Product Security Specialist

2 weeks ago

Toronto, Ontario, Canada Thomson Reuters Full time

About the Role

As a Product Security Engineer, you will be focused on developing S-SDLC activities and controls that ensure our applications are designed and implemented with the highest level of security standards.

  • Secure design, architecture, and implementation covering all steps of our Secure Software Development Life Cycle (SDLC).
  • Drive security projects, including security reviews, tool development, and creation of new security practices.
  • Participate in Threat modeling sessions to guide secure design discussions and participate in risk assessments.
  • Create security guidance and documentation, including compliance as code.
  • Work closely with our Security Awareness team to provide first-class application security interactive and targeted training to our engineers.
  • Set a high standard for engineering quality and execution that leads to high-quality product security artifacts to secure our products' SDLCs.

About You

You're a fit for the role of Product Security Engineer if you have:

  • Engineer Empathy: You have a strong understanding of how developers work and are able to present security initiatives to developers in a way that leverages that understanding.
  • Knowledgeable in Application Security: You are passionate about application security, including secure coding, supply chain security, and SecDevOps.
  • Drive to continually improve: You are able to analyze current processes and procedures and determine ways to improve and increase efficiency.

Technical Skills:

  • Experience collaborating with product development teams directly to instill security.
  • Experience building and reviewing threat models and recommending secure design patterns.
  • Deep technical understanding and experience assessing common security vulnerabilities and risks, as well as advising on countermeasures and compensating controls.
  • You have experience with SAST, DAST, and SCA scans and the analysis of the identified security findings/results.
  • Experience with DevSecOps in a cloud-native context and integrating security in CI/CD pipelines (GitHub Actions preferred, but experience with other CIs is good, e.g., GitLab CI).
  • Experience with automation in general, consuming APIs, with plus when the automation is related to security tooling, proficiency in Python or Golang preferred.
  • Knowledge of one or more security frameworks, OWASP's ASVS, CIS Benchmarks, NIST CSF.
  • Ability to manage and prioritize between multiple tasks and projects.

Additional Skills:

  • Strong Communication Skills (verbal, written, ability to influence others).
  • Learning Mindset (emerging technical trends, always learning).
  • Agile Methodology experience.
  • Experience with Linux systems and containers.
  • Experience with AWS or Azure.
  • Infrastructure as code with Terraform.
  • Experience with Security tools (Web attack proxies, SAST, DAST, SCA).

What's in it For You?

  • Hybrid Work Model: We've adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected.
  • Wellbeing: Comprehensive benefit plans; flexible and supportive benefits for work-life balance: flexible vacation, two company-wide Mental Health Days Off; work from another location for up to a total of 8 weeks in a year, 4 of those weeks can be out of the country and the remaining in the country, Headspace app subscription; retirement, savings, tuition reimbursement, and employee incentive programs; resources for mental, physical, and financial wellbeing.
  • Culture: Globally recognized and award-winning reputation for equality, diversity, and inclusion, flexibility, work-life balance, and more.
  • Learning & Development: LinkedIn Learning access; internal Talent Marketplace with opportunities to work on projects cross-company; Ten Thousand Coffees Thomson Reuters café networking.
  • Social Impact: Ten employee-driven Business Resource Groups; two paid volunteer days annually; Environmental, Social, and Governance (ESG) initiatives for local and global impact.
  • Purpose Driven Work: We have a superpower that we've never talked about with as much pride as we should – we are one of the only companies on the planet that helps its customers pursue justice, truth, and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.

  • Security Specialist

    2 weeks ago

    Toronto, Ontario, Canada Paladin Security Full time

    At Paladin Security, we are seeking a highly skilled and dedicated Security Specialist to join our team.The ideal candidate will possess excellent customer service skills, with the ability to effectively communicate with clients and colleagues alike.The Security Specialist will be responsible for maintaining a safe and welcoming environment, enforcing...

  • Security Protection Specialist

    3 weeks ago

    Toronto, Ontario, Canada Paladin Security Full time

    Security Protection SpecialistAt Paladin Security, we're dedicated to making the world a safer and friendlier place. As a Security Protection Specialist, you'll play a vital role in providing top-notch security services to our clients with complex security needs. **Job Highlights:*** Competitive hourly rate of $18.25* Opportunities for growth and advancement...

  • Retail Security Specialist

    1 week ago

    Toronto, Ontario, Canada Paladin Security Full time

    Job OverviewWe are seeking a highly skilled and experienced Retail Security Specialist to join our team at Paladin Security.

  • Security Operations Specialist

    4 weeks ago

    Toronto, Ontario, Canada Paladin Security Full time

    Job Summary:As a Security Operations Specialist at Paladin Security, you will be responsible for providing exceptional customer service to clients and security teams through effective communication and problem-solving skills. Your primary duties will include receiving calls from clients, dispatching security personnel to specific sites, and monitoring CCTV...

  • Communications Security Specialist

    5 days ago

    Toronto, Ontario, Canada Communications Security Establishment Full time

    Job SummaryWe are seeking a highly skilled Communications Security Specialist to join our team at the heart of Canada's national security and intelligence community.About the RoleThis exciting opportunity is part of our multi-functional teams responsible for delivering vital COMSEC services to Government of Canada agencies, international partners, and...

