Sr. Application Security Engineer

integrosoftwares; Victoria; On-site; CAD 120,000 - 160,000; Full time

Job summary

integrosoftwares is seeking a Senior Security Design Specialist to implement security by design, perform verification and testing of security measures, and ensure alignment with client cyber security processes.

You will develop reference architectures, design patterns, and security requirements to integrate security into departmental systems and projects, collaborating with project teams to produce artefacts and ensure production readiness.

Qualifications

• 10+ years of experience planning, developing and implementing IT security architecture or designs for complex enterprise applications or information systems.
• Strong knowledge of Security & Risk Management, Cloud Security, Endpoint Security, IAM, Security Operations, and Software Development Security.
• 2+ years of experience reviewing, analyzing, or applying security-related guidance within the last 5 years.

Responsibilities

• Implement security by design and mitigations, and verify and test security measures.
• Develop IT security reference architectures, design patterns, and security requirements for integration into systems and projects.
• Collaborate with project teams to create security artefacts/documents (e.g., security assessment plans, security design, test plans).
• Review artifacts to ensure embedded security and compliance with policies and standards (e.g., ITSG-33, ITSP.10).
• Execute security test plans as needed and share knowledge with staff.

Skills

IT security architecture

Security & Risk Mgmt

Cloud security

Endpoint security

IAM

Security operations

Application security

Job description

Our valued client is looking for a Snr Security Design Specialist to implement security by design, security mitigations and perform verification and testing of security measures

Responsibilities:

• Working within project teams to implement security by design, security mitigations and perform verification and testing of security measures following the clients Cyber Security processes and deliverables.


• Develop IT security reference architectures, design patterns, and requirements to integrate security into departmental systems and projects.


• Technologies include but are not limited to Azure Cloud (IaaS, PaaS and SaaS), AI/LLMs (both self-hosted and as-a-service) as well as on-premises solutions.


• Standards and guidance are from the Canadian Center for Cyber Security and the Treasury Board Secretariat of Canada, including but not limited to:


• Directive on Service and Digital


• Directive on Security Management, Appendix B


• ITSG-33 and ITSP.10. Series


• Government of Canada Cloud Gardrails


• Government of Canada Guide on the use of generative artificial intelligence


• Work with systems security assessors and project teams to define and create security related project artefacts/documents, such as but not limited to security assessment plan, business needs for security, security design, security test plan.


• Review project artifacts to confirm appropriate level of security is embedded into department projects before they are put into production.


• Develop reusable artifacts, tools, and templates to standardize business continuity and security practices within the department.


• Verify that security safeguards meet the applicable policies and standards, validate the security requirements by mapping the system-specific security policy to the functional security requirements, and mapping the security requirements through the various stages of design documents, verify that security safeguards have been implemented correctly and that assurance requirement have been met. This includes confirming that the system has been properly configured, and establishing that the safeguards meet applicable standards, assess the residual risk provided by the risk assessment to determine if it meets an acceptable level of risk.


• Execute security test plan as needed.


• Ensure knowledge transfer to staff.

Must Have Skills:

• 10+ years of experience, within the last 15 years, planning, developing and implementing IT security architecture or IT security designs for complex enterprise-wide applications or information systems.


• Security and Risk Management, Cloud Security, Endpoint Security, Communications and Network Security, Identify and Access Management, Security Operations, Software Development and Applications Security


• 2+ years of experience, within the last 5 years reviewing, analyzing, and/or applying


• A broad range of security technologies, including multiple types of systems and applications architectures, and multiple hardware and software platforms


• The significance and implications of market and technology trends within architecture roadmaps and solution designs. (examples: web services security, incident management, identity management)


• Best practices and standards related to the concept of network zoning and defence in-depth principles.