Thread Modelling Consultant - Toronto, Canada - Broadmind INC

Broadmind INC

Verified Company

Toronto, Canada

2 days ago

Posted by:

Sophia Lee

beBee Recruiter

Role:
THREAD MODELING CONSULTANT

Location:
Toronto, ON

Hybrid Role

Duration: 12 Months Contract

JOB DESCRIPTION:

Provide security advisory services to technology and business teams.
Perform security assessments for technical solution designs.
Identify threat scenarios and evaluate risk rating based on a thorough review of the solution design by working closely with SMEs.
Track and remediate design flaws identified by the Threat Model process.
Ensure onboarding of appropriate security services by the project; e.g. Automated security scanning, MFA, SIEM onboarding etc.
Manage design security flaws tracking and escalate outstanding risks as required.
Manage security risks for assigned portfolio to ensure that action/mitigation plans are defined and actioned intime.
Support Threat modeling and solution design security process improvements.

KNOWLEDGE/SKILL REQUIREMENTS

A college diploma or university degree is required. Higher accreditation (e.g. Bachelor of Computer Science) is preferred.
At least five (5) years of information security and information risk experience.
Experience in performing Threat modeling is required.
Experience and deep understanding of hybrid cloud technologies is required.
Experience in performing IT security risk assessments is required.
Experience in developing risk mitigation recommendations is required.
Experience and ability to document security architecture views and threat modeling analysis (i.e. attack trees, sequence flow diagrams, Data Flow Diagrams etc.) for various technology designs.
Understanding and experience in Application Security frameworks is required e.g. OWASP.
Understanding of CI/CD pipeline and approaches to automate security testing is an asset
Understanding of API security is an asset.
The following certifications are preferred: CCSP, SABSA, CCSK, CISM, CISSP, or CRISC.
Understanding and experience with TOGAF, OWASP, SAMM, MITRE ATT&CK, BSIMM, NIST, ISO 27K series is an asset.
Experience working in a banking or financial services environment is an asset.