Threat Modeler with Development background

Equal Opportunity Employer

Tata Consultancy Services (TCS) is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to create a workforce that reflects the societies we operate in. Our continued commitment to Culture and Diversity is reflected in our people stories across our workforce and implemented through equitable workplace policies and processes.

Tata Consultancy Services Canada Inc. is committed to meeting the accessibility needs of all individuals in accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and the Ontario Human Rights Code (OHRC). Should you require accommodation during the recruitment and selection process, please inform Human Resources.

Threat Modeler, Security Architect with Development background.

Artificial Intelligence, Machine Learning & Data Science professional with experience in enterprise architecture, AI product security, and digital transformation. Strong hands‑on expertise in cloud‑native architectures (AWS/GCP), threat modeling, secure AI system development, and AI governance.

• Conducts security risk assessments of applications with respect to design and implementation of system and application code.
• Experience in API development (RESTful APIs, Integration Design, etc).
• Work with PostgreSQL and similar RDBMS, to query and optimize data structures.
• Contribution to system architecture and design discussions.
• Ability to write scripts to automate tasks, improve workflows and reduce manual effort.
• Proficiency in one or more core programming language:
  Python, JavaScript, Java or Go.
• Familiarity with Dev Ops practices, including CI/CD pipelines, version control, build and deployment automation.
• Understanding of secure coding practices and implementation.
• Strong problem solving and debugging skills.
• Solid communication and collaboration skills, especially when working in cross functional teams.

• Experience with threat modeling frameworks, attack vectors and vulnerability analysis: CAPEC, ATT&CK, STRIDE.
• Experience with application security controls (Web, API, Mobile, AI).
• Experience with common information security management and application frameworks: NIST 800-53, CSF, OWASP ASVS. Experience with Application Security design and Dev Sec Ops .
• Full stack knowledge of application architectures including Single Page Applications, REST APIs, SOAP APIs, Mobile Applications.
• Experience with Java, JavaScript and mobile application development.
• Knowledge of familiarity with database architecture including Oracle, SQL, DB2 and No
  
  SQL Databases.
• Experience with Cloud security, architecture, design, implementation, and operations – Exposure to IAM Controls (OAuth 2.0, OIDC, JWT).
• Strong familiarity with Cryptography Controls (Data at rest, in motion).
• CISSP, CISM, CSSLP, CISA, CRISC, OSCP.

• Data Security
• Actimize Modeller
• Enterprise Threat Management

Toronto, ON

TECHNOLOGY

Developer

413856