross-functional tea ms.Educat • ionBachelor's degree in computer related field or equivalent work experien ce.Professional level cloud certificat • ionAWS Certified Solutions Architect, AWS Certified DevOps Engin • eerGoogle Cloud Architect, Cloud Developer, Data Engineer, Network Engineer, and m • oreOracle Cloud Infrastructure Certified Architect Professional, Oracle Cloud Infrastructure HPC and Big Data Solutions Associ • ateMicrosoft Certified: Azure Solutions Architect Exp ertCloud security certificat • ionGoogle Professional Cloud Security Engin • eerMicrosoft Certified Azure Security Engineer Associ • ateAWS Certified Security - Specia ltyProfessional cyber-security certificat • ionISACA Certified Information Security Manager (CI • SM)GIAC Certified Enterprise Defender (GCED), GIAC Certified Intrusion Analyst (GCIA), GIAC Open Source Intelligence (GO • SI)ISC2 Certified Information Systems Security Professional (CIS • SP)CompTIA CASP+, CompTIA PenTe • st+Microsoft Certified: Identity and Access Administrator Associ ate