Cyber Security Consultant

About the role

The Financial Crimes Unit (FCU) brings together our Cybersecurity, Fraud, Physical Security and Resilience Planning capabilities to address the ever-growing and increasingly complex global security environment. It is a highly collaborative effort that greatly enhances BMO’s ability to rapidly prevent, detect, respond to, and recover from all security & crisis threats.

Responsibilities

• Perform high quality application security assessments producing easy to understand threat modeling artifacts
• Communicate (written and verbal) potential risks effectively to stakeholders
• Follow through in tracking assessments and remediation activities
• Be integral in continuously maturing the threat modeling practices and application security risk assessment program
• Maintain an understanding of available security requirements, design patterns, and identify gaps that require improvement opportunities
• Keep abreast of new technology trends and associated risks in application development practices, frameworks, cloud services, modern data store platforms etc. and ability apply this knowledge and skills during threat modeling exercises
• Broader work or accountabilities may be assigned as needed

CORE Skills and Experience

• Demonstrated experience with Threat Modeling methodologies (e.g. Attack Trees, MSTM/STRIDE, PASTA)
• Proven experience with Software Application architecture risk analysis and application security risk assessments
• Deep experience with decomposing applications and system designs in on-prem and hybrid cloud architectures to identify potential threats
• Proven experience with API Security to identify potential threats
• More than 3 years of relevant experience in Cybersecurity
• Proficient level working experience in application security and security risk management practices
• Working experience in Agile methodologies
• Prior experience in software development (e.g., Java, JS, Python) is preferred
• Advanced analytical skills along with proficient communication and negotiations skills, both verbal and written
• Is empathetic and loves to solve problems and always maintains high integrity

Qualifications

• Post-secondary degree in Computer Science, Engineering, or Information Systems or a related field of study or an equivalent combination of education
• Industry certifications such as CISM, CISSP, GIAC, or CEH

Benefits

See here for more details.

Schedule

This is a HYBRID role with a current requirement of at least 2 days in the office.

Pay

$88,800.00 - $165,600.00 Pay Type: Salaried