Senior Threat Modeling Analyst

1 week ago


Toronto, Canada EQ Bank | Equitable Bank Full time
Join a Challenger

Being a traditional bank just isn’t our thing. We are big believers in innovating the banking experience because we believe Canadians deserve better options, and we challenge ourselves and our teams to creatively transform what’s possible in banking. Our team is made up of inquisitive and agile minds that find smarter ways of doing things. If you’re not afraid of taking on big challenges and redefining the future, you belong with us. You’ll get to work with people who will encourage you to reach new heights. We like to keep things fun, ask questions and learn together.

We are a big (and growing) family. Overall we serve more than 670,000 people across Canada through Equitable Bank, Canada's Challenger Bank™, and have been around for more than 50 years. Equitable Bank's wholly-owned subsidiary, Concentra Bank, supports credit unions across Canada that serve more than six million members. Together we have over $125 billion in combined assets under management and administration, with a clear mandate to drive change in Canadian banking to enrich people's lives. Our customers have named our EQ Bank digital platform (eqbank.ca) one of the top banks in Canada on the Forbes World's Best Banks list since 2021.

The Work:

The Senior Threat Modeling Analyst will work closely with the technology teams and line of business teams to develop secure technology solution designs. The Senior Threat Modeling Analyst will lead the identification of Cyber security risks to the bank’s technologies and ensure sufficient controls are in place to mitigate these risks which could otherwise result in Cyber Security attacks, while enabling the business to grow the bank and serve our customers efficiently and securely.

Job Duties:

  • Provide security advisory services to technology and business teams
  • Perform security assessments for technical solution designs
  • Identify threat scenarios and evaluate risk rating based on a thorough review of the solution design by working closely with SMEs
  • Track and remediate design flaws identified by the Threat Model process
  • Ensure onboarding of appropriate security services by the project; e.g. Automated security scanning, MFA, SIEM onboarding etc
  • Manage design security flaws tracking and escalate outstanding risks as required
  • Manage security risks for assigned portfolio to ensure that action/mitigation plans are defined and actioned in-time
  • Support Threat modeling and solution design security process improvements

Let's Talk About You

  • A college diploma or university degree is required. Higher accreditation (e.g. Bachelor of Computer Science) is preferred
  • At least five (5) years of information security and information risk experience.
  • Experience in performing Threat modeling is required
  • Experience in supporting application security programs is required
  • Experience and deep understanding of hybrid cloud technologies is required
  • Experience in performing IT security risk assessments is required
  • Experience in developing risk mitigation recommendations is required.
  • Experience and ability to document security architecture views and threat modeling analysis (i.e. attack trees, sequence flow diagrams, Data Flow Diagrams etc.) for various technology designs
  • Understanding and experience in Application Security frameworks is required e.g. OWASP
  • Understanding of CI/CD pipeline and approaches to automate security testing is an asset
  • Understanding of API security is an asset
  • Having coding experience is an asset
  • The following certifications are preferred: CCSP, SABSA, CCSK, CISM, CISSP, or CRISC
  • Understanding and experience with TOGAF, OWASP, SAMM, MITRE ATT&CK, BSIMM, NIST, ISO 27K series is an asset
  • Experience working in a banking or financial services environment is an asset

What we offer [For full-time permanent roles]

💰 Competitive discretionary bonus

✨ Market leading RRSP match program

🩺 Medical, dental, vision, life, and disability benefits

📝 Employee Share Purchase Plan

👶🏽 Maternity/Parental top-up while you care for your little one

🏝 Generous vacation policy and personal days

🖥 Virtual events to connect with your fellow colleagues

🎓 Annual professional development allowance and a comprehensive Career Development program

💛 A fulfilling opportunity to join one of the top FinTechs and help create a new kind of banking experience

The incumbent will be working hybrid and in office time will be spent working from Equitable Bank’s additional office space located at 351 King Street East, Toronto, ON.

Equitable Bank is deeply committed to inclusion. Our organization is stronger and our employees thrive when we honour and celebrate everyone’s diverse experiences and perspectives. In tandem with that commitment, we support and encourage our staff to grow not just in their career path, but personally as well.

We commit to providing a barrier-free recruitment process and work environment for all applicants. Please let us know of any accommodations needed so that you can bring your best self to the application process and beyond. All candidates considered for hire must successfully pass a criminal background check and credit check to qualify for hire. While we appreciate your interest in applying, an Equitable recruiter will only contact leading candidates whose skills and qualifications closely match the requirements of the position.

We can’t wait to get to know you

  • Toronto, ON, Canada EQ Bank | Equitable Bank Full time

    Join a Challenger Being a traditional bank just isn’t our thing. We are big believers in innovating the banking experience because we believe Canadians deserve better options, and we challenge ourselves and our teams to creatively transform what’s possible in banking. Our team is made up of inquisitive and agile minds that find smarter ways of doing...


  • Toronto, ON, Canada EQ Bank | Equitable Bank Full time

    Join a Challenger Being a traditional bank just isn’t our thing. We are big believers in innovating the banking experience because we believe Canadians deserve better options, and we challenge ourselves and our teams to creatively transform what’s possible in banking. Our team is made up of inquisitive and agile minds that find smarter ways of doing...

