Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

This role involves performing threat modeling, developing automation tools, and ensuring the delivery of secure applications within a 6-month contract.

Responsibilities

• Perform threat modeling using a documented process.
• Develop automation tools as required.
• Maintain a high standard of work in identifying threats and specifying mitigating controls.
• Attend to the lifecycle of identified threats and controls.
• Deliver threat models and supporting tasks within existing timeframes.
• Provide feedback, support, and improvements to the existing threat modeling process.
• Present work to seniors, the team, and other technical teams.
• Train newer members of the team.
• Supervise junior members of the team.
• Run parts of our threat model service.
• Work with little supervision to complete work.
• Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards.

Requirements

• Possess a professional level cloud certification from AWS, GCP, or Azure.
• Possess a vendor's cloud security certification from AWS, GCP, or Azure.
• Possess a professional cyber-security certification.
• Have five or more years of experience in several of the listed technical skills.
• Minimum of 10 years IT experience with a minimum of 4 years Cyber-Security/Information Security experience.
• Experience in Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck).
• Experience identifying vulnerabilities using CWE or OWASP.
• Experience working in a cyber-security role.
• Experience with security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation.
• Experience with operating systems and their hardening.
• Experience with development concepts (CICD, Pipelines, SDLC).
• Experience with scripting languages and Infrastructure as Code (Terraform, CloudFormation).
• Experience with Cloud Development Kit (CDK), GitOps.
• Experience operating in a DevOps / agile team structure.
• Experience with Jira or other ticketing systems.
• Understanding of docker/K8S/serverless/helm.
• Experience supporting or performing pen testing.
• Experience with Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks.
• Experience designing and reviewing technical architectures.
• Strong proficiency in Programming Languages, with a preference for Python (asynchronous programming), and FastAPI.
• Experience developing and executing unit tests using frameworks like Pytest.
• Ensure all software platforms adhere to the client’s security standards and Software Development Life Cycle (SDLC) processes.
• Analytical, diligence and attention to detail.
• Eagerness to research using vendor documentation.
• Ability to create and maintain quality documentation.
• Experience of regulated environment.
• Adversary mindset.
• Ability to work with a diverse set of people and teams.
• Constant learner of new technologies and methodologies.
• Problem solver.
• Communication and collaboration skills.
• Builder of relationships across cross-functional teams.
• Bachelor's degree in a computer-related field or equivalent work experience.

Skills

• Threat Modeling
• STRIDE
• PASTA
• Attack trees
• Att&ck
• CWE
• OWASP
• Authentication
• Authorization
• Logging/monitoring
• Encryption
• Infrastructure security
• Network/segmentation
• Operating system hardening
• CICD
• Pipelines
• SDLC
• Python
• FastAPI
• Pytest
• Scripting languages
• Infrastructure as Code
• Terraform
• CloudFormation
• Cloud Development Kit (CDK)
• GitOps
• Docker
• K8S
• Serverless
• Helm
• Pen testing
• Snowflake
• MongoDB
• Terraform Cloud
• GitHub
• Databricks
• Asynchronous programming

Location

• London
• Belfast

Work Type

• Contract
• Inside IR35

Experience Level

• Senior
• Minimum 10 years IT experience
• Minimum 4 years Cyber-Security/Information Security experience
• Five or more years of experience in several technical skills

Education Level

• Professional level cloud certification (AWS, GCP, Azure)
• Vendor cloud security certification (AWS, GCP, Azure)
• Professional cyber-security certification
• Bachelor's degree in computer related field or equivalent work experience

Salary/Compensations

• Competitive Day Rate