Thread Modeling Consultant

3 weeks ago


Toronto, Canada Aforce solutions Full time

**Role: THREAD MODELING CONSULTANT**

**Location: Toronto, ON**

**Hybrid Role -à 3 Days Onsite**

**Duration: 12 Months Contract**

**JOB DESCRIPTION**:

- Provide security advisory services to technology and business teams.
- Perform security assessments for technical solution designs.
- Identify threat scenarios and evaluate risk rating based on a thorough review of the solution design by working closely with SMEs.
- Track and remediate design flaws identified by the Threat Model process.
- Ensure onboarding of appropriate security services by the project; e.g. Automated security scanning, MFA, SIEM onboarding etc.
- Manage design security flaws tracking and escalate outstanding risks as required.
- Manage security risks for assigned portfolio to ensure that action/mitigation plans are defined and actioned in-time.
- Support Threat modeling and solution design security process improvements.

**KNOWLEDGE/SKILL REQUIREMENTS**
- A college diploma or university degree is required. Higher accreditation (e.g. Bachelor of Computer Science) is preferred.
- At least five (5) years of information security and information risk experience.
- Experience in performing Threat modeling is required.
- Experience and deep understanding of hybrid cloud technologies is required.
- Experience in performing IT security risk assessments is required.
- Experience in developing risk mitigation recommendations is required.
- Experience and ability to document security architecture views and threat modeling analysis (i.e. attack trees, sequence flow diagrams, Data Flow Diagrams etc.) for various technology designs.
- Understanding and experience in Application Security frameworks is required e.g. OWASP.
- Understanding of CI/CD pipeline and approaches to automate security testing is an asset
- Understanding of API security is an asset.
- The following certifications are preferred: CCSP, SABSA, CCSK, CISM, CISSP, or CRISC.
- Understanding and experience with TOGAF, OWASP, SAMM, MITRE ATT&CK, BSIMM, NIST, ISO 27K series is an asset.
- Experience working in a banking or financial services environment is an asset.

**ACCOUNTABILITY**
- The Senior Threat Modeling Analyst works under the direct management of the Manager, Threat Modeling.
- The incumbent is expected to provide technical leadership and guidance to colleagues within the department.
- The incumbent is accountable for formulating, developing and drafting security guidelines, and other relevant documents while liaising with the concerned stakeholders to ensure that the Information Security concerns are amicably addressed and their buy-in is obtained.
- The incumbent is accountable for the managing of security risk throughout the lifecycle, right from identifying the security risk to explaining it to the relevant stakeholders and getting their buy-in in remediating to tracking the closure of the weaknesses/risks to the organization.
- The incumbent is accountable for ensuring regulatory and Corporate Cyber Security policy compliance for initiatives, projects, or designs that they assess.
- The incumbent is responsible for triggering security services onboarding for the respective security teams e.g. SIEM onboarding by the Cyber Defense center, or SSO/MFA by the IAM team.
- The incumbent is responsible for tracking, monitoring, and reporting on status of design flaw findings and ensuring accurate data is maintained in the design flaw database.
- This position is required to work with internal and external audit and compliance related teams and partners on an as needed basis.
- The incumbent is accountable for ensuring that the information security controls identified and agreed for implementation have been properly implemented/embedded within the Information technology systems and operations. Non-implementation may result in the organization being exposed to cyber threats.

**Job Type**: Fixed term contract

**Salary**: $70.00-$80.00 per hour

Schedule:

- 8 hour shift



  • Toronto, Canada CIBC Full time

    We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients. At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are...


  • Toronto, ON, Canada Operis Group plc. Full time

    We are seeking a Senior Consultant to join our team in Toronto. This role is aimed at people who have some experience in financial modelling and are looking to work in a dynamic and world-class financial modelling team for the next stage of their career. Upon joining, you will begin our bespoke programme of expert training, including a range of formal and...


  • Toronto, Canada Aarorn Technologies Inc. Full time

    Aaron Technologies is looking for a Specialized IT Consultant to join the team of one of our clients. Applicants must fulfil the following requirements. **Responsibilities** **General Skills** - Experience in programming and analysis at the specified experience level - Ability to collaborate with IT Professionals throughout the Software Development Life...


  • Toronto, ON, Canada Operis Group plc. Full time

    We are seeking a Senior Consultant to join our team in Toronto. This role is aimed at people who have some experience in financial modelling and are looking to work in a dynamic and world-class financial modelling team for the next stage of their career. Upon joining, you will begin our bespoke programme of expert training, including a range of formal and...


  • Old Toronto, Canada Operis Group plc. Full time

    We are seeking a Senior Consultant to join our team in Toronto. This role is aimed at people who have some experience in financial modelling and are looking to work in a dynamic and world-class financial modelling team for the next stage of their career. Upon joining, you will begin our bespoke programme of expert training, including a range of formal and...


  • Toronto, Canada Cleo Consulting Full time

    **Assignment: RQ05977 - Specialized IT Consultant - Intermediate** **Start Date: 2023-12-04** **End Date: 2024-03-29** **Office Location: 777 Bay St, Suite 423** **Organization: Community Services Cluster** **Ministry: Ministry of Education** **# Business Days: 140.00** **Title: Specialized IT Consultant** **Hybrid: 3 days on site 2...


