LP
Threat Modeler / Security Architect
LinkedIn Recruiter Post
Hiring a Threat Modeler / Security Architect with development background for hybrid full - time role in Canada, focusing on application security, threat modeling, and DevSecOps.
About the role
- Head of Infrastructure & Security responsible for cloud infrastructure on GCP and security programs. Leading SaaS development and technical teams at Rebus and Longbow Advantage.
Responsibilities
- End-to-end ownership of our cloud infrastructure on GCP, architecture, reliability, cost, scalability, and operational excellence
- The full cloud-native application environment; containerized and serverless workloads, cloud networking, and the large-scale, multi-tenant data layer (many terabytes of customer data on MongoDB Atlas), including the architecture, performance, and scaling decisions across all of it
- Deployment, release, and maintenance processes, with a focus on uptime and minimizing customer-facing disruption, recognizing that a platform outage during an active warehouse shift is a customer event, not just a ticket
- Leadership of our senior SRE, providing direction and architectural vision to move the platform forward
- Our overall security program, policy, posture, tooling, and incident response, across both businesses
- Achieving and maintaining SOC 2 Type II (and evaluating ISO 27001 as the customer base demands), including driving the program, evidence, and audit relationships
- Customer-facing security: questionnaires, audits, and trust conversations with security-conscious enterprise buyers
- Data protection obligations as a data processor, including PII handling and relevant privacy regimes (e.g. GDPR, CCPA)
- Managing security vendor relationships (MDR/EDR, SIEM, endpoint protection, penetration testing)
- Oversight of the internal IT function, corporate network, on-prem and cloud infrastructure, identity, endpoint management, help desk, and vendor relationships
- Light-touch oversight of a small, hosted WMS environment on GCP, including its reliability and availability commitments
- Mentorship and development of an established IT team, including an IT Manager and IT Administrators who handle the day-to-day
Requirements
- Significant experience owning production cloud infrastructure at scale, ideally on GCP, in a SaaS context
- Demonstrated ownership of a security program at a company handling sensitive customer data, including direct experience driving SOC 2 Type II (or equivalent) to completion
- Strong grasp of operating large, multi-tenant database environments — MongoDB experience is a significant advantage given our stack
- The credibility to lead technical conversations with enterprise customers' security teams
- Experience leading and developing technical staff, including senior individual contributors, and providing direction to an established IT team
- Sound judgment on the reliability/velocity/cost trade-offs that define infrastructure decisions at a growing company
Benefits
- Competitive Salary
- 4-weeks of paid vacation
- 6 paid sick days, 2 paid personal days per year
- Excellent health and dental benefits, eligible as of your first day!
- Group RRSP/401k Matching
- Work from Home
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Network and Perimeter Security IT Specialist I at Enbridge overseeing enterprise security architecture and leading large - scale security initiatives. Collaborating across teams to ensure secure solutions and compliance.
Network & Perimeter Security Specialist II - Firewall at Enbridge enhancing security architectures. Providing technical leadership and driving enterprise standards for firewall and network security.
Lead critical cybersecurity transformation programmes at Hewlett Packard Enterprise, ensuring alignment with enterprise priorities and delivering complex initiatives. Collaborate with IT, cybersecurity, and business leaders.
Staff Engineer responsible for designing scalable security solutions and collaborating with engineering at Twilio. Empowering security partnerships across products and platforms while mitigating risks.
Information Security Lead responsible for managing security programs at Dentons Canada. Overseeing security architecture, operations, incident response, and data protection initiatives.
Cybersecurity expert overseeing information defense, threat detection, and incident response at Investissement Québec. Leading security operations and leveraging AI for effective asset protection.
Lead cybersecurity initiatives and develop strategy for public broadcaster CBC/Radio - Canada. Shape technology road map, collaborate on enterprise architecture, and ensure policy compliance.
Senior Product Security Consultant at CENSUS LABS evaluating software security and threats. Responsible for validating security compliance and reporting on risks in complex systems.
LP
Process Automation Specialist – Cybersecurity Enablement
LinkedIn Recruiter Post
Collaborate with cybersecurity experts to design and implement automated workflows using AI and low - code tools for a top financial client.