Security Architect (zdalnie)

Developing security design methodologies and creating baseline security architecture models.

Creating threat models within the delivered solution architecture.

Assessing technical and business risk in relation to the proposed security architecture.

Developing Defense in Depth models and layered security architecture.

Defining security requirements by evaluating strategies and business requirements, analyzing information security standards, vulnerability and risk analyses, and identifying integration issues and preparing cost estimates.

Preparing design proposals in the area of Application Life Cycle Management (limiting operational, financial, compliance, and audit risk in case of Leaves Action vulnerabilities).

Handling the Vulnerability Management area, including working with the TANIUM tool and providing a single operational dashboard for vulnerability insights.

Implementing WDAC (Defender Application Control) in a distributed application landscape, including control of unauthorized software and control and blocking of portable apps usage.

Developing and implementing a protection and disaster recovery architecture for identity services using Rubrik, aimed at limiting risks associated with the lack of full backup and recovery mechanisms for Microsoft Entra ID and Active Directory, including AD recovery at the forest-level restore and…

Executing CSPM activities: adjusting main subscription configurations and directly related resources (resource groups, accounts, licenses) to reduce incident impact and improve risk visibility.

Executing CSPM activities: supporting the hardening of web applications to protect against data leakage and delayed threat detection.

Creating security architecture documentation according to standards and developing architecture assessment questionnaires.

Building control frameworks in line with the proposed architecture.

Preparing detailed technical security reports for the management boards of operating companies and relevant stakeholders.