• Minimum 10 years of relevant work experience in cybersecurity architecture and engineering.

• Experience with a wide variety of Threat Modelling tools and other tools to include:

Microsoft Threat Modelling Tool

• RedSeal

• CheckMarx

• Fortify

• Burp Suite

• ThreatModeler

• IriusRisk

• securiCAD

• Experience in developing and implementing countermeasures to identified application security risks.

• Experience interacting with development teams to articulate security requirements and processes while collaborating on architecture and engineering design options, implementation, testing and user acceptance.

• Experienced in Threat Modelling including creation of Data Flow Diagrams

• Experience identifying, evaluating and managing risk in a complex and changing environment.

• Requirements/Knowledge

• Must have knowledge on interpreting architectural blueprints for Datacenter and Cloud (IaaS, PaaS, SaaS etc.).

• Experienced in Threat Modelling including creation of Data Flow Diagrams

• Advanced ability to identify security vulnerabilities form source code reviews and application & Infrastructure testing.

• Highly proficient in the configuration and deployment of applications in complex environments.

• Working knowledge of NIST, Open Web Application Security Project (OWASP) and Open Source Security Testing Methodology Manual (OSSTMM).

• Solid ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.