Senior Security/Threat Analyst
Job Description
We are seeking a senior security/threat analyst with expertise in threat modeling who has the ability to create security pattern templates. 6-month contract.
Main Activities:
• Develop security patterns templates.
• Develop Security Patterns for application and infrastructure.
• Review the developed security pattern with stakeholders and get required approvals.
• Perform security assessments for technical solution designs.
• Identify threat scenarios and evaluate risk rating based on a thorough review of the solution design by working closely with SMEs.
• Support Threat modeling and solution design security process improvements.
Knowledge/Skill Requirements:
• A college diploma or university degree is required. Higher accreditation (e.g. Bachelor of Computer Science) is preferred.
• At least five (5) years of information security and information risk experience.
• Experience in performing Threat modeling is required.
• Experience in supporting application and infrastructure security programs is required.
• Experience and deep understanding of hybrid cloud technologies is required.
• Experience in performing IT security risk assessments is required.
• Experience in developing risk mitigation recommendations is required.
• Experience and ability to document security architecture views and threat modeling analysis (i.e. attack trees, sequence flow diagrams, Data Flow Diagrams etc.) for various technology designs.
• Understanding and experience in Application Security frameworks is required e.g. OWASP.
• Understanding of CI/CD pipeline and approaches to automate security testing is an asset
• Understanding of API security is an asset.
• Having coding experience is an asset.
• The following certifications are preferred: CCSP, SABSA, CCSK, CISM, CISSP, or CRISC.
• Understanding and experience with TOGAF, OWASP, SAMM, MITRE ATT&CK, BSIMM, NIST, ISO 27K series is an asset.
• Experience working in a banking or financial services environment is an asset.
Main Activities:
• Develop security patterns templates.
• Develop Security Patterns for application and infrastructure.
• Review the developed security pattern with stakeholders and get required approvals.
• Perform security assessments for technical solution designs.
• Identify threat scenarios and evaluate risk rating based on a thorough review of the solution design by working closely with SMEs.
• Support Threat modeling and solution design security process improvements.
Knowledge/Skill Requirements:
• A college diploma or university degree is required. Higher accreditation (e.g. Bachelor of Computer Science) is preferred.
• At least five (5) years of information security and information risk experience.
• Experience in performing Threat modeling is required.
• Experience in supporting application and infrastructure security programs is required.
• Experience and deep understanding of hybrid cloud technologies is required.
• Experience in performing IT security risk assessments is required.
• Experience in developing risk mitigation recommendations is required.
• Experience and ability to document security architecture views and threat modeling analysis (i.e. attack trees, sequence flow diagrams, Data Flow Diagrams etc.) for various technology designs.
• Understanding and experience in Application Security frameworks is required e.g. OWASP.
• Understanding of CI/CD pipeline and approaches to automate security testing is an asset
• Understanding of API security is an asset.
• Having coding experience is an asset.
• The following certifications are preferred: CCSP, SABSA, CCSK, CISM, CISSP, or CRISC.
• Understanding and experience with TOGAF, OWASP, SAMM, MITRE ATT&CK, BSIMM, NIST, ISO 27K series is an asset.
• Experience working in a banking or financial services environment is an asset.