Cyber Security Engineer

Job Summary

Supporting ongoing threat modeling activities, the part-time Threat Modeling Engineer will assess application architectures, identify security threats, and recommend mitigation strategies while working remotely on an 18-month contract basis.

Key responsibilities

• Perform threat modeling assessments across applications, systems, and architectures
• Apply PASTA and STRIDE+P methodologies to identify and analyze security threats
• Utilize the MITRE ATT&CK framework to evaluate potential attack vectors and provide recommendations for threat mitigation

Required qualifications

• Prior hands-on experience with threat modeling and application security architecture
• Practical experience with PASTA and STRIDE+P methodologies
• Familiarity with the MITRE ATT&CK framework
• Ability to assess application architectures and communicate technical findings to engineering teams
• Working knowledge of application security vulnerabilities and remediation approaches