Security Graph Engineer / Attack Path Analyst

Capgemini
New York, NY
Job Description
Role Overview

The Security Graph Engineer / Attack Path Analyst will design and implement the security graph used to model relationships among assets, applications, identities, vulnerabilities, network paths, controls, threats, and business context. The graph will support attack path discovery, exposure analysis, and risk-based remediation prioritization.

What You Will Do

Define the security graph ontology, model applications, hosts, cloud resources, identities, vulnerabilities, network connections, security controls, threats, and business services, and develop graph algorithms and queries to identify attack paths, lateral movement opportunities, choke points, toxic combinations, and high-impact remediation actions.

Why It Might Be a Fit

This role requires strong understanding of attack paths, network reachability, identity, privilege, lateral movement, segmentation, and vulnerability exploitation, as well as experience integrating graph platforms with APIs, relational databases, and data pipelines.

Requirements

  • 6 years of cybersecurity graph engineering or security analytics experience
  • Hands-on experience with Neo4j, Amazon Neptune, or comparable technology
  • Strong understanding of attack paths, network reachability, identity, privilege, lateral movement, segmentation, and vulnerability exploitation
  • Experience integrating graph platforms with APIs, relational databases, and data pipelines
  • Familiarity with MITRE ATTCK, Cyber Kill Chain attack graphs, and threat modeling
  • Strong Python, Java, SQL, or graph query skills

Benefits

  • Flexible work
  • Healthcare (dental, vision, mental health, and well-being programs)
  • Financial well-being programs (401(k) and Employee Share Ownership Plan)
  • Paid time off and paid holidays
  • Paid parental leave
  • Family building benefits (adoption assistance, surrogacy, and cryopreservation)
  • Social well-being benefits (subsidized back-up child/elder care and tutoring)
  • Mentoring, coaching, and learning programs
  • Employee Resource Groups
  • Disaster Relief
]]>