Security Graph Engineer / Attack Path Analyst

Job Location - NYC NY (Day One Onsite - Hybrid)

About The Role

• The Security Graph Engineer / Attack Path Analyst will design and implement the security graph used to model relationships among assets applications identities vulnerabilities network paths controls threats and business context.
• The graph will support attack path discovery exposure analysis and risk based remediation prioritization

Key Responsibilities

• Define the security graph ontology including nodes edges relationships attributes and temporal context
• Model applications hosts cloud resources identities vulnerabilities network connections security controls threats and business services
• Integrate data from VMAD Illumio Forward Networks asset inventories IAM platforms vulnerability scanners and threat intelligence sources
• Develop graph algorithms and queries to identify attack paths lateral movement opportunities choke points toxic combinations and high impact remediation actions
• Implement graph based exposure scoring and risk prioritization capabilities
• Develop APIs and services to expose graph insights to the VMAD portal and analytics components
• Establish graph data quality entity resolution versioning lineage and update processes
• Create analyst views and visualizations for attack path investigation
• Validate graph derived insights with vulnerability network identity and architecture teams
• Optimize graph performance for enterprise scale datasets

Required Skills

• 6 years of cybersecurity graph engineering or security analytics experience
• Hands on experience with Neo4j Amazon Neptune or comparable technology
• Strong understanding of attack paths network reachability identity privilege lateral movement segmentation and vulnerability exploitation
• Experience integrating graph platforms with APIs relational databases and data pipelines
• Familiarity with MITRE ATTCK Cyber Kill Chain attack graphs and threat modeling
• Strong Python Java SQL or graph query skills

Life At Capgemini

Capgemini supports all aspects of your well-being throughout the changing stages of your life and career. For eligible employees, we offer: 

• Flexible work
• Healthcare including dental, vision, mental health, and well-being programs
• Financial well-being programs such as 401(k) and Employee Share Ownership Plan
• Paid time off and paid holidays
• Paid parental leave
• Family building benefits like adoption assistance, surrogacy, and cryopreservation
• Social well-being benefits like subsidized back-up child/elder care and tutoring
• Mentoring, coaching and learning programs
• Employee Resource Groups
• Disaster Relief

Disclaimer

Capgemini is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.

This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodations do not pose an undue hardship.

Capgemini is committed to providing reasonable accommodations during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.

Click the following link for more information on your rights as an Applicant http://www.capgemini.com/resources/equal-employment-opportunity-is-the-law

Salary Transparency

The