Security Solutions Architect - DevSecOps & Threat Modeling

Ubisoft Entertainment Inc.; Montreal (administrative region); On-site; CAD 110,000 - 170,000; Full time

Job summary

Ubisoft Montréal is seeking a Solution Security Architect to help define and implement security controls across Ubisoft services and products. You will contribute to risk reduction initiatives, support security solutions deployment, and collaborate with Security Engineering leadership to align with enterprise standards.

The role emphasizes secure development practices, integration of security tools, and knowledge sharing with development and operations teams across Anvil and Snowdrop projects.

Qualifications

• Experience with CI/CD pipelines, DevOps practices and security tool integration (SAST, SCA, DSA).
• Background in software development and application security with OWASP awareness.
• Knowledge of OAuth, Azure OIDC and AWS authentication mechanisms; threat modeling skills.

Responsibilities

• Define and implement security controls across Ubisoft services and products.
• Support deployment and maintainability of security tools for operations teams.
• Evaluate risks and address real-world threat scenarios in development environments.
• Collaborate with Security Engineering leadership to align with security standards.
• Document changes and guide development and operations teams on security topics.

Skills

CI/CD pipelines

DevOps practices

SAST

SCA

DSA

Software development

Application security

OWASP practices

OAuth

Azure OIDC

AWS

Threat modeling

Supply chain security

HashiCorp Vault

Penetration testing

CTF activities

Security leadership

Tools

SAST

SCA

DSA

HashiCorp Vault

Job description

Ubisoft Montréal is seeking a Solution Security Architect to help define and implement security controls across Ubisoft services and products. You will contribute to risk reduction initiatives, support security solutions deployment, and collaborate with Security Engineering leadership to align with enterprise standards.

The role emphasizes secure development practices, integration of security tools, and knowledge sharing with development and operations teams across Anvil and Snowdrop projects.