Threat Modeler

What Working at Hexaware offers :

Hexaware is a dynamic and innovative IT organization committed to delivering cutting-edge solutions to our clients worldwide.

We pride ourselves on fostering a collaborative and inclusive work environment where every team member is valued and empowered to succeed.

Hexaware provides access to a vast array of tools that enhance, revolutionize, and advance professional profile. We complete the circle with excellent growth opportunities, chances to collaborate with highly visible customers, chances to work alongside bright brains, and the perfect work-life balance.

With an ever-expanding portfolio of capabilities, we delve deep into and identify the source of our motivation. Although technology is at the core of our solutions, it is still the people and their passion that fuel Hexaware’s commitment towards creating smiles.

At Hexaware we encourage to challenge oneself to achieve full potential and propel growth. We trust and empower to disrupt the status quo and innovate for a better future.

We encourage an open and inspiring culture that fosters learning and brings talented, passionate, and caring people together.

We are always interested in, and want to support, the professional and personal you. We offer a wide array of programs to help expand skills and supercharge careers.

We help discover passion the driving force that makes one smile and innovate, create, and make a difference every day.

The Hexaware Advantage : Your Workplace Benefits

• Excellent Health benefits with low-cost employee premium.
• Wide range of voluntary benefits such as Legal, Identity theft and Critical Care Coverage
• Unlimited training and upskilling opportunities through Udemy and Hexavarsity

Who we are?

At Hexaware Technologies, we are a leading global IT Services company, dedicated to driving digital transformation and innovation for businesses around the world.

Founded in 1990, Hexaware has grown into a global trusted partner for enterprises, offering comprehensive AI empowered services including IT Consulting, Application Development, Infrastructure and Cloud Management and Business Process services.

At Hexaware we are a community of creative, diverse, and open-minded Hexawarians creating smiles through the power of great people and technology.

We pride ourselves on our people-centric culture and commitment to sustainability. Our diverse team of over 30,000 professionals across 30 countries is driven by a shared passion for innovation and excellence.

We foster a collaborative environment where creativity and continuous learning are encouraged, enabling our employees to thrive and grow.

Responsibilities :

• Develop training material for how to engage the Threat Management service, make use of technologies, and interpret findings.
• Drive beneficial security change into the business through supporting Developers with creation of threat models for their applications and remediation of potential threats, balancing risk against business need.
• Support the Security Architecture team to develop and mature an Application Threat Modeling Program by defining processes, procedures, controls, KRI’s / KPI’s, etc.

that identify threats early in the development process reducing risks prior to deployment.

Work with the InfoSec functional teams in the development of the Information Security strategy and roadmap, including and with focus on Threat Modeling;

liaison and consult with Enterprise Architecture, IT and the business for ongoing input and awareness

Advise and Contribute to Strategy and Roadmaps

Qualifications :

• 5-7 years related experience in Cyber Security, Insider Threat, Intelligence Community, Federal Law Enforcement, or a related field
• Strong understanding of access controls and authentication mechanisms, PKI, and cryptography
• Demonstrated experience developing technical threat models
• Demonstrated experience performing security code reviews and explaining results to project teams
• Strong understanding of protocols, networking, firewalls, caching, VIPs, proxies, web applications, and database systems
• Experience with AWS
• Knowledge of several of the following programming languages; Java, C#, Python, C++, Node.JS, JavaScript
• Knowledge in one or several of the following Frontend frameworks; React, Angular, Ember, Vue
• Minimum of 2 years’ experience working as an Information Security Threat Modeling subject matter expert at a senior level
• Minimum of 2 years’ experience working as an Information Security Professional, preferably within the architecture or engineering disciplines

Desirable :

• Able to provide references to CVEs filled, Bug Bounty Username, or GitHub repositories
• One or more security-related certifications associated with AWS, GCP, or Azure
• CISSP (+ ISSAP), CCSP, CEH, OSCP, CSSLP

Keys to Success in this Role :

• Strong written and verbal communication skills
• Able to mentor and guide team members
• Self-starter, candidate must be able to anticipate tasks and take action
• Excellent presentation, program management and relationship management skills

Equal Opportunities Employer :

Hexaware Technologies is an equal opportunity employer. We are dedicated to providing a work environment free from discrimination and harassment.

All employment decisions at Hexaware are based on business needs, job requirements, and individual qualifications. We do not discriminate based on race including colour, nationality, ethnic or national origin, religion or belief, sex, age, disability, marital status, sexual orientation, parental status, gender reassignment, or any other status protected by law.

We encourage candidates of all backgrounds to apply.