Information Security Associate - Threat Modeling

Role : Information Security Associate (Application/Infrastructure Security) No of years' experience required : 3 to 6 years Job Role : - Global service delivery of Information Security Architecture services for Commercial Vehicle locations. - Perform application threat modelling based on STRIDE/DREAD model, use C4 data model architecture to identify the trust boundaries and security gaps to create application risk profile and remediation recommendations. - Advise Product Owners to manage their security risks efficiently. - Enthusiastic and committed to the work, willing to help grow the business. Technical Skills : - Sound knowledge on information security principles, cloud security threat modelling , security architecture , system and network security, authentication and security protocols, cryptography . - Strong hands on cloud architecture , experience of working on large scale cloud based services (including SaaS, PaaS, IaaS) and understanding of security challenges involved in deploying Cloud Applications - Knowledge on Information Security fundamentals, OWASP tools and methodologies Good to have security certifications: one of the below certifications. - CISSP (Certified Information Systems Security Professional) or CCSP (Certified Cloud Security Professional) - Knowledge of common security attacks, post exploitation skills, security bug classification frameworks - Effective understanding and implementation Risk Management process - Knowledge on Web/mobile/infrastructure security assessments (pen tests, code reviews, security checks and SDLC consulting) Other Skills/requirements - Bachelors/Masters in either Computer Engineering, Computer Science, or Information Systems Management - Proficient English language written and oral communication skills. - Ability to complete tasks and deliver professionally written reports for clients. - Ability to present findings to technical staff and executives. - Experience in handling app teams queries, providing recommendations & mitigation strategies in order to remediate vulnerabilities. (ref:hirist.tech)

Location: bangalore, IN

Posted Date: 11/27/2024