  • Senior Threat Analyst

    1 month ago


    Toronto, Ontario, Canada Scotiabank Full time

    Job DescriptionRequisition ID: 208577We are seeking a skilled Senior Threat Analyst to contribute to the overall success of our Corporate Security Physical Threat Intelligence Unit and Legal & Corporate Affairs.The ideal candidate will have a strong understanding of Open-Source Intelligence (OSINT) tools and methodology, with the ability to analyze and...


  • Toronto, Canada Toronto District School Board Full time

    **Permanent, full-time position - Toronto, ON** Reporting to the Senior Analyst, IT Security Threat Management, the Analyst I, Cyber Threat and Vulnerability Management, will assist the Senior Analyst to ensure that the Cyber Threat and Vulnerability Management functions are managed and carried out. The Analyst I, Cyber Threat and Vulnerability...


  • Toronto, ON, Canada EQ Bank | Equitable Bank Full time

    Being a traditional bank just isn’t our thing. We are big believers in innovating the banking experience because we believe Canadians deserve better options, and we challenge ourselves and our teams to creatively transform what’s possible in banking. Our team is made up of inquisitive and agile minds that find smarter ways of doing things. Overall we...


  • Toronto, ON, Canada EQ Bank | Equitable Bank Full time

    Being a traditional bank just isn’t our thing. We are big believers in innovating the banking experience because we believe Canadians deserve better options, and we challenge ourselves and our teams to creatively transform what’s possible in banking. Our team is made up of inquisitive and agile minds that find smarter ways of doing things. Overall we...

  • Analyst, Risk

    1 month ago


    Old Toronto, Canada nugget.ai Full time

    Location: Toronto (hybrid -> 3 times per week) Employment Type: Contract About the Role: The Threat Modeling Analyst is responsible for identifying threats and vulnerabilities across company systems and communicating the issues with the appropriate team – infrastructure, IT, risk, DLP, or any affected members. Responsibilities: Work cross-functionally...


  • Old Toronto, Canada Equitable Group Full time

    p>Join a ChallengerBeing a traditional bank just isn’t our thing. We are big believers in innovating the banking experience because we believe Canadians deserve better options, and we challenge ourselves and our teams to creatively transform what’s possible in banking. Our team is made up of inquisitive and agile minds that find smarter ways of doing...


  • Toronto, Canada Amex Full time

    **You Lead the Way. We’ve Got Your Back.** With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create...


  • Toronto, Canada Mastercard Full time

    Our Purpose We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our...


  • Toronto, Ontario, Canada Aviso Wealth Full time

    About the RoleAs a leading wealth management and investment services provider, Aviso Wealth is seeking an experienced Cybersecurity Threat Analyst to join our growing cybersecurity team. Reporting to the Director of Cyber Security, you will be responsible for identifying, mitigating, and resolving security threats across our IT and Cloud infrastructure while...


  • Toronto, Canada CIBC Full time

    We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients. At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are...


  • Toronto, Canada CIBC Full time

    We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients. At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are...


  • Old Toronto, Canada Equitable Group Full time

    Transforming Banking through Cybersecurity ExpertiseAs a pioneering bank, Equitable Group is pushing the boundaries of traditional banking. With over 670,000 customers across Canada and assets under management exceeding $125 billion, we're committed to driving change in Canadian banking to enrich people's lives.About the Role:We're seeking an exceptional...


  • Toronto, Canada Intact Financial Corporation Full time

    JOB DESCRIPTION Our employees are at the heart of what we do best: helping people, businesses and society prosper in good times and be resilient in bad times. When you join our team, you’re bringing this purpose to life alongside a passionate community of experts. Feel empowered to learn and grow while being valued for who you are– here, diversity is...


  • Toronto, Canada Aforce solutions Full time

    **Role: THREAD MODELING CONSULTANT** **Location: Toronto, ON** **Hybrid Role -à 3 Days Onsite** **Duration: 12 Months Contract** **JOB DESCRIPTION**: - Provide security advisory services to technology and business teams. - Perform security assessments for technical solution designs. - Identify threat scenarios and evaluate risk rating based on a...


  • Toronto, Canada Norton Rose Fulbright Full time

    Role The senior security threat specialist is a position in the global information security function at Norton Rose Fulbright. The role is responsible for proactively managing the threat landscape at the firm. Primary responsibilities include vulnerability management and threat management (including threat hunting). Other tasks include threat...


  • Toronto, Canada Tundra Technical Solutions Full time

    We are seeking a highly skilled Cyber Security Threat Analyst to join our team at Tundra Technical Solutions. As a key member of our Cyber Security Services team, you will play a critical role in ensuring the security and integrity of our clients' networks and systems.About the RoleThis is a 10-month contract position with the possibility of extension,...


  • Toronto, Ontario, Canada The Toronto-Dominion Bank (Canada) Full time

    Job DescriptionWe are seeking a highly skilled Cyber Threat Intelligence Analyst to join our team in analyzing and identifying emerging threats to TD's business. As a key member of our threat intelligence team, you will be responsible for proactively monitoring the internal and external landscape for relevant events, risks, and...


  • Toronto, Ontario, Canada Scotiabank Full time

    About ScotiabankScotiabank is a leading bank in the Americas, guided by our purpose: 'for every future'. We help our customers, their families, and their communities achieve success through a broad range of advice, products, and services.Job OverviewWe are seeking a Strategic Threat Analyst to join our Corporate Security team. As a key member of our Physical...