Note: The job is a remote job and is open to candidates in USA. STRAVEXA is seeking a Security Risk Consultant to support a client in a remote environment. The role focuses on cybersecurity risk assessment, threat modeling, cloud security, identity and access management, and enterprise security architecture, including defining controls, testing strategies, and implementation guidance.
Responsibilities
- Conduct STRIDE-based threat modeling for target-state enterprise architectures
- Map security controls and mitigations to identified threats and risks
- Define security testing frameworks covering pre-deployment, integration, resilience, and continuous testing
- Assess multi-region disaster recovery architectures from a security perspective, including split-brain prevention and auditability
- Design HashiCorp Vault integration patterns, including OpenShift authentication and access-control policies
- Assess IBM MQ RDQM security, including mTLS and channel authentication
- Review cloud platform security controls, account boundaries, and service control policies
- Define security requirements for identity and cloud connectivity solutions
- Develop security implementation guidance, standards, and developer security checklists
- Assess the scope and approach for migrating legacy privileged-access solutions to modern secrets-management platforms
- Collaborate with architecture, engineering, cloud, and compliance teams to identify and mitigate security risks
Skills
- • Strong experience in cybersecurity, security architecture, risk assessment, and threat modeling
- • Experience with STRIDE and/or DREAD threat-modeling methodologies
- • Strong understanding of security requirements within financial services or highly regulated environments
- • Experience designing IAM solutions, including RBAC, namespace isolation, and access-control models
- • Hands-on experience with OpenShift security , including Security Context Constraints (SCCs), NetworkPolicies, and admission controllers
- • Experience integrating HashiCorp Vault into enterprise environments
- • Experience with IBM MQ security , including mTLS and connection/channel authentication
- • Strong understanding of cloud security principles and multi-region architectures
- • Excellent analytical, documentation, communication, and stakeholder-management skills
- • AWS Security Specialty certification or equivalent cloud-security certification
- • Experience with enterprise security architecture and cloud modernization initiatives
- • Experience with disaster recovery and resilience security assessments
- • Knowledge of privileged access management and secrets-management modernization
- • Experience developing security controls, testing frameworks, and secure-development guidance
- • Experience working with cross-functional architecture, engineering, DevOps, and compliance teams
Benefits
- Remote work arrangement
- 12+ month contract duration
Company Overview