Software Developer

Must Have Technical/Functional Skills • IT experience minimum of 6 years with minimum of 4 years Cyber-Security/Information Security must • Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) must. • Identifying vulnerabilities using CWE or OWASP. • Experience working in a cyber-security role - must. • Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation must. • Operating systems and their hardening. • Development concepts (such as: CICD, Pipelines, SDLC). • Scripting languages, Infrastructure as Code (Terraform, CloudFormation) must. • Cloud Development Kit (CDK), GitOps. • Operating in a DevOps / agile team structure. • Jira or other ticketing systems must. • Understanding of docker/K8S/serverless/helm. • Support or perform pen testing. • Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks. • Design and review technical architectures must. Roles & Responsibilities • Threat Modeling using a documented process. • Development of automation tools as required. • Maintain a high standard of work in identifying threats and specifying mitigating controls. • Attending to the lifecycle of identified threats and controls. • Delivery of threat models and supporting tasks within existing timeframes. • Provide feedback, support, and improvements to the existing threat modeling process. • Present work to seniors, the team, and other technical teams. • Work with little supervision to complete work Bachelor's degree in computer related field or equivalent work experience. Associate level cloud certification • AWS Certified Developer, AWS Certified Solutions Architect, AWS Certified SysOps Administrator • CompTIA Cloud+ • Google Associate Cloud Engineer or other professional GCP certification • Oracle Cloud Infrastructure Certified Architect Associate, Oracle Cloud Infrastructure Certified Cloud Operations Associate • Microsoft Certified: Azure Developer Associate Associate or professional cyber-security • ISACA Certified Information Systems Auditor (CISA) • GIAC Security Essentials (GSEC) • ISC2 Systems Security Certified Practitioner (SSCP) • CompTIA CySA+ • Microsoft Certified: Security Operations Analyst Associate; Information Protection Administrator A ssociate Salary Range: $100,000 to $125,000 per year