. Investigate and communicate an adversary's actions through use of common frameworks such as MITRE ATT&CK and the Diamond Model... focused on a variety of threats including ransomware, nation-state, cybercrime, supply-chain/3rd party risks, cloud, mobile...
exfiltration, privilege escalation in agents, and model supply chain risks Excellent interpersonal, collaboration, critical... and certifications such as ISO 27001, SOC 2, PCI DSS, OWASP Top 10, CWE Top 25, and MITRE ATT&CK Relevant BA/BS degree...
, including but not limited to cyber, physical, supply chain, operational, and geopolitical disruptions. This role goes... spanning multiple hazard types (cyber, physical, supply chain, etc.) Define escalation models from business-unit incidents...
. Assess AI-specific risks including data handling, model provenance, supply chain integrity, API security, third-party model... augmented generation (RAG) poisoning, model supply chain risks, agentic AI risks, and AI misuse scenario Experience with ML...
application, prompt injection/data leakage risks, model supply chain and dependency risks). Objective To leverage deep... vulnerabilities (OWASP Top 10, SANS Top 25, ITRE ATT&CK). Strong software development experience with Java and Python (and/or .NET...