Talent.com
Astra North Infoteck Inc.
Threat Modeler / Security Architect – AI Security, Cloud & DevSecOpsAstra North Infoteck Inc. • Toronto, ON, ca
Threat Modeler / Security Architect – AI Security, Cloud & DevSecOps

Threat Modeler / Security Architect – AI Security, Cloud & DevSecOps

Astra North Infoteck Inc. • Toronto, ON, ca
Il y a 17 jours
Type de contrat
  • Temps plein
  • Quick Apply
Description de poste
Job Description

Threat Modeler / Security Architect – AI Security, Cloud & DevSecOps

Must Have Technical/Functional Skills

Security Architecture & Threat Modeling

• Threat Modeler and Security Architect with a strong development background.
• Experience in Artificial Intelligence, Machine Learning, and Data Science with expertise in enterprise architecture, AI product security, and digital transformation.
• Strong hands-on experience with cloud-native architectures, including AWS and GCP.
• Experience with secure AI system development, AI governance, and cybersecurity best practices.
• Experience with threat modeling frameworks, attack vectors, and vulnerability analysis, including:
• CAPEC
• ATT&CK
• STRIDE

Application Security & DevSecOps

• Experience with application security controls across:
• Web applications
• APIs
• Mobile applications
• AI systems
• Knowledge of security frameworks and standards, including:
• NIST 800-53
• NIST Cybersecurity Framework (CSF)
• OWASP ASVS
• Experience with Application Security design and DevSecOps practices.
• Full-stack knowledge of application architectures, including:
• Single Page Applications
• REST APIs
• SOAP APIs
• Mobile applications
• Experience with:
• Java
• JavaScript
• Mobile application development

Database, Cloud & Identity Security

• Knowledge of database architectures, including:
• Oracle
• SQL
• DB2
• NoSQL databases
• Experience with cloud security architecture, design, implementation, and operations.
• Exposure to IAM controls, including:
• OAuth 2.0
• OIDC
• JWT
• Strong understanding of cryptography controls:
• Data at rest
• Data in motion

Certifications

• Preferred certifications:
• CISSP
• CISM
• CSSLP
• CISA
• CRISC
• OSCP

Key Responsibilities

Threat Modeling & Security Assessment

• Conduct security risk assessments of applications based on system design and application code implementation.
• Develop and manage security governance processes and procedures for:
• Threat modeling programs
• Application security design
• DevSecOps programs
• Assist in developing threat modeling governance documentation.
• Develop reports for management related to:
• Residual risk
• Non-compliance
• Review security controls with application owners to ensure requirements are implemented.
• Validate security control implementation against scanning tool outputs to support auditability and verification.

Security Governance & Compliance

• Work with information security leadership to develop strategies and plans to enforce threat modeling and address control gaps.
• Monitor and track compliance with application owners to ensure security controls are implemented as planned.
• Assist application teams with security standard exceptions identified through threat modeling.
• Develop and define security metrics and criteria for information security programs.

Secure Design & Engineering Enablement

• Develop, maintain, update, and enhance:
• Secure design patterns
• Secure coding standards
• Threat libraries
• Socialize secure design patterns and secure coding standards with engineering teams.
• Provide threat modeling consultation and guidance to application teams.
• Enable strong developer and customer experience while collaborating with application teams.
• Develop innovative attack techniques to evaluate protective designs and existing mitigations.

Security Strategy & Architecture

• Participate in developing strategies for information security processes and programs.
• Document current and future state security capabilities using industry-leading technologies to improve IT risk management and data protection.
• Provide security awareness and education on industry trends, efforts, and statistics.
• Recommend resource types and skillsets required to address security project and process challenges.
• Support investment decisions through business cases and cost-benefit analysis.

Agile Delivery & Collaboration

• Facilitate Agile events to help teams deliver value incrementally and iteratively.
• Support Program Increment (PI) execution through team-level events and collaboration with Release Train Engineers (RTE).
• Support teams in achieving PI objectives.
• Provide consultation and advice to assess information security risks and implement controls to protect intellectual property and sensitive data.





Requirements
Sailpoint
Créer une alerte emploi pour cette recherche

Threat Modeler / Security Architect – AI Security, Cloud & DevSecOps • Toronto, ON, ca

Offres similaires

Security Architect, CIAM

Capcotoronto, on, Canada
Temps plein

Shape the future of secure digital identity for leading financial services organisations.We are seeking a Security Architect with deep Customer Identity and Access Management (CIAM) expertise to su... Voir plus

 • Offre sponsorisée

Senior Threat Risk Architect – InfoSec & Risk

Rubicon PathToronto, ON, CA
Temps plein

A leading security consultancy in Toronto is seeking a Senior Security Specialist to assess threats and implement security measures.The ideal candidate will have expertise in security architecture ... Voir plus

 • Offre sponsorisée

Threat Modeling Expert at Tata Consultancy Services

Tata Consultancy ServicesToronto, ON, CA
Temps plein

Elevate security protocols at Tata Consultancy Services as a Threat Modeler with a development background focused on AI.Bring your skills in threat modeling and application security to the forefron... Voir plus

