Do you want to constantly learn, analyze and understand, and leverage your experience, knowledge and expertise? Our Threat Modelling team is looking for a Senior Threat Modelling Advisor to model threats in a way that facilitates understanding of the various cybersecurity issues that could impact Desjardins Group. You will interact with our Cyber Defence, Internal Threats, Projects and Development teams, as well as many others. During these workshops, you’ll need to identify the threat actors, the possible vectors for exploitation and the potential impact on Desjardins Group. The Threat Modelling Team is part of the Offensive Security Department and provides plain-language explanations of the various observations made by the adversary simulation experts. Our team adds value to the deliverables produced by the Offensive Security Department (ETTIC). More specifically, you will be required to:

• Contribute as an expert to enrich the action plans of the defence teams.
• Analyze, map and explain REALISTIC threats to guide test activities.
• Effectively communicate identified threats using language that is suitable for the target audience.
• Identify relevant test objectives based on business needs.
• Identify threats based on vulnerability reports.
• Provide plain-language explanations of attack chains to support assessments conducted by the Risk teams.
• Lead workshops to produce detailed analyses of hypothetical threats.
• Train security experts to identify threats in day-to-day operations.
• Perform the research and development required to improve the models and methodologies used.
• Be self-sufficient in leading projects and assignments (e.g., lead meetings related to your work, seek information as needed, manage time and schedules, manage priorities, etc.).

What we offer*

• Competitive salary and annual bonus
• 4 weeks of flexible vacation starting in the first year
• Defined benefit pension plan that provides predictable, stable income throughout retirement
• Group insurance including telemedicine
• Reimbursement of health and wellness expenses and telework equipment

* Benefits apply based on eligibility criteria.

#LI-Hybrid

What you bring to the table

• Bachelor’s degree in IT or a related field
• A minimum of six years of relevant cybersecurity experience
• Please note that other combinations of qualifications and relevant experience may be considered
• Experience in AppSec and/or infrastructure offensive security
• Experience analyzing source codes and identifying vulnerabilities
• Experience using threat modelling methodologies such as STRIDE and OWASP or comparable experience visually representing data and process flows in a corporate environment
• Advanced proficiency in French, both spoken and written
• Intermediate knowledge of English due to the nature of the duties or work tools or because the position involves interactions with English-speaking partners, members and/or clients
• General knowledge of defence mechanisms and business controls
• Familiarity with the MITRE ATT&CK framework

Equity, Diversity, Inclusion and Accessibility

At Desjardins, we believe in equity, diversity and inclusion. We're committed to welcoming, respecting and valuing people for who they are as individuals, learning from their differences, embracing their uniqueness, and providing a positive workplace for all. At Desjardins, we have zero tolerance for discrimination of any kind. We believe our teams should reflect the diversity of the members, clients and communities we serve.

If there's something we can do to help make the recruitment process or the job you're applying for more accessible, let us know. We can provide accommodations at any stage in the recruitment process. Just ask!

Trade Union (If applicable)

Job Family

Unposting Date