Information Security Senior Specialist at NTT Data Services in Phoenix, Arizona

Job Description:

Job Description
Job Description:

• Perform risk assessments and evaluate risk and communicate outcomes.


• Understand product features & develop security requirements


• Threat Modeling - Own the threat model and ensure completeness across the SDLC and collaborate with project team to build a picture of controls or defenses needed to ensure minimalization of the attack surface


• Develop Data Dictionary to support Privacy By Design assessments


• Perform Secure Code Reviews with project team and determine actionable items to reduce risk.


• Collaborate with the Project Development team on Mitigation and Remediation planning based on risk assessment and security testing results.


• Assist with the socialization of the Mitigation by implementing "controls " and compliance to policy


• Active engagement with the Remediation activities for discovered vulnerabilities in the code.


• Strong grounding into Software Composition Analysis tools to assess cyber risk by inspecting embedded 3rd party components for CVE or commons use license violations.


• Strong grounding into Static Application Security Testing, or SAST tools to analyze application source code, byte code and binaries for coding and design conditions that are indicative of security flaws


• Knowledge of ISA 62443 System requirements standard


• Provide consultation expertise on Common Weakness Enumeration (CWE) and Common Vulnerability and Exposure (CVE) and security