  • Tactical Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada Paladin Security Full time

    Job Title: Tactical Security SpecialistJob Summary: We are seeking a highly skilled and experienced Tactical Security Specialist to join our team at Paladin Security. As a key member of our security operations team, you will be responsible for providing a high level of security and safety to our clients and their properties. Key Responsibilities: Provide...

  • Product Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada AMEX Full time

    About the RoleWe are seeking a highly skilled Product Security Specialist to join our team at Wayfair. As a Product Security Specialist, you will be responsible for safeguarding the security of our development and custom products and features.Key ResponsibilitiesAssist in building and deploying security solutions that will be used across the...

  • Product Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada AMEX Full time

    About the RoleWe are seeking a highly skilled Product Security Specialist to join our team at Wayfair. As a Product Security Specialist, you will be responsible for safeguarding the security of our development and custom products and features.Key ResponsibilitiesAssist in building and deploying security solutions that will be used across the...

  • Security Operations Specialist

    4 weeks ago

    Toronto, Ontario, Canada Paladin Security Full time

    Job Summary: We are seeking a highly skilled and experienced Security Operations Specialist to join our team at Paladin Security. As a Security Operations Specialist, you will be responsible for ensuring the safety and security of our clients and their properties. This is a challenging and rewarding role that requires strong communication and problem-solving...

  • Product Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada AMEX Full time

    About the RoleWe are seeking a highly skilled Product Security Specialist to join our team at Wayfair. As a Product Security Specialist, you will be responsible for safeguarding the security of our development and custom products and features.Key ResponsibilitiesAssist in building and deploying security solutions that will be used across the...

  • Forensic Security Specialist

    2 weeks ago

    Toronto, Ontario, Canada Paladin Security Full time

    About the RoleWe are seeking a skilled Forensic Security Specialist to join our team at Paladin Security. In this role, you will be responsible for ensuring the safety and security of our clients and their facilities.Key ResponsibilitiesMonitor CCTV/Security Alarms 24/7Operate the Security Command CentreRespond to Fire Alarm SystemMonitor Temperature...

  • Product Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada Thomson Reuters Full time

    About the RoleWe are seeking a highly skilled Product Security Specialist to join our team at Thomson Reuters. As a Product Security Specialist, you will be responsible for developing and implementing secure software development life cycle (SDLC) activities and controls to ensure our applications are designed and implemented with the highest level of...

  • Product Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada Thomson Reuters Full time

    About the RoleWe are seeking a highly skilled Product Security Specialist to join our team at Thomson Reuters. As a Product Security Specialist, you will be responsible for developing and implementing Secure Software Development Life Cycle (SDLC) activities and controls to ensure our applications are designed and implemented with the highest level of...

  • Concierge Security Specialist

    1 month ago

    Toronto, Ontario, Canada Condor Security Full time

    Job Opportunity:We are seeking a highly motivated and customer-focused Concierge Security Specialist to join our team at Condor Security in Downtown Toronto.Job Summary:The successful candidate will provide exceptional customer service, handle front desk duties, and maintain a professional reputation. They will work effectively in a fast-paced environment,...

  • Product Security Specialist

    1 month ago

    Toronto, Ontario, Canada Thomson Reuters Full time

    About the RoleWe are seeking a Product Security Specialist to join our team. As a Product Security Specialist, you will be responsible for developing and implementing secure software development life cycle (SDLC) activities and controls to ensure our applications are designed and implemented with the highest level of security standards.Key...

  • Security Officer

    4 weeks ago

    Toronto, Ontario, Canada SafeTech Security Full time

    At SafeTech Security, we're seeking a skilled Protection Specialist to join our team. As a key member of our security solutions, you'll be responsible for safeguarding people and property. With a strong focus on comprehensive security, we work with top-notch professionals like you to deliver exceptional results. If you have the necessary training, licensure,...

  • Security Officer

    7 days ago

    Toronto, Ontario, Canada Paladin Security Full time

    Are you a customer-focused individual with excellent communication skills? Do you thrive in dynamic environments and enjoy providing exceptional service to others? We are seeking a Security Officer - Customer Service Specialist to join our team at Shops at Don Mills in North York, Ontario.About the Role:We are looking for a detail-oriented and organized...

  • Product Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada Thomson Reuters Full time

    About the RoleAs a Product Security Specialist at Thomson Reuters, you will be responsible for developing and implementing secure software development life cycle (SDLC) activities and controls to ensure our applications are designed and implemented with the highest level of security standards.Key ResponsibilitiesSecure design, architecture, and...

  • Senior Product Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada AMEX Full time

    About the RoleWe are seeking a highly skilled Senior Product Security Specialist to join our team at Wayfair. As a key member of our Application Security Team, you will be responsible for safeguarding the security of our development and custom products and features.Key ResponsibilitiesLead enterprise-wide security initiatives by working closely with...

  • Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada The West Egg Group Security Services Full time

    Job Title: Tactical Security Guard SpecialistAbout the Role:We are seeking a highly skilled and experienced Tactical Security Guard to join our team at Union Station. As a key member of our security team, you will be responsible for providing a high level of security service to our clients and ensuring the safety of everyone on site.Key Responsibilities:-...