Threat Modeling Specialist Cybersecurity (InfoSec)

Threat Modeling Specialist - Cybersecurity (InfoSec) (Toronto, ON, M5A 3N7) | 04/27/26

Job Description Job Title:

Threat Modeling Specialist - Cybersecurity (InfoSec)

Location:

Toronto, Canada (Day 1 Onsite) Job Summary We are seeking a highly skilled Threat Modeling Specialist to join our Information Security (InfoSec) team. This role focuses on conducting security risk assessments, developing threat modeling frameworks, and ensuring secure application design across enterprise systems. The ideal candidate will work closely with engineering, architecture, and security leadership teams to strengthen application security posture and mitigate risks proactively. Key Responsibilities Conduct security risk assessments on applications, focusing on system design and code-level implementation. Develop and manage threat modeling governance processes and DevSecOps security practices. Create and maintain threat models, threat libraries, and secure design patterns. Collaborate with stakeholders to identify and address security control gaps. Review and validate implementation of security controls across applications. Track and report risk, compliance, and remediation status to leadership. Work with application teams to ensure adherence to secure coding standards. Support auditability and compliance through validation against security scanning tools. Provide consultation and guidance on threat modeling and application security. Develop reports and dashboards for risk prioritization and decision-making. Assist in defining security metrics, KPIs, and governance frameworks. Contribute to security strategy, investment planning, and cost-benefit analysis. Facilitate Agile ceremonies and support Program Increment (PI) execution. Drive security awareness and education across engineering teams. Research and simulate advanced attack techniques to test system resilience. Required Skills & Qualifications Strong experience in Threat Modeling & Risk Assessment Hands-on experience with frameworks like: STRIDE MITRE ATT&CK CAPEC Expertise in Application Security (AppSec): Web, API, Mobile, AI applications Knowledge of security standards:

NIST 800-53, NIST CSF, OWASP ASVS

Experience with DevSecOps and Secure SDLC Strong understanding of:

REST/SOAP

APIs, Microservices, SPAs, Mobile architectures Programming exposure: Java, JavaScript (preferred) Database knowledge: SQL, Oracle, DB2, NoSQL Cloud security experience (AWS/Azure/GCP) Familiarity with IAM & Authentication protocols: OAuth 2.0, OIDC, JWT Strong understanding of

Cryptography:

Data at rest & in transit encryption Preferred Qualifications

Certifications:

CISSP, CISM, CSSLP, CISA, CRISC, OSCP

Experience with enterprise security architecture Strong communication and stakeholder management skills Experience working in Agile/SAFe environments Nice to Have Experience with AI/ML security Knowledge of security automation tools Exposure to financial services or regulated environments Soft Skills Strong analytical and problem-solving skills Excellent communication and collaboration abilities Ability to work with cross-functional teams Strategic thinking with attention to detail Regards, Ajay Tanwar E-Solutions Inc. | 2 North Market Street | Suite #400 | San Jose, CA - 95113

US Direct:

669-250-0966 |

Fax:

408-521-0167

Email:

ajay.t@e-solutionsinc.com |

Web:

www.e-solutionsinc.com USA | CANADA | UK |

SINGAPORE

|

MALAYSIA

|

INDIA Disclaimer:

 E-Solutions provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. We especially invite women, minorities, veterans, and individuals with disabilities to apply. EEO/AA/M/F/Vet/Disability Threat Modeling Specialist - Cybersecurity (InfoSec)1security, Governance, Threat Modeling, threat libraries, Program Increment Canada