Senior Application Security Architect

Our client is a leader in the North American market with multiple office locations in Canada, USA and Mexico. They are looking for a talented and motivated Application Security Architect to join our IT and Cyber Security Team and play a critical part in engineering top-notch products and services in a unique industry at our rapidly growing organization.

Location is Mississauga near Square One - hybrid role; mix of home and in-office work in Mississauga (Square One) or downtown Toronto (Bay / Front) office locations to accommodate candidates from anywhere in GTA.
Perm FTE role, salary + bonus + benefits

You are:
Motivated to providing oversight on business for reliable, scalable, and secure applications designed to create exceptional customer experiences, increased productivity, and deliver tangible business results.
Interested in playing a key role in maintaining and implementing systems that provide protection of company assets, technology, systems, and data
Excited about providing technical expertise in a fast-paced growing company related to security initiatives in the areas of operations, development, and deployment
As the Application Security Architect (Lead Application Security Analyst), you will work in a highly technical role in deploying security related initiatives in enterprise systems. You will investigate and troubleshoot all phases of application and cloud security issues and strategies and apply Cloud software engineering principles and practices across a range of systems/technologies and situations.

A Day in the Life
A product security champion by driving Security Architecture and Design/implementation/optimization for web and API based cloud products
Involved with strategic and tactical items to align the use of cloud technologies to application architectures. The candidate will work closely with engineering, infrastructure, networking, applications, and cloud operations teams to ensure security is built into every product we implement.
Aligned with various internal stakeholders to understand the business needs from viewpoint of cloud infrastructure
Regularly assessing existing cloud infrastructure to identify risks or opportunities for improvement
Positioned to monitor Integration of cloud services with on premise technologies
Engaged to offer guidance in infrastructure, SDLC, Networking and will participate in assessing existing platforms to build a highly resilient and secure enterprise environment
Dedicated to performing product security assessments including architecture review, threat modeling, code review, pen-testing and general security consulting to proactively build security controls.
Required to assist and enable applications teams to follow secure development practices, while also empowering them to build security within their product area.
Responsible for identifying security risks and ensuring mitigation across all our applications which includes private and public cloud.
Engaged in the initial requirements definition (including analysis of threats and risks and alignment with security, Engineering, IT and Architecture standards.) and validation
Consulted with development and operations teams to provide guidance and recommend secure design patterns and secure Development Lifecycle methodologies
Assigned security assessments on new and existing products and cloud-based services to identify security risks and establish baseline security requirements

Requirements
Bachelor’s Degree in Computer Science, Engineering, or a related technical discipline
10+ years of full-time security engineering or information security experience, including software development.
Proven experience performing security design reviews for complex applications, including distributed systems, APIs, and services deployed to cloud and on-premises environments.
Must have at least one security certification, CISA or CISSP or Certified Ethical Hacker (CEH) Certification., combined with 1 -2 technical cloud certifications such as AWS, Azure, CCSP
Relevant development/scripting/automation experience in at least one of: Python, Java, JavaScript
Familiar with security frameworks such as: ISO27001, NIST 800-53, NIST-CSF, ITGC, Top-18 Critical Controls etc.
Experience defining appropriate security controls and countermeasures
Facilitate "table-top"/red-team/scenario analysis exercises in conjunction with other SME's; and plan the resolution of any identified vulnerabilities/issues
A clear and effective communicator
Conceptual, functional, and decision-making skills.
Excellent judgement in prioritizing security efforts to mitigate the appropriate risks.

Good to have:
Deep understanding of browser security and modern JavaScript frameworks and common application and network protocols, cryptographic technologies, and authentication and authorization protocols
Knowledge and implementation experience across multiple disciplines, including web application, network, and operating systems security
Experience supporting cloud operational models, including SaaS security architecture, microservices, containers, and Kubernetes
Knowledge of compliance requirements for industry-standard certifications like PCI DSS, SOC2, HIPAA

What’s in it for You

A culture of innovation, empowerment, decision-making, and accountability
Work at a technology forward and growing company
Comprehensive health and welfare benefits that serve the needs of you and your family and foster a culture of wellness
Additional benefits and amenities, including paid time-off programs (vacation, sick leave, and holidays)
Hybrid work environment
Opportunity to work with leading technology - in-house development, 3rd party SW, Analytics, eDW, Telemetrics, ML/AI, RPA, etc.
Opportunity to grow professionally/advance career.

Job Type: Full-time

Salary: $130,000.00-$150,000.00 per year

Benefits:

Dental care
Employee assistance program
Extended health care
Life insurance
Paid time off
RRSP match
Vision care

Flexible Language Requirement:

French not required

Schedule:

Monday to Friday
On call

Ability to commute/relocate:

Mississauga, ON: reliably commute or plan to relocate before starting work (required)

Work Location: Hybrid remote in Mississauga, ON

Hire Level Consulting

New Jobs

Senior Application Security Architect

IT Solutions Architect