Security Engineer, Threat Security Modeling (US Remote)

Company Description

Experian is the world’s leading global information services company. During life’s big moments – from buying a home or a car, to sending a child to college, to growing a business by connecting with new customers – we empower consumers and our clients to manage their data with confidence. We help individuals to take financial control and access financial services, businesses to make smarter decisions and thrive, lenders to lend more responsibly, and organizations to prevent identity fraud and crime.

We have 20,000 people operating across 44 countries and every day we’re investing in new technologies, talented people, and innovation to help all our clients maximize every opportunity.

Job Description

As a Security Engineer within the Threat Informed Defense (TID) Team, you'll play a pivotal role in securing our critical business applications. You'll be tasked with conducting thorough threat modelling exercises, identifying potential vulnerabilities, and enumerating relevant threat scenarios. Leveraging this information, you'll design and implement effective detection strategies that bolster our defense mechanisms against evolving cyber threats. Your work will directly contribute to the continuous improvement of our security posture, ensuring the integrity and resilience of our digital assets. 

Key Responsibilities: 

• Conduct comprehensive threat modelling of business-critical applications to identify potential security vulnerabilities and risks. 

• Enumerate relevant threat scenarios based on structured threat intelligence, industry trends, and the evolving cyber threat landscape. 

• Design and implement effective detection strategies for identified threats, focusing on minimizing potential impact and enhancing response capabilities. 

• Collaborate with the Cyber Threat Intelligence team to prioritize threat scenarios and align detection efforts with the current threat environment. 

• Work closely with cross-functional teams, including software development, operations, and IT, to integrate security considerations into the broader technology landscape. 

• Continuously monitor and evaluate the effectiveness of implemented detections, adjusting strategies as necessary to address emerging threats and vulnerabilities. 

• Develop and maintain documentation related to threat modeling exercises, detection strategies, and security protocols to ensure knowledge sharing and best practices within the team. 

• Participate in security incident response activities as required, providing expert analysis and recommendations for mitigating and preventing future threats. 

• Stay abreast of the latest cybersecurity trends, tools, and technologies, advocating for the adoption of innovative solutions that enhance our defensive capabilities. 

Qualifications

• Extensive Cybersecurity Experience: At least 8 years of experience in the cybersecurity field, with at least 3 years of experience building Cyber Threat Detections. This experience should encompass a broad understanding of cyber threats, defense mechanisms, and the cybersecurity landscape. 
• Cyber Threat Intelligence and Threat Modeling: Demonstrated expertise in leveraging cyber threat intelligence to inform detection strategies and conduct threat modeling on critical business applications. Proven ability to design and implement effective detection mechanisms within complex IT environments using SPL, KQL and SQL. 
• Technical Cybersecurity Skills: A strong technical background in cybersecurity technologies and methodologies, with a particular focus on threat intelligence, detection, response, and prevention. 
• Analytical and Problem-solving Abilities: Excellent analytical, problem-solving, and decision-making skills, capable of translating complex threat data into actionable defense strategies. 
• Communication and Collaboration: Effective communication and collaboration skills, with experience working across functional teams and engaging with all levels of management to integrate security practices. 
• Knowledge of Cybersecurity Frameworks and Standards: Familiarity with common cybersecurity frameworks, standards, and best practices, including but not limited to NIST. 
• Relevant Cybersecurity Certifications: Possession of relevant cybersecurity certifications (e.g., CISSP, CISM, GIAC) is highly desirable, demonstrating a commitment to professional development and expertise in the field. 
• In-depth Knowledge of MITRE ATT&CK Framework: In-depth knowledge and experience in implementing the MITRE ATT&CK framework within security operations. This includes the ability to use the framework for threat modeling, detection strategy development, and enhancing overall security posture by understanding and mitigating tactics, techniques,