Information Security Developer

Role:
Information Security Developer
Term:
Long Term Contract

Location:

Toronto, ON ( days onsite per week)

Job description:

+ years of information security experience

Experience with gathering functional requirements, deployment of information security tools, and data analysis
Must have
Threat Modeling ,
Risk Assessment, Secure Design,
Application Security
Strong knowledge on AI/ML Security, Web , API , JS Security, Mobile, Cloud Security
OWASP , ASVS , NIST
Strong communication skill.
Development experience - Web, API , Mobile, Full Stack Developer
Nice to have
Strong - AIML Engineer
Security Architecture
Preferred Certification
CISSP, CISM, OSCP
In-depth experience with desktop software and office automation tools

Experience with information security risk management and process improvement

Experience with threat modeling frameworks, attack vectors and vulnerability analysis: CAPEC, Telecommunication&CK, STRIDE.

Experience with application security controls (Web, API, Mobile, AI).

Experience with common information security management and application frameworks: NIST -, CSF, OWASP ASVS.

Experience with Application Security design and Dev Sec Ops
Full stack knowledge of application architectures including:
Single Page Applications, REST APIs, SOAP APIs, Mobile Applications.

Experience with Java, Javascript and mobile application development.
Knowledge or familiarity with database architectures including Oracle, SQL, DB and No

SQL Databases

Experience with Cloud security, architecture, design, implementation, and operations
Exposure to IAM Controls (OAuth , OIDC, JWT)
Strong familiarity with Cryptography Controls (Data at rest, in motion).
CISSP, CISM, CSSLP, CISA, CRISC, OSCP
Threat Modeling
Bachelor's degree in computer science, Information Systems, Business Administration or other related field
Certification may be required for specific functions
Risk Assessment, Security Design
AI/ML Security, Web , API , JS Security, Mobile, Cloud Security
Web, API , Mobile, Full Stack Developer
CISSP, CISM, CSSLP, CISA, CRISC, OSCP