Information Security Engineer
Apply NowCompany: Tata Consultancy Services
Location: Toronto, ON M4E 3Y1
Description:
Inclusion without Exception
Tata Consultancy Services (TCS) is an equal opportunityemployer, and embraces diversity in race, nationality, ethnicity, gender, age,physical ability, neurodiversity, and sexual orientation, to create a workforcethat reflects the societies we operate in. Our continued commitment to Cultureand Diversity is reflected in our peoples stories across our workforce andimplemented through equitable workplace policies and processes.
About TCS
TCS is an IT services, consulting, and business solutionsorganization that has been partnering with many of the worlds largestbusinesses in their transformation journeys for over 55 years. Itsconsulting-led, cognitive-powered portfolio of business, technology, andengineering services and solutions is delivered through its unique LocationIndependent Agile delivery model, recognized as a benchmark of excellence insoftware development. A part of the Tata group, India's largest multinationalbusiness group, TCS employs over 612,000 of the worlds best-trainedconsultants in 55 countries. The company generated consolidated revenues of US$29 billion in the fiscal year ended March 31, 2024, [BS1] and is listed on theBSE and the NSE in India. TCS' proactive stance on climate change andaward-winning work with communities across the world have earned it a place inleading sustainability indices such as the MSCI Global Sustainability Index andthe FTSE4Good Emerging Index.
Job Description:
Skills and Responsibilities:
Information Security II Must-Have Conducts security riskassessments of applications with respect to design and implementation of systemand application code
Develop and manage security governance processes andprocedures for the threat modeling program and application security design& devsecops programs.
Assist in the development of threat modeling governancedocumentation.
Works with information security leadership to developstrategies and plans to enforce threat modeling and address identified controlgaps.
Develops reports for management concerning residual riskand non-compliance.
Monitor and track compliance with application owners toensure implementation of security controls as planned.
Review issued security controls with application ownersto ensure identified requirements are implemented.
Validate implementation of security controls againstoutputs of scanning tools to enable auditability and verifiability.
Assist application owners in filing appropriate securitystandard exceptions as identified through threat modeling.
Develop, Maintain, update and enhance secure designpatterns and secure coding standards.
Develop, Maintain, update and enhance threat libraries.
Socialize secure design patterns and secure codingstandards with engineering teams.
Assist application teams with threat modelingconsultancy questions.
Consistently enable strong developer and customerexperience when liaising with application teams.
Uphold Blue Box values when liaising with applicationteams.
Develop innovative attack techniques to foil protectivedesign and in-place mitigations.
Participate in the development of strategies forinformation security processes and programs.
Support the investment decision process by developingbusiness cases and cost benefit analysis.
Create reports and other materials to assist inprioritizing activities related to various threats to applications PreferredQualifications
Experience with threat mode.
Tata Consultancy Services Canada Inc. is committed tomeeting the accessibility needs of all individuals in accordance with theAccessibility for Ontarians with Disabilities Act (AODA) and the Ontario HumanRights Code (OHRC). Should you require accommodation during the recruitment andselection process, please inform Human Resources.
Thank you for your interest in TCS. Candidates that meetthe qualifications for this position will be contacted within a 2-week period.We invite you to continue to apply for other opportunities that match yourprofile.
Tata Consultancy Services (TCS) is an equal opportunityemployer, and embraces diversity in race, nationality, ethnicity, gender, age,physical ability, neurodiversity, and sexual orientation, to create a workforcethat reflects the societies we operate in. Our continued commitment to Cultureand Diversity is reflected in our peoples stories across our workforce andimplemented through equitable workplace policies and processes.
About TCS
TCS is an IT services, consulting, and business solutionsorganization that has been partnering with many of the worlds largestbusinesses in their transformation journeys for over 55 years. Itsconsulting-led, cognitive-powered portfolio of business, technology, andengineering services and solutions is delivered through its unique LocationIndependent Agile delivery model, recognized as a benchmark of excellence insoftware development. A part of the Tata group, India's largest multinationalbusiness group, TCS employs over 612,000 of the worlds best-trainedconsultants in 55 countries. The company generated consolidated revenues of US$29 billion in the fiscal year ended March 31, 2024, [BS1] and is listed on theBSE and the NSE in India. TCS' proactive stance on climate change andaward-winning work with communities across the world have earned it a place inleading sustainability indices such as the MSCI Global Sustainability Index andthe FTSE4Good Emerging Index.
Job Description:
Skills and Responsibilities:
Information Security II Must-Have Conducts security riskassessments of applications with respect to design and implementation of systemand application code
Develop and manage security governance processes andprocedures for the threat modeling program and application security design& devsecops programs.
Assist in the development of threat modeling governancedocumentation.
Works with information security leadership to developstrategies and plans to enforce threat modeling and address identified controlgaps.
Develops reports for management concerning residual riskand non-compliance.
Monitor and track compliance with application owners toensure implementation of security controls as planned.
Review issued security controls with application ownersto ensure identified requirements are implemented.
Validate implementation of security controls againstoutputs of scanning tools to enable auditability and verifiability.
Assist application owners in filing appropriate securitystandard exceptions as identified through threat modeling.
Develop, Maintain, update and enhance secure designpatterns and secure coding standards.
Develop, Maintain, update and enhance threat libraries.
Socialize secure design patterns and secure codingstandards with engineering teams.
Assist application teams with threat modelingconsultancy questions.
Consistently enable strong developer and customerexperience when liaising with application teams.
Uphold Blue Box values when liaising with applicationteams.
Develop innovative attack techniques to foil protectivedesign and in-place mitigations.
Participate in the development of strategies forinformation security processes and programs.
Support the investment decision process by developingbusiness cases and cost benefit analysis.
Create reports and other materials to assist inprioritizing activities related to various threats to applications PreferredQualifications
Experience with threat mode.
Tata Consultancy Services Canada Inc. is committed tomeeting the accessibility needs of all individuals in accordance with theAccessibility for Ontarians with Disabilities Act (AODA) and the Ontario HumanRights Code (OHRC). Should you require accommodation during the recruitment andselection process, please inform Human Resources.
Thank you for your interest in TCS. Candidates that meetthe qualifications for this position will be contacted within a 2-week period.We invite you to continue to apply for other opportunities that match yourprofile.