This is a remote contract position for a for our public sector client.
Work location: 525 University Ave.
Duration: 12 months
7.25 hours/day
Location: Remote - All work must be conducted in Canada unless otherwise agreed to by the client.
Client's assets including laptops and related equipment cannot be removed from the province of Ontario without prior written approval from the client.
...
Advantages
Good compensation working on projects that will make a difference to the people of Ontario.
Responsibilities
Deliverables
Include, but are not limited to:
Assist with designing product and service security controls.
Collaborate with engineering teams to perform threat modeling for the proposed architecture.
Research security vulnerabilities in current architecture and communicate mitigation strategies to impacted teams.
Engage with engineering teams to perform security reviews of the architecture, design, and code throughout the SDLC process.
Work with product architects to provide remediation and potential fixes for security issues found from pen tests, static (SAST) and dynamic (DAST) analysis and provide fix recommendations, ensure that findings are addressed.
Perform ongoing security posture assessments using commercial or native tools to identify and track remediation of cyber risk in cloud environments.
Contributing security-focused feedback to engineers during all phases of the development lifecycle.
Report to management and key stakeholders on the product security status.
Qualifications
Must haves:
5+ years's experience and knowledge with Cloud computing concepts. Microsoft Azure and Amazon AWS PaaS knowledge and experience is highly preferred.
5+ years's experience and knowledge of application security architectures and the purpose of privacy and security controls (e.g. token based authentication and authorization such as OIDC, SAML and OAUTH).
5+ years's experience building and automating security testing.
5+ years's experience and knowledge and understanding of networking, network security and cryptographic algorithms.
5+ years's experience with Threat Modeling.
Strong communication skills.
Desired Skills:
Bachelor’s in computer science or equivalent work experience.
5+ years in IT solutions security role.
Security code review experience.
Offensive security experience: red team, penetration testing.
Certified Azure Security Engineer is an asset.
CCSP and CISSP Certifications are an asset.
Summary
If interested and qualified for this role, please apply today for immediate consideration!
Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.
Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.
show more
This is a remote contract position for a for our public sector client.
Work location: 525 University Ave.
Duration: 12 months
7.25 hours/day
Location: Remote - All work must be conducted in Canada unless otherwise agreed to by the client.
Client's assets including laptops and related equipment cannot be removed from the province of Ontario without prior written approval from the client.
Advantages
Good compensation working on projects that will make a difference to the people of Ontario.
Responsibilities
Deliverables
Include, but are not limited to:
Assist with designing product and service security controls.
Collaborate with engineering teams to perform threat modeling for the proposed architecture.
Research security vulnerabilities in current architecture and communicate mitigation strategies to impacted teams.
Engage with engineering teams to perform security reviews of the architecture, design, and code throughout the SDLC process.
Work with product architects to provide remediation and potential fixes for security issues found from pen tests, static (SAST) and dynamic (DAST) analysis and provide fix recommendations, ensure that findings are addressed.
...
Perform ongoing security posture assessments using commercial or native tools to identify and track remediation of cyber risk in cloud environments.
Contributing security-focused feedback to engineers during all phases of the development lifecycle.
Report to management and key stakeholders on the product security status.
Qualifications
Must haves:
5+ years's experience and knowledge with Cloud computing concepts. Microsoft Azure and Amazon AWS PaaS knowledge and experience is highly preferred.
5+ years's experience and knowledge of application security architectures and the purpose of privacy and security controls (e.g. token based authentication and authorization such as OIDC, SAML and OAUTH).
5+ years's experience building and automating security testing.
5+ years's experience and knowledge and understanding of networking, network security and cryptographic algorithms.
5+ years's experience with Threat Modeling.
Strong communication skills.
Desired Skills:
Bachelor’s in computer science or equivalent work experience.
5+ years in IT solutions security role.
Security code review experience.
Offensive security experience: red team, penetration testing.
Certified Azure Security Engineer is an asset.
CCSP and CISSP Certifications are an asset.
Summary
If interested and qualified for this role, please apply today for immediate consideration!
Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.
Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.
show more
