Security architect securing Thomson Reuters’ legal, tax, compliance, government, and media technology platforms. Leading architecture reviews, cloud security, threat modelling, and AI system risk controls.
About the role
- Senior Product Security Consultant at CENSUS LABS evaluating software security and threats. Responsible for validating security compliance and reporting on risks in complex systems.
Responsibilities
- Review and validate security documentation (e.g., Security Targets, threat models, trust boundaries, asset inventories)
- Assess the completeness, accuracy, and risk coverage of various threat models and risk assessment frameworks (STRIDE, LINDDUN, OWASP, TARA, TAL, etc.)
- Verify security requirement traceability across assets, trust boundaries, and system functions
- Conduct architectural and implementation-level reviews of security controls (e.g., encryption, access control, key management)
- Perform targeted security testing (white-box and black-box) on system APIs, client/mobile apps, backend services, and cloud infrastructure
- Validate implementation of cryptographic controls, key lifecycle procedures, and secure communication protocols
- Deliver comprehensive, standards-aligned technical reports based on evaluation findings
Requirements
- MSc or BSc in Computer Science, Electrical/Software Engineering, Cybersecurity, or a related technical discipline
- 3+ years of experience in product security, software evaluation, or penetration testing
- Proven ability to evaluate threat models, security requirements, and mitigation effectiveness
- Strong technical writing and documentation skills in English
- Excellent analytical skills and attention to detail
Benefits
- Health insurance
- Retirement plans
- Paid time off
- Professional development
- Flexible work arrangements
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Product Security Engineer securing Cohere’s enterprise AI products and foundation models. Reviewing architecture, threat modeling capabilities, and testing vulnerabilities across production systems.
Ingénieur cybersécurité renforçant la posture de sécurité d’EDC, société canadienne de financement du commerce international. Intégration de contrôles, DevSecOps et sécurité de l’IA.
Cybersecurity Engineer strengthening security across EDC’s cloud, applications, and enterprise technology. Supporting secure delivery and AI/ML security for Canada’s export finance corporation.
Cisco security solutions designer supporting pre - sales architecture, demonstrations, and technical presentations. Protecting customer application environments with Cisco security technologies.
Senior Program Manager driving enterprise cybersecurity programs for NBCUniversal, a global media and entertainment company. Coordinating technical delivery, operational change, adoption, risk, and executive reporting.
Data Center Security Officer securing Salute’s critical infrastructure facilities. Conducting patrols, access control, surveillance, incident response, and emergency support.
Head of Information Security leading OpenZeppelin’s enterprise security, privacy, IT, and AI governance programs. Securing open - source infrastructure used across onchain finance and digital assets.
Red Team Security Engineer evaluating Motive's fleet - management platform and cloud environments. Executing adversary simulations, validating detection coverage, and driving remediation of security issues.
Security Specialist securing AXON Networks’ AI - driven ISP orchestration platform, cloud infrastructure and connected networking devices. Managing vulnerability scanning, CVE validation, risk prioritization and remediation.