Information Security Associate - Threat Modeling (3-6 yrs)

Role : Information Security Associate (Application/Infrastructure Security)

Role :

- Threat Modeling, cryptography, security architecture review

- Global service delivery of Information Security Architecture services for Commercial Vehicle locations.

- Perform application threat modelling based on STRIDE/DREAD model, use C4 data model architecture to identify the trust boundaries and security gaps to create application risk profile and remediation recommendations.

- Advise Product Owners to manage their security risks efficiently.

- Enthusiastic and committed to the work, willing to help grow the business.

Technical Skills :

- Sound knowledge on information security principles, cloud security threat modelling, security architecture, system and network security, authentication and security protocols, cryptography.

- Strong hands on cloud architecture, experience of working on large scale cloud based services (including SaaS, PaaS, IaaS) and understanding of security challenges involved in deploying Cloud Applications

- Knowledge on Information Security fundamentals, OWASP tools and methodologies

- CISSP (Certified Information Systems Security Professional) or CCSP (Certified Cloud Security Professional)

- Knowledge of common security attacks, post exploitation skills, security bug classification frameworks

- Effective understanding and implementation Risk Management process

- Knowledge on Web/mobile/infrastructure security assessments (pen tests, code reviews, security checks and SDLC consulting)

Other Skills/requirements :

- Bachelors/Masters in either Computer Engineering, Computer Science, or Information Systems Management

- Proficient English language written and oral communication skills.

- Ability to complete tasks and deliver professionally written reports for clients.

- Ability to present findings to technical staff and executives.

- Experience in handling app teams queries, providing recommendations & mitigation strategies in order to remediate vulnerabilities.