 • Offre sponsorisée

AWS Security Architect

Venterra Realtyrichmond hill, york region, Canada
Temps plein

Hybrid / Corporate Office in Richmond Hill, Ontario.Salary: $130,000 - $170,000; up to 10% discretionary incentive target*.This position is designed for a senior‑level subject matter expert (SME) w... Voir plus

 • Offre sponsorisée

Applications Security Architect

Tata Consultancy ServicesNorth York, Canada
Temps plein

Advance your career with Tata Consultancy Services as a Senior Application Security Architect.Focus on AI-driven vulnerability detection within a Zero Trust framework, driving compliance and secure... Voir plus

 • Offre sponsorisée

Azure Cloud Security Architect – Zero-Trust Leader

WSP in CanadaToronto, Ontario, Canada
Temps plein

A leading consulting firm in Canada is seeking a Cloud Security Architect to design and maintain Azure security architecture across regions.This role requires extensive experience in information se... Voir plus

 • Offre sponsorisée

Aws Security Architect

Venterra RealtyRichmond Hill, Canada
Temps plein

Seeking a senior AWS Security Architect to design and evolve secure, scalable cloud environments, focusing on maturing security and driving improvements within a multi-tenant architecture. Voir plus

 • Offre sponsorisée

Senior AI Security & Risk Architect

TDtoronto, on, Canada
Temps plein

A leading financial institution in Toronto is searching for a Senior Information Security Specialist to provide technology risk advice and consultation to various business partners.This role involv... Voir plus

 • Offre sponsorisée

Security Architect with API Expertise

Central 1 Credit Uniontoronto, on, Canada
Temps plein

Join Central 1 as a Security Architect focusing on API technologies and enterprise security.Utilize your skills to safeguard systems while collaborating with technology partners.In this role, you'l... Voir plus

 • Offre sponsorisée

Senior Architect in AI Cyber Security

NielsenIQToronto, ON, CA
Temps plein

Harness your expertise in cyber security at NIQ as a Senior Architect focused on AI-related security strategies.This position is ideal for those passionate about securing AI systems and platforms.I... Voir plus

 • Offre sponsorisée

Security Architect

5V Videotoronto, on, Canada
Temps plein

Embedded Systems Architect – Media Distribution | Broadcast & Streaming Technology.A well-established media distribution technology company is looking for a senior.This is a hands‑on architecture r... Voir plus

 • Offre sponsorisée

Applications Security Architect

Ward Technology TalentToronto, Ontario, Canada
Temps plein

Applications Security Architect – CONTRACT – (2-3 days per week).Application Security Architect.Onsite is required once every 2 weeks in GTA by Toronto Airport.Perform security assessments on new p... Voir plus

 • Offre sponsorisée

Senior Security Engineer - Threat Modeling - C$150,025 - C$194,150 A Year - Remote

SamsaraEast York, Canada
Télétravail
Temps plein

Senior Security Engineer to lead threat modeling, assess risks, and collaborate with engineering teams to improve software security and compliance within Samsara's environment. Voir plus

 • Offre sponsorisée

AI ML Security Architect

Zodiac Solutions, IncToronto, ON, CA
Temps plein

Security Architect to assure enterprise security architecture with a focus on the review and authorship of Architecture Decision Records (ADRs) and Security Architecture Review Board (SARB) submiss... Voir plus

 • Offre sponsorisée

Security Architect

AGFA HealthCareToronto, ON, CA
Temps plein

We are hiring an experienced security Architect who is responsible for designing and implementing security within our architecture.This role involves working closely with cross-functional teams (en... Voir plus

 • Offre sponsorisée

Threat Modeling Analyst

nugget.aiToronto, Ontario, Canada
Temps plein

The Threat Modeling Analyst is responsible for identifying threats and vulnerabilities across company systems and communicating the issues with the appropriate team – infrastructure, IT, risk, DLP,... Voir plus

 • Offre sponsorisée

Senior Cloud Security & Ai/Ml Architect - C$103,200 - C$192,000 A Year

Canadian financial institutionNorth York, Canada
Temps plein

Design and implement cloud security solutions on AWS, Azure, and AI/ML platforms for a Canadian financial institution. Voir plus

 • Offre sponsorisée

Security Architect

nugget.aiToronto, Canada
Temps plein

The lead security analyst is an advisor and subject matter expert representing technology with the responsibility of securing our applications and infrastructure.This is a key role shaping the stra... Voir plus

 • Offre sponsorisée

Platform Security Lead: Architect & Threat Modeling

AquanowToronto, Ontario, Canada
Temps plein

A leading technology firm in Canada is seeking a seasoned Platform Security Engineer to lead all aspects of platform security.The ideal candidate will enhance security practices, guide engineering ... Voir plus

 • Offre sponsorisée

Cloud Security Architect (REQ #337)

WSP in CanadaToronto, Ontario, Canada
Temps plein

What if you could redefine what's possible?.We are the home of ambitious, passionate, and innovative world shapers.With an unmatched breadth and depth of engineering, advisory and science-based exp... Voir plus