IT Security Architecture Review & Threat Modelling (English must be fluent) (m/f/d)
usd AG
Contact person: Rut Scheithauer
remote, Germany
Description
For one of our direct end clients, we are looking for senior level expertise in the field of Security Architecture and Threat Modelling.
NB: We can take into consideration freelancers and consultants in permanent employment, but no freelancers from third parties.
Start: asap
Duration: initially until Xmas, extension in 2027 is likely
Capacity: full-time
Location: 100 % remote
Project language: English - must be fluent (spoken and written)
To Dos:
Security Architecture Review
- Review and analyze existing security architecture documents
- Validate security architectures against established policies and standards
- Assess compliance gaps and provide recommendations for remediation
- Ensure alignment with industry best practices and regulatory requirements
Threat Modelling:
- Plan, facilitate, and conduct threat modelling workshops
- Utilize STRIDE per interaction methodology as the primary framework
- Serve as Lead or Co-Lead facilitator for workshop sessions
- Identify potential security threats and vulnerabilities within system designs
- Collaborate with cross-functional teams including architects, developers, and security personnel
Requirements
Must-haves:
- Demonstrated expertise as a Security Professional/Security Expert
- Proven experience in security architecture review and validation
- Hands-on experience conducting threat modelling using STRIDE methodology
- Strong analytical and problem-solving capabilities
- Excellent written and verbal communication skills
- Experience presenting to technical and executive audiences
Should-haves:
- Knowledge of SAP software and solutions architecture
- Previous experience working in enterprise SAP environments
If the project matches matches your expertise and experience, we look forward to hearing from you.