Software analyst Jobs in Saskatoon, SK

Our valued client is looking for a Snr Security Design Specialist to implement security by design, security mitigations and perform verification and testing of security measures

1 Full time & 1 Part Time (~10 days/month) position available

Responsibilities:

• Working within project teams to implement security by design, security mitigations and perform verification and testing of security measures following the clients Cyber Security processes and deliverables.
• Develop IT security reference architectures, design patterns, and requirements to integrate security into departmental systems and projects.
• Technologies include but are not limited to Azure Cloud (IaaS, PaaS and SaaS), AI/LLMs (both self-hosted and as-a-service) as well as on-premises solutions.
• Standards and guidance are from the Canadian Center for Cyber Security and the Treasury Board Secretariat of Canada, including but not limited to:
• Directive on Service and Digital
• Directive on Security Management, Appendix B
• ITSG-33 and ITSP.10. Series
• Government of Canada Cloud Gardrails
• Government of Canada Guide on the use of generative artificial intelligence
• Work with systems security assessors and project teams to define and create security related project artefacts/documents, such as but not limited to security assessment plan, business needs for security, security design, security test plan.
• Review project artifacts to confirm appropriate level of security is embedded into department projects before they are put into production.
• Develop reusable artifacts, tools, and templates to standardize business continuity and security practices within the department.
• Verify that security safeguards meet the applicable policies and standards, validate the security requirements by mapping the system-specific security policy to the functional security requirements, and mapping the security requirements through the various stages of design documents, verify that security safeguards have been implemented correctly and that assurance requirement have been met. This includes confirming that the system has been properly configured, and establishing that the safeguards meet applicable standards, assess the residual risk provided by the risk assessment to determine if it meets an acceptable level of risk.
• Execute security test plan as needed.
• Ensure knowledge transfer to staff.

Must Have Skills:

• 10+ years of experience, within the last 15 years, planning, developing and implementing IT security architecture or IT security designs for complex enterprise-wide applications or information systems.
• Security and Risk Management, Cloud Security, Endpoint Security, Communications and Network Security, Identify and Access Management, Security Operations, Software Development and Applications Security
• 2+ years of experience, within the last 5 years reviewing, analyzing, and/or applying
• A broad range of security technologies, including multiple types of systems and applications architectures, and multiple hardware and software platforms
• The significance and implications of market and technology trends within architecture roadmaps and solution designs. (examples: web services security, incident management, identity management)
• Best practices and standards related to the concept of network zoning and defence in-depth principles.