Talent.com
Astra North Infoteck Inc.
Threat Modeler / Security Architect – AI Security, Cloud & DevSecOpsAstra North Infoteck Inc. • Toronto, ON, ca
Threat Modeler / Security Architect – AI Security, Cloud & DevSecOps

Threat Modeler / Security Architect – AI Security, Cloud & DevSecOps

Astra North Infoteck Inc. • Toronto, ON, ca
21 days ago
Job type
  • Full-time
  • Quick Apply
Job description
Job Description

Threat Modeler / Security Architect – AI Security, Cloud & DevSecOps

Must Have Technical/Functional Skills

Security Architecture & Threat Modeling

• Threat Modeler and Security Architect with a strong development background.
• Experience in Artificial Intelligence, Machine Learning, and Data Science with expertise in enterprise architecture, AI product security, and digital transformation.
• Strong hands-on experience with cloud-native architectures, including AWS and GCP.
• Experience with secure AI system development, AI governance, and cybersecurity best practices.
• Experience with threat modeling frameworks, attack vectors, and vulnerability analysis, including:
• CAPEC
• ATT&CK
• STRIDE

Application Security & DevSecOps

• Experience with application security controls across:
• Web applications
• APIs
• Mobile applications
• AI systems
• Knowledge of security frameworks and standards, including:
• NIST 800-53
• NIST Cybersecurity Framework (CSF)
• OWASP ASVS
• Experience with Application Security design and DevSecOps practices.
• Full-stack knowledge of application architectures, including:
• Single Page Applications
• REST APIs
• SOAP APIs
• Mobile applications
• Experience with:
• Java
• JavaScript
• Mobile application development

Database, Cloud & Identity Security

• Knowledge of database architectures, including:
• Oracle
• SQL
• DB2
• NoSQL databases
• Experience with cloud security architecture, design, implementation, and operations.
• Exposure to IAM controls, including:
• OAuth 2.0
• OIDC
• JWT
• Strong understanding of cryptography controls:
• Data at rest
• Data in motion

Certifications

• Preferred certifications:
• CISSP
• CISM
• CSSLP
• CISA
• CRISC
• OSCP

Key Responsibilities

Threat Modeling & Security Assessment

• Conduct security risk assessments of applications based on system design and application code implementation.
• Develop and manage security governance processes and procedures for:
• Threat modeling programs
• Application security design
• DevSecOps programs
• Assist in developing threat modeling governance documentation.
• Develop reports for management related to:
• Residual risk
• Non-compliance
• Review security controls with application owners to ensure requirements are implemented.
• Validate security control implementation against scanning tool outputs to support auditability and verification.

Security Governance & Compliance

• Work with information security leadership to develop strategies and plans to enforce threat modeling and address control gaps.
• Monitor and track compliance with application owners to ensure security controls are implemented as planned.
• Assist application teams with security standard exceptions identified through threat modeling.
• Develop and define security metrics and criteria for information security programs.

Secure Design & Engineering Enablement

• Develop, maintain, update, and enhance:
• Secure design patterns
• Secure coding standards
• Threat libraries
• Socialize secure design patterns and secure coding standards with engineering teams.
• Provide threat modeling consultation and guidance to application teams.
• Enable strong developer and customer experience while collaborating with application teams.
• Develop innovative attack techniques to evaluate protective designs and existing mitigations.

Security Strategy & Architecture

• Participate in developing strategies for information security processes and programs.
• Document current and future state security capabilities using industry-leading technologies to improve IT risk management and data protection.
• Provide security awareness and education on industry trends, efforts, and statistics.
• Recommend resource types and skillsets required to address security project and process challenges.
• Support investment decisions through business cases and cost-benefit analysis.

Agile Delivery & Collaboration

• Facilitate Agile events to help teams deliver value incrementally and iteratively.
• Support Program Increment (PI) execution through team-level events and collaboration with Release Train Engineers (RTE).
• Support teams in achieving PI objectives.
• Provide consultation and advice to assess information security risks and implement controls to protect intellectual property and sensitive data.





Requirements
Sailpoint
Create a job alert for this search

Threat Modeler / Security Architect – AI Security, Cloud & DevSecOps • Toronto, ON, ca

Similar jobs

AI Security Architect

Manulife Financialtoronto, on, Canada
Full-time

We are seeking an experienced AI Security Architect to lead the design and governance of security solutions across cloud, data, application, and AI environments.This role is responsible for develop... Show more

 • Promoted

Security Architect, CIAM

Capcotoronto, on, Canada
Full-time

Shape the future of secure digital identity for leading financial services organisations.We are seeking a Security Architect with deep Customer Identity and Access Management (CIAM) expertise to su... Show more

 • Promoted

OCI Security Architect Lead - Cloud Risk & Design

Source Codetoronto, on, Canada
Full-time

A leading technology firm is seeking a Sr.Technology Architect in Toronto to oversee security architecture and design for Oracle Cloud Infrastructure.This hybrid role involves client engagements, l... Show more