  • Toronto, Canada Pariveda Solutions Full time

    Overview: Pariveda is growing in Toronto and looking to add an experienced Manager to their team of leaders. We are not your average technology consulting firm. Change is the new normal; we face an increasingly fast-paced, ambiguous, and complex world. Our vision is to be a different kind of consultancy that can be the model for all organizations which seek...


  • Toronto, Canada University of Toronto Full time

    **Date Posted**:05/31/2023 **Req ID**: 31127 **Faculty/Division**: Faculty of Arts & Science **Department**: Ctr for Industrial Relations **Campus**:St. George (Downtown Toronto) **Description**: **Course Number and Title**: IRE 1700H-F HR Consulting Models, Practices, and Applications **Course Description**: The course has two objectives: (1) to introduce...


  • Toronto, ON, Canada RFA group Full time

    Senior Consultant, Model Risk and Quantitative Analytics (9 month contract) Monday, March 25, 2024 RFA’s residential mortgage lending business is operated by RFA Mortgage Corporation and RFA Bank of Canada, a federally regulated Schedule I Bank. RFA Mortgage Corporation specializes in Prime lending (Insured, Insurable, Uninsurable), while RFA Bank of...


  • Toronto, Canada Royal Bank of Canada Full time

    **Job Summary** The Associate Director, Model Development and Implementation is responsible for the conceptual design, development, implementation, documentation and maintenance of models used to measure market risk within the bank's risk management frameworks. This includes ensuring that the model's underlying methodologies are appropriate and that they...

  • Energy Modeller

    1 month ago


    Toronto, ON, Canada Outpost Recruitment Full time

    Energy Modeller / HVAC Engineer (all levels) – Energy | Building Services | Consultancy ~ Leading sustainable energy consultant focused on residential and ICI buildings projects across Canada & the US Our Client, an engineering firm based in Vancouver and Toronto, providing energy and sustainable design services for clients across Canada and the USA are...


  • Toronto, Canada Financial Services Regulatory Authority of Ontario (FSRA) Full time

    FSRA is guided by our vision of financial safety, fairness and choice for Ontarians. And we achieve this by public service through dynamic, principles-based and outcomes-focused regulation. FSRA is committed to attracting and retaining exceptional people who bring energy, expertise, and experience. This includes providing a comprehensive total rewards...


  • Toronto, Canada Tata Consultancy Services Full time

    **About TCS** TCS is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to create a workforce that reflects the societies we operate in. Our continued commitment to Culture and Diversity and is reflected in our people stories across our workforce...


  • Toronto, Canada Mpi Inc. Full time

    Senior Transportation Planner / Modeller - Toronto / GTA Duties and Responsibilities: As part of a transportation planning team, the successful applicant will: Take a lead role in the analysis of travel forecasts and traffic modelling for a broad variety of transportation planning projects including transportation master plans, major new corridor...

  • 3D Modeler

    6 days ago


    Toronto, Canada VR Vision Inc. Full time

    Work Term: Permanent - Work Language: English - Hours: 40 hours per week - Education: College/CEGEP - Experience: 3 years to less than 5 years - Computer graphics - Modeling, virtual environments and simulation - or equivalent experience **Work site environment**: - Non-smoking - Air conditioned **Work setting**: - Game studio **Tasks**: - Adapt existing...


  • Toronto, ON, Canada JobContax Full time

    Our client is a multidisciplinary engineering and environmental consultancy service. You will have the opportunity to deliver and lead on a wide variety of projects including large capital works design, water quality, and network optimization. You will help grow/develop the water network modelling division. A bachelor’s degree or higher in civil...


  • Toronto, Canada IBI Group Full time

    Transportation Planner (Travel Demand Modelling) Full-time Company Description About Arcadis: Arcadis is the world's leading company delivering sustainable design, engineering, and consultancy solutions for natural and built assets. We are more than 36,000 people, in over 70 countries, dedicated to improving quality of life. Everyone has an...

  • Fp&a Consultant

    1 month ago


    Toronto, Canada Limelight Software Full time

    Limelight is looking for a **FP&A Consultant** with experience in planning, forecasting, and reporting to join our team! This a great opportunity to combine your finance and technical knowledge. Our cloud financial planning, forecasting & reporting platform automates manual spreadsheet processes so businesses can spend more time on data insights. As we...

  • Fp&a Consultant

    1 month ago


    Toronto, Canada Limelight Software Full time

    Limelight is looking for an **FP&A Consultant **to join out team! This a great opportunity to combine your finance and technical knowledge. Our cloud financial planning, forecasting & reporting platform automates manual spreadsheet processes so businesses can spend more time on data insights. As we continue to scale, it's important to us to nurture the...


  • TORONTO, Canada Royal Bank of Canada Full time

    Job SummaryThe Associate Director, Model Development and Implementation is responsible for the conceptual design, development, implementation, documentation and maintenance of models used to measure market risk within the bank's risk management frameworks. This includes ensuring that the model's underlying methodologies are appropriate and that they are...