LP
Threat Modeler / Security Architect
LinkedIn Recruiter Post
Hiring a Threat Modeler / Security Architect with development background for hybrid full - time role in Canada, focusing on application security, threat modeling, and DevSecOps.
About the role
- Seeking Application Security Engineer for Clio, a leading legal AI technology firm. Focus on security vulnerabilities and building partnerships with development teams.
Responsibilities
- Write, review, debug, and implement tools to help developers avoid security flaws;
- Build partnerships with development teams and advise on security best practices;
- Contribute to collective developer education by driving security awareness and knowledge amongst the product organization;
- Provide detailed guidance and support to teams in vulnerability remediation, and develop frameworks, guidelines, and systematic fixes for recurring vulnerabilities;
- Resolve issues, navigate ambiguity, and maintain positive working relationships with researchers in our Bug Bounty program;
- Identify and implement tools for automated application scanning, static analysis and related tools;
- Perform penetration testing, and offensive campaigns against internal assets;
- Perform reactive incident response and forensics when a security event occurs;
- Perform proactive research to detect new attack vectors;
- Elevate and educate our security culture within Clio, contributing to our cultural values;
Requirements
- Experience in Application or Product Security, with a focus on offensive security and penetration testing
- Hands-on expertise identifying and exploiting complex vulnerabilities (e.g., SSRF, Deserialization, logic bypasses)
- Proven ability to lead and conduct formal threat modeling sessions
- Strong proficiency in at least one major programming language (e.g., Python, .NET, JavaScript)
- Experience securing applications in modern cloud environments (AWS, Azure, or GCP)
- Expertise with common application security tools and platforms (e.g., Burp Suite, SAST, SCA)
- Experience with log aggregation and SIEM technologies
- Ability to identify malicious behaviour and emerging threats via log analysis
- Demonstrate a keen interest in improving your craft by using AI
- Security certifications such as OSCP or OSWE is a serious bonus
- Active participation in the security community (e.g., presenting at conferences, contributing to open-source tools)
- Experience with Ruby on Rails, Puppet, Kubernetes, Terraform, ELK (Elastic, Logstash and Kibana)
- Strong AWS security experience on EC2 and managed services
- Infrastructure security (WAF, ACLs, authentication, device hardening)
Benefits
- Competitive, equitable salary with top-tier health benefits, dental, and vision insurance
- Hybrid work environment, with expectation for local Clions (Vancouver, Calgary, Toronto, Dublin and Sydney) to be in office min. twice per week.
- Flexible time off policy, with an encouraged 20 days off per year.
- $2000 annual counseling benefit
- RRSP matching and RESP contribution
- Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Network & Perimeter Security Specialist II - Firewall at Enbridge enhancing security architectures. Providing technical leadership and driving enterprise standards for firewall and network security.
Network and Perimeter Security IT Specialist I at Enbridge overseeing enterprise security architecture and leading large - scale security initiatives. Collaborating across teams to ensure secure solutions and compliance.
Lead critical cybersecurity transformation programmes at Hewlett Packard Enterprise, ensuring alignment with enterprise priorities and delivering complex initiatives. Collaborate with IT, cybersecurity, and business leaders.
Staff Engineer responsible for designing scalable security solutions and collaborating with engineering at Twilio. Empowering security partnerships across products and platforms while mitigating risks.
Head of Infrastructure & Security responsible for cloud infrastructure on GCP and security programs. Leading SaaS development and technical teams at Rebus and Longbow Advantage.
Information Security Lead responsible for managing security programs at Dentons Canada. Overseeing security architecture, operations, incident response, and data protection initiatives.
Cybersecurity expert overseeing information defense, threat detection, and incident response at Investissement Québec. Leading security operations and leveraging AI for effective asset protection.
Lead cybersecurity initiatives and develop strategy for public broadcaster CBC/Radio - Canada. Shape technology road map, collaborate on enterprise architecture, and ensure policy compliance.
Senior Product Security Consultant at CENSUS LABS evaluating software security and threats. Responsible for validating security compliance and reporting on risks in complex systems.