, including but not limited to cyber, physical, supply chain, operational, and geopolitical disruptions. This role goes... spanning multiple hazard types (cyber, physical, supply chain, etc.) Define escalation models from business-unit incidents...
assessments Experience with software supply chain security concepts, including SBOMs, dependency management, code signing..., and MITRE ATT&CK or ATLAS Experience developing technical proposals, responding to RFPs, creating Statements of Work (SOWs...
., state-sponsored intrusions, ransomware, supply chain compromises, and DDoS events). Executive Reporting: Produce... Python, PowerShell, or Bash for forensic artifact collection and processing. Knowledge of the MITRE ATT&CK framework...
STIG-based hardening where applicable) Lead system-level threat modeling (e.g., STRIDE / MITRE ATT&CK for ICS... experience will be considered Familiarity with SBOM concepts and supply chain security considerations for medical devices...
, with expertise in threats such as prompt injection, model abuse, excessive permissions, data exfiltration, and supply chain... and AI governance frameworks including NIST CSF, NIST AI RMF, MITRE ATT&CK/ATLAS, OWASP Top 10 for LLM Applications, CIS, and CSA...
trends in the threat landscape, such as new ransomware strains, supply chain threats, and geopolitical developments impacting... proficiency in research methodologies, threat intelligence platforms (TIPs), and the MITRE ATT&CK framework. Ability to correlate...
, and enterprise-approved alternatives. Secure the ML supply chain: model and artifact provenance, signed models, dependency... supply chain risk through SBOM generation, dependency governance, and artifact signing. Drive penetration testing, bug...
(STRIDE, PASTA, LINDDUN, MITRE ATT&CK) into automation, and make pentest scoping decisions defensible and repeatable. Set the... injection, and agent-misuse risk. DevSecOps, IaC security, or supply-chain depth, and senior-relevant certifications (e.g...
tools such as GitHub Advanced Security, Tenable, or similar. Knowledge of API, web application, and software supply chain..., and defensive controls. Familiarity with the MITRE ATT&CK framework. Basic understanding of cloud security, identity security...
of integrated suites of security controls across multiple domains to protect computing systems against external, insider, and supply... Structured threat modeling leveraging analytical frameworks such as ATT&CK, STRIDE, and MRAP-C. Identification of system risks...