Cybersecurity Engineer -Threat Modeling

We seek a Security Engineer specialized in Threat Modeling, with a strong foundation in systems engineering and cybersecurity.

Resposibilities:

Your role centers on leading our Threat Modeling initiatives, focusing specifically on:

• Identifying and documenting our most critical assets, often referred to as "crown jewels," to prioritize our security efforts.
• Creating and refining threat models tailored to these high-value environments, ensuring a comprehensive understanding of potential threats and vulnerabilities.
• Actively contribute towards Detection Egineering service with proposed, developed and maintained detection capability improvements.
• Build and support collaborative environment across key operational stakeholders (Cyber Defense Center, Vulnerability Management teams) to better facilitate ongoing key initiatives and operational process maturity.
• Continuously updating our threat models to reflect the evolving tactics, techniques, and procedures (TTPs) of adversaries, with a heavy reliance on the MITRE ATT&CK framework to guide our analysis and response strategies.

• At least 2+ years of cybersecurity experience , with a detailed focus on Threat Modeling and the protection of critical infrastructure (or, if you're ready to dive into a rapid learning curve and become a superstar in Threat Modeling-don't worry, you'll get all the support you need!).
• Expertise in identifying, assessing, and documenting high-value assets and building robust threat models to protect them.
• Proficiency in analyzing and applying adversary TTPs, particularly through the lens of the MITRE ATT&CK framework, to enhance our security posture.
• Experience with security technologies and how they can be utilized within threat models to mitigate risks.
• Knowledge of security standards and frameworks relevant to Threat Modeling.
• Strong communication skills, capable of conveying complex security topics to diverse audiences.
• Proficiency in English.