Security Architect

IPolarity LLC•Hanover Township, NJ

1d•Onsite

About The Position

The Security Architect will collaborate with Cyber Threat Intelligence in other regions, support Incident Response, Purple team, and Vulnerability Management teams by providing situational awareness on threats. This role involves monitoring and evaluating cyber threat intelligence from multiple sources, participating in threat modeling processes and methodologies, and executing threat hunts to proactively look for malicious activities. The architect will conduct testing activities as per the agreed scope and timeline, avoiding disruption to business operations and adhering to industry-standard methodologies (e.g., OWASP). Testing methodologies for web applications include injection attacks, XSS, CSRF, broken authentication & session management, security misconfiguration, sensitive data exposure, and insecure direct object reference. The role requires using authorized tools (e.g., Burp Suite) and techniques to identify vulnerabilities and assess risk, maintaining strict confidentiality and data security practices, and offering clarification or additional details on findings, providing general guidance on improving security posture, and supporting retesting to validate remediation efforts.

Requirements

Experience with Cyber Threat Intelligence.
Experience supporting Incident Response, Purple team, and Vulnerability Management teams.
Experience monitoring and evaluating cyber threat intelligence from multiple sources.
Experience with threat modeling processes and methodologies.
Experience executing threat hunts.
Experience conducting web application testing including injection attacks, XSS, CSRF, broken authentication & session management, security misconfiguration, sensitive data exposure, and insecure direct object reference.
Proficiency with authorized tools (e.g., Burp Suite).
Ability to identify vulnerabilities and assess risk.
Ability to maintain strict confidentiality and data security practices.
Ability to offer clarification or additional details on findings.
Ability to provide general guidance on improving security posture.
Ability to support retesting to validate remediation efforts.

Nice To Haves

Familiarity with OWASP methodologies.

Responsibilities

Collaborate with Cyber Threat Intelligence in other regions.
Support Incident Response, Purple team, and Vulnerability Management teams by providing situational awareness on threats.
Monitor and evaluate cyber threat intelligence from multiple sources.
Participate in threat modeling processes and methodologies.
Execute threat hunts to proactively look for malicious activities.
Conduct testing activities as per the agreed scope and timeline, avoid disruption to business operations, and adhere to industry-standard methodologies (e.g., OWASP).
Testing methodologies for web applications including injection attacks, XSS, CSRF, broken authentication & session management, security misconfiguration, sensitive data exposure, and insecure direct object reference.
Use authorized tools (e.g., Burp Suite) and techniques to identify vulnerabilities and assess risk.
Maintain strict confidentiality and data security practices.
Offer clarification or additional details on findings as needed, provide general guidance on improving security posture, and support retesting to validate remediation efforts.