CENSUS

• Develop Azure security architectures and execute design security reviews • Conduct risk assessments across cloud-native, hybrid, and enterprise environments • Analyze product security requirements and apply industry methodologies • Design and support the implementation of secure Azure cloud architectures • Perform comprehensive security posture assessments • Document and present product security risks

• Design and build production-grade user interfaces for next-generation cybersecurity and data-intensive platforms. • Translate design specifications and prototypes (e.g., Figma) into pixel-accurate, responsive web interfaces. • Build reusable, well-structured components and maintain a consistent design system across the product. • Implement data-dense views such as inventories, detail pages, and interactive dashboards. • Ensure cross-browser compatibility, responsiveness, and accessibility across the application. • Build interactive tables, filters, and visualizations for large structured and semi-structured datasets. • Integrate charting and visualization libraries (such as ECharts, D3, or Recharts) for analytics and reporting views. • Apply techniques such as virtualization, pagination, and lazy loading to keep data-heavy views performant. • Integrate frontend applications with REST/GraphQL backends and streaming endpoints. • Write unit, integration, and end-to-end tests for frontend components and user flows. • Participate in code reviews and uphold maintainable, well-documented frontend code. • Work closely with designers to refine UX and close the loop between design and implementation.

• Review and validate security documentation (e.g., Security Targets, threat models, trust boundaries, asset inventories) • Assess the completeness, accuracy, and risk coverage of various threat models and risk assessment frameworks (STRIDE, LINDDUN, OWASP, TARA, TAL, etc.) • Verify security requirement traceability across assets, trust boundaries, and system functions • Conduct architectural and implementation-level reviews of security controls (e.g., encryption, access control, key management) • Perform targeted security testing (white-box and black-box) on system APIs, client/mobile apps, backend services, and cloud infrastructure • Validate implementation of cryptographic controls, key lifecycle procedures, and secure communication protocols • Deliver comprehensive, standards-aligned technical reports based on evaluation findings

• Understand client requirements and plan corresponding technical activities • Decompose high-level tasks into smaller technical activities for security engineering teams • Lead technical teams within project scope • Document and present product security risks • Conduct technical QA and present deliverables to audiences • Drive technical quality improvements and communicate success factors to business development

• Dive into cybersecurity with hands-on training and real-world projects. • Work with a global team to protect applications, networks, and organizations. • Develop technical and problem-solving skills that set you apart.

• Analyze product security requirements and apply industry-recognized methodologies to translate them into effective security controls. • Design and support the implementation of secure cloud architectures. • Audit externally developed product security designs, document missing security controls, and lead efforts to analyze and implement security improvements. • Conduct threat modeling, attack surface analysis, and attack tree creation for products running on cloud platforms. • Research, review, compare, and propose technologies that meet client requirements. • Perform comprehensive security posture assessments through various methodologies. • Validate CI/CD pipelines and audit deployment configurations across various hosting environments. • Ensure that implemented solutions align with the product’s security architecture and requirements. • Document and present product security risks in both technical and business contexts. • Lead and support a small team of security engineers and consultants in assessing and researching cutting-edge technologies.

• Technical leadership on major projects involving emerging technologies. • Researching, analyzing, and resolving demanding technical challenges. • Driving threat modelling, attack surface enumeration and attack tree creation activities across applications. • Planning and supervising end-to-end security posture assessments via source code auditing and functional testing. • Documenting and presenting product security risks.

• Own the reference architecture for LLM/AI features (service boundaries, APIs, data contracts, trust boundaries, deployment patterns) • Convert prototypes into production-ready services with clear interfaces, type/schema discipline, and controlled dependencies • Define versioning strategy for prompts, tools, policies, and model endpoints (including rollbacks) • Design and implement LLM pipelines for natural language → structured queries for database engines with guardrails • Implement schema-first output (e.g., Pydantic models / JSON schema) and robust parsing/validation • Own non-functional requirements: latency budgets, throughput, resilience, and cost control • Build observability: structured logs, traces, metrics, and error taxonomies that make failures actionable • Translate requirements from client stakeholders and internal security / engineering teams into robust AI-enabled solutions and data integrations • Act as the technical lead for Applied AI delivery: raise engineering bar, mentor DS/engineers, and drive code quality • Document solutions and participate in knowledge transfer with internal and partner teams.

• Configure, deploy and support CI/CD pipelines (GHA, Gitlab CI, Jenkins). • Automate builds/tests/packaging/deployments for Embedded/Android but also Cloud applications. • Design, implement and maintain firmware signing systems including: PKI infrastructure, certificate lifecycle management, and secure key handling. • HSM (Hardware Security Module) setup, configuration, and integration with signing services. • Integration of signing workflows into CI/CD pipelines (e.g., Jenkins, GitLab CI). • Develop automation for secure key provisioning, rotation and access management. • Deploy, configure, and maintain security tools, including: SAST (Static Application Security Testing) • DAST (Dynamic Application Security Testing) • CVE scanners (dependencies, container images, firmware components) • Secret scanning and SBOM generation tooling • Ensure high availability, disaster recovery, and infrastructure resilience.

• Configure, deploy and support CI/CD pipelines (GHA, Gitlab CI, Jenkins). • Automate builds/tests/packaging/deployments for Embedded/Android but also Cloud applications. • Design, implement and maintain firmware signing systems including: PKI infrastructure , certificate lifecycle management, and secure key handling. • HSM (Hardware Security Module) setup, configuration, and integration with signing services. • Integration of signing workflows into CI/CD pipelines (e.g., Jenkins, GitLab CI). • Develop automation for secure key provisioning, rotation and access management. • Deploy, configure, and maintain security tools , including: SAST (Static Application Security Testing) DAST (Dynamic Application Security Testing) CVE scanners (dependencies, container images, firmware components) Secret scanning and SBOM generation tooling • Ensure high availability, disaster recovery, and infrastructure resilience.