Application Threat Modeling Engineer

A large financial enterprise company is looking to grow their Application team with a Threat Modeling Engineer that has a strong technical background in developing, building and maintaining secure design and coding patterns. The Engineer will serve as an SME in developing security requirements across several technology stacks. Responsibilities include: design, developing, and maintenance of secure coding standards, design patterns, enhancing threat libraries, along with researching and reading books, writing patterns and presenting information to engineers. Required Skills & Experience

• 3+ years proficient application development experience
• Hands on experience with application threat modeling
• Writing threat based security requirements
• Direct experience with threat modeling frameworks, attack vectors a vulnerability analysis: CAPEC, MITRE, and STRIDE
• Experience with application security controls (Web, API, Mobile)
• Hands on experience with application cloud security requirements, preferably AWS
• Familiar with IAM controls
• Strong experience writing threat based security requirements and updating threat libraries
• Familiarity with IAM controls
• Knowledge of single page applications, REST APIs, SOAP APIs, mobile applications
• Knowledge of database architectures: Oracle, SQL, DB2, NoSQL
• Experience with Java, JavaScript, and mobile development

• Security certifications: CISSP, SANS GIAC

• Competitive Salary up to: 130K DOE

• Medical & Dental Insurance
• Health Savings Account (HSA)
• 401(k)
• Paid Sick Time Leave
• Pre-tax Commuter Benefit
• Add additional perks specific to the work environment