LP
Threat Modeler / Security Architect
LinkedIn Recruiter Post
Hiring a Threat Modeler / Security Architect with development background for hybrid full - time role in Canada, focusing on application security, threat modeling, and DevSecOps.
About the role
- Security Software Engineer on Evisort Security team at Workday. Designing security products and managing vulnerability lifecycles through the software development process.
Responsibilities
- Design and build security products that empower the entire Workday AI organization
- Integrate security at every stage of the software development lifecycle (SDLC) and deployment pipelines
- Partner with engineering and platform teams to implement security-by-design and shift-left security practices
- Patch vulnerable dependencies
- Manage the end-to-end vulnerability management lifecycle, including discovery, assessment, prioritization, remediation, and reporting.
Requirements
- 5+ years of experience in software engineering focused on security or building security applications
- 3+ years experience with Python and Python web development framework (FastAPI, Flask, Or Django)
- 3+ years experience with cloud platforms (e.g., AWS, GCP) and containerization technologies (e.g., Docker, Kubernetes)
- Familiarity with AI security concepts
- Experience with building AI
- Proficiency in security tools (e.g., Snyk, Semgrep, Contrast, Wiz)
- Familiarity with infrastructure as code (IaC) tools (e.g., Terraform, Cloudformation, Ansible)
- Full-stack generalist
- Proficient in database systems (Postgres, DynamoDB, Redis, Pinecone)
- Strong understanding and practical application of modern software development practices, working with DevOps, automated testing, and observability
- Understanding of network and application security threats, attack techniques, and mitigation options
- Experience with incident response
- BS or MS degree in Computer Science, Engineering, or equivalent job experience.
Benefits
- Workday Bonus Plan
- Role-specific commission/bonus
- Annual refresh stock grants
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Network and Perimeter Security IT Specialist I at Enbridge overseeing enterprise security architecture and leading large - scale security initiatives. Collaborating across teams to ensure secure solutions and compliance.
Network & Perimeter Security Specialist II - Firewall at Enbridge enhancing security architectures. Providing technical leadership and driving enterprise standards for firewall and network security.
Lead critical cybersecurity transformation programmes at Hewlett Packard Enterprise, ensuring alignment with enterprise priorities and delivering complex initiatives. Collaborate with IT, cybersecurity, and business leaders.
Staff Engineer responsible for designing scalable security solutions and collaborating with engineering at Twilio. Empowering security partnerships across products and platforms while mitigating risks.
Head of Infrastructure & Security responsible for cloud infrastructure on GCP and security programs. Leading SaaS development and technical teams at Rebus and Longbow Advantage.
Information Security Lead responsible for managing security programs at Dentons Canada. Overseeing security architecture, operations, incident response, and data protection initiatives.
Cybersecurity expert overseeing information defense, threat detection, and incident response at Investissement Québec. Leading security operations and leveraging AI for effective asset protection.
Lead cybersecurity initiatives and develop strategy for public broadcaster CBC/Radio - Canada. Shape technology road map, collaborate on enterprise architecture, and ensure policy compliance.
Senior Product Security Consultant at CENSUS LABS evaluating software security and threats. Responsible for validating security compliance and reporting on risks in complex systems.