Engineer 3 - Cyber Security
On-siteChennai, Tamil Nadu, India
Chennai, Tamil Nadu, IndiaOn-siteFull TimeEnterprise
Full TimeEnterprise
Job Summary
Architect secure system infrastructure by designing robust cybersecurity protocols and creating detailed design specifications. Conduct end-to-end threat modeling exercises using frameworks like STRIDE to identify vulnerabilities and recommend effective countermeasures. Document technical processes, report findings to management, and guide less experienced staff on implementing security controls within the software development lifecycle. Collaborate with project teams and external stakeholders to integrate security best practices, analyze incidents, and maintain current knowledge of regulatory requirements and emerging threats.
Required Qualifications
- 5 years to 8 years experience working within a security field or related discipline
- Strong skills in analytical, decision making, verbal and written communication capabilities
- Excellent teamwork skills
- Strong understanding of threat modelling methodologies and frameworks, such as STRIDE, DREAD, or CAPEC
- Proficiency in conducting threat modelling exercises and identifying security vulnerabilities across various systems and applications
- Familiarity with industry best practices and standards related to threat modelling and security analysis
- Exposure to threat modelling tools and automation frameworks to enhance efficiency and accuracy
- Exposure with popular threat modelling tools, such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, or ThreatModeler
- Bachelor's Degree
- Must be able to work nights and weekends, variable schedule(s) as necessary
- Regular, consistent and punctual attendance
- 5-7 Years Relevant Work Experience
Desired Qualifications
- Can be substituted for a relevant degree or equivalent qualification by related subjects such as technologies (e.g. MS IDAM experience), or any experience of compliance/regulatory frameworks (which may or may not by topics considered typical cyber security i.e. EECC, CCA, OFCOM or OSCR for example)
- Demonstrate a passion for cyber security and have a positive outlook and approach to the work we do
- Live the Sky Values and demonstrate enthusiasm and a can-do attitude
- Always look to improve your understanding and knowledge of the following: Regulatory requirements on our business: TSA, PCI, SWIFT, GDPR (not an exhaustive list)
- Architectural domains. DLP, CLOUD, IDAM, APP SW, LOGGING & MONITORING (not an exhaustive list)
- Departments and their verticals. CONTENT, CUSTOMER, ISP, PRODUCT, DIGITAL, DATA (not an exhaustive list)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.