[E-149] - Senior IT Security Engineer to ensure applications are designed/implemented to the highest security

[E-149] - Senior IT Security Engineer to ensure applications are designed/implemented to the highest security

Our Valued Public Sector Client is looking for a Senior IT Security Engineer to ensure applications are designed/implemented to the highest security standards.
The work performed under this contract will consist of supporting the Digital Hub in the design, prototyping, development, operation, scaling and sustainment of cloud-based software applications developed following an Agile methodology and leveraging DevOps processes.
Responsibilities:
Develop security practices into the design of new applications that meet Treasury Board Secretariat and Department of National Defence application security guard rails and identify where policy is incompatible with emerging threats and propose changes;




Work with the TA to prepare Security Assessment and Authorizations (SA&A;), Security Categorization Assessment Report (SCAR) and Concept of Operations (CONOps) documents for assessment denoting risks and highlighting mitigation measures in order to achieve Interim Authority to Operate and Authority to Operate (iATO & ATO);
Develop clear strategies for sourcing, processing and managing data sets;
Develop and implement strategies for the use of cloud services in order to execute data security and mitigation of exposure to cyber-attack;
Provide guidance and technical advice to RCAF Digital Hub during the planning, conduct, validation and analysis phases of software development;
Provide recommendations, technical advice or familiarity training for DND members who will be managing various projects and efforts;
Perform application security reviews and provide best practice recommendations verbally and/or in writing;
Build Security architecture design;
Perform threat modeling and penetration testing as required;
Provide security metrics and continuous improvement plans;
Pull request reviews;




Configure and monitor Cloud infrastructure as required;
Configure CI/CD pipeline incorporating relevant security measures
Must Haves:
Application Development Security 5+years
Security Protocols 5+years
CI/CD DevSecOps pipeline 2+years
Degree or Diploma in Engineering or Science Stream
Apply

The original job offer can be found in Kit Job:
https://www.kitjob.ca/job/90595471/e-149-senior-security-engineer-ensure-applications-are-designed-implemented-the-highest-security-quebec-city/?utm_source=html