Application Threat Modeling Engineer

Application Threat Modeling Engineer

Vacancy expired!

A large financial enterprise company is looking to grow their Application team with a Threat Modeling Engineer that has a strong technical background in developing, building and maintaining secure design and coding patterns. The Engineer will serve as an SME in developing security requirements across several technology stacks. Responsibilities include: design, developing, and maintenance of secure coding standards, design patterns, enhancing threat libraries, along with researching and reading books, writing patterns and presenting information to engineers.
Required Skills & Experience

• 3+ years proficient application development experience
• Hands on experience with application threat modeling
• Writing threat based security requirements
• Direct experience with threat modeling frameworks, attack vectors a vulnerability analysis: CAPEC, MITRE, and STRIDE
• Experience with application security controls (Web, API, Mobile)
• Hands on experience with application cloud security requirements, preferably AWS
• Familiar with IAM controls
• Strong experience writing threat based security requirements and updating threat libraries
• Familiarity with IAM controls
• Knowledge of single page applications, REST APIs, SOAP APIs, mobile applications
• Knowledge of database architectures: Oracle, SQL, DB2, NoSQL
• Experience with Java, JavaScript, and mobile development

Desired Skills & Experience

• Security certifications: CISSP, SANS GIAC

The Offer

• Competitive Salary up to: 130K DOE

You will receive the following benefits:

• Medical & Dental Insurance
• Health Savings Account (HSA)
• 401(k)
• Paid Sick Time Leave
• Pre-tax Commuter Benefit
• Add additional perks specific to the work environment

Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.

Motion Recruitment network, provides IT Staffing Solutions (Contract, Contract-to-Hire, and Direct Hire) in major North American markets. Our unique expertise in today's highest demand tech skill sets, paired with our deep networks and knowledge of our local technology markets, results in an exemplary track record with candidates and clients.