Threat Modeling Cybersecurity Specialist

HireOn Tech; Toronto; On-site; CAD 90,000 - 130,000; Full time

Job summary

HireOn Tech is seeking a Threat Modeling, Cybersecurity professional in Toronto to assess security risks associated with application design and code. You will help govern threat modeling programs and security design practices across DevSecOps initiatives.

The role involves developing governance documentation, coordinating with information security leadership, and producing management reports on residual risk and controls effectiveness.

Qualifications

• Experience with threat modeling frameworks (CAPEC, ATT&CK, STRIDE).
• Experience with application security controls (Web, API, Mobile, AI).
• Familiarity with information security management frameworks (NIST 800-53, CSF, OWASP ASVS).
• Experience with DevSecOps and secure design patterns.

Responsibilities

• Conduct security risk assessments of applications focusing on design and code.
• Develop and manage threat modeling governance processes for security design & DevSecOps.

Skills

Threat modeling frameworks

Security controls & DevSecOps

Full stack knowledge

IAM (OAuth 2.0, OIDC, JWT)

Cloud security

Cryptography controls

Tools

NIST 800-53

OWASP ASVS

CSF

Job description

HireOn Tech is seeking a Threat Modeling, Cybersecurity professional in Toronto to assess security risks associated with application design and code. You will help govern threat modeling programs and security design practices across DevSecOps initiatives.

The role involves developing governance documentation, coordinating with information security leadership, and producing management reports on residual risk and controls effectiveness.