Security Analyst with STRIDE

VTekis Consulting LLP; Vaughan; Remote; CAD 80,000 - 120,000; Full time

Job summary

A leading consulting firm is seeking a Security Analyst to enhance their security posture through vulnerability management and performance testing. The role involves manual security testing, threat modeling, and utilizing various security tools to assess and mitigate risks. Candidates should have at least 5 years of experience and be fluent in French. This position is fully remote, offering flexibility and the opportunity to work with cutting-edge security technologies.

Qualifications

• Minimum 5 years of experience in relevant security roles.
• Excellent soft skills, especially in customer collaboration.
• Fluent in French (speaking, reading, and writing).

Responsibilities

• Manual security testing using DAST and SAST tools.
• Threat modeling using tools like STRIDE and PASTA.
• Generating security testing reports from POSTMAN and Burp Suite.

Skills

Vulnerability Management

Performance Testing

Web Application Security

CI/CD Security

Manual Security Testing

Threat Modeling

Application Security

SAST

DAST

Penetration Testing

Security Risk Assessment

Tools

Burp Suite

Postman

Tenable

Wiz

Synk

Job description

Security Analyst Job Description

We are seeking a Security Analyst with experience in Vulnerability Management and Performance Testing for Web Applications and Web APIs. The ideal candidate will have proficiency in exploiting vulnerabilities, secure build pipelines, and CI/CD security integration.

Responsibilities include:

1. Manual security testing using DAST and SAST tools, along with architecture design review.
2. Threat modeling using tools like STRIDE and PASTA to identify security threats in data flows.
3. Generating security testing reports from POSTMAN and Burp Suite.
4. Reviewing application architecture and security requirements, assessing application environments.
5. Managing application composition and SBOM artifacts for releases.
6. Analyzing security scans from Tenable, Wiz, and other tools, and performing security risk calculations.
7. Utilizing tools such as Synk, WizCloud, Tenable, Burp Suite, and Postman for various security assessments.
8. Applying security frameworks like Parrot OS Environment Security Framework.

Qualifications:

• Minimum 5 years of experience in relevant security roles.
• Excellent soft skills, especially in customer collaboration.
• Fluent in French (speaking, reading, and writing).

Keywords: Vulnerability Management, Performance Testing, Web Application Security, CI/CD Security, Manual Security Testing, Threat Modeling, Application Security, SAST, DAST, Penetration Testing, Security Risk Assessment.

Additional Information:

• All candidate information will be kept confidential in accordance with EEO guidelines.
• This is a remote position with one vacancy available.