 • Promoted

Senior Threat Risk Architect – InfoSec & Risk

Rubicon PathToronto, ON, CA
Full-time

A leading security consultancy in Toronto is seeking a Senior Security Specialist to assess threats and implement security measures.The ideal candidate will have expertise in security architecture ... Show more

 • Promoted

Threat Modeling Expert at Tata Consultancy Services

Tata Consultancy ServicesToronto, ON, CA
Full-time

Elevate security protocols at Tata Consultancy Services as a Threat Modeler with a development background focused on AI.Bring your skills in threat modeling and application security to the forefron... Show more

 • Promoted

Security Architect

Coelate TechnologiesToronto, ON, CA
Full-time

Bachelor’s or Master’s in Computer Science, Cybersecurity, or related field.CISSP, CCSP, SABSA, TOGAF, or AI-specific credentials (e.NIST AI RMF, MIT AI Ethics, Azure AI Engineer).Demonstrable expe... Show more

 • Promoted

AWS Security Architect

Venterra Realtyrichmond hill, york region, Canada
Full-time

Hybrid / Corporate Office in Richmond Hill, Ontario.Salary: $130,000 - $170,000; up to 10% discretionary incentive target*.This position is designed for a senior‑level subject matter expert (SME) w... Show more

 • Promoted

Lead Cloud Security Architect - Celestica

Celesticatoronto, on, Canada
Full-time

Join Celestica as a Lead Cloud Security Architect to enhance the security landscape of cloud environments and SaaS applications.Your expertise in cloud technologies will be pivotal for compliance a... Show more

 • Promoted

RQ00391 - Sr. Security Architect

Source CodeToronto, ON, CA
Full-time

Contract 4 months, possible 6-month extension.GHQ (777 Memorial, Orillia) or Queens Park Detachment (56 Wellesley Street W, Toronto).Defines, evaluates, and assesses security architecture requireme... Show more

 • Promoted

Cyber Security Architect for AI Solutions

Nielseniq-toronto, on, Canada
Full-time

Shape the future of AI security as the Cyber Security Architect focusing on innovative solutions.Your expertise will ensure AI services are secure and compliant with established cyber security guid... Show more

 • Promoted

AI Security Architect

Manulife Insurance MalaysiaToronto, Ontario, Canada
Full-time

Develop and implement enterprise security controls and architecture standards across infrastructure, cloud, and application environments.Evaluate the effectiveness of security controls, identify ga... Show more

 • Promoted

Ai security architect

Société Financière Manuvietoronto, on, Canada
Full-time

Develop and implement enterprise security controls and architecture standards across infrastructure, cloud, and application environments.Evaluate the effectiveness of security controls, identifies ... Show more

 • Promoted

Senior AI Security & Risk Architect

TDtoronto, on, Canada
Full-time

A leading financial institution in Toronto is searching for a Senior Information Security Specialist to provide technology risk advice and consultation to various business partners.This role involv... Show more

 • Promoted

Security Architect with API Expertise

Central 1 Credit Uniontoronto, on, Canada
Full-time

Join Central 1 as a Security Architect focusing on API technologies and enterprise security.Utilize your skills to safeguard systems while collaborating with technology partners.In this role, you'l... Show more

 • Promoted

Security Architect

5V Videotoronto, on, Canada
Full-time

Embedded Systems Architect – Media Distribution | Broadcast & Streaming Technology.A well-established media distribution technology company is looking for a senior.This is a hands‑on architecture r... Show more

 • Promoted

Strategic Presales Security Architect - Mid-Market

Fortinet, Inc.Toronto, ON, CA
Full-time

A leading cybersecurity company in Canada is seeking a Presales Security Expert for the Mid-Market.This role involves assisting in sales from a technical standpoint, providing training post-sales, ... Show more

 • Promoted

Applications Security Architect

Ward Technology TalentToronto, Ontario, Canada
Full-time

Applications Security Architect – CONTRACT – (2-3 days per week).Application Security Architect.Onsite is required once every 2 weeks in GTA by Toronto Airport.Perform security assessments on new p... Show more

 • Promoted

AI ML Security Architect

Zodiac Solutions, IncToronto, ON, CA
Full-time

Security Architect to assure enterprise security architecture with a focus on the review and authorship of Architecture Decision Records (ADRs) and Security Architecture Review Board (SARB) submiss... Show more

 • Promoted

Security Architect

AGFA HealthCareToronto, ON, CA
Full-time

We are hiring an experienced security Architect who is responsible for designing and implementing security within our architecture.This role involves working closely with cross-functional teams (en... Show more

 • Promoted

Cyber Security Architect

Intuitive.aiToronto, ON, CA
Full-time

Talent Acquisition Leader | Hiring Cloud Professionals Globally.Cloud is one of the fastest-growing (INC 5000, CRN) Cloud & SDx solution and services companies supporting enterprise customers on a ... Show more