Cognizant

Threat Modeling Specialist

Cognizant • $90K — $120K *
Toronto, ON M3C 0E3In-Person
Information Technology
5 - 7 years of experience
Reposted 3 days ago
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • Bachelor's degree in Computer Science, Information Systems, or related field
  • 6-9 years of experience in information security or application security
  • Hands-on experience with security risk management and process improvement
  • Experience working with application teams to gather requirements and implement security controls
  • Strong analytical, communication, and stakeholder management skills

Responsibilities

  • Conduct threat modeling exercises to identify vulnerabilities and control gaps
  • Perform security risk assessments across application designs
  • Develop creative attack scenarios to challenge existing architectures
  • Provide consultative guidance to application teams on secure design practices
  • Design and implement governance processes for threat modeling
  • Track remediation plans and validate security controls
  • Create dashboards on risk posture and compliance gaps

Benefits

  • Health, dental, and vision insurance
  • Retirement savings plans (RRSP) with employer contributions
  • Generous paid time off and statutory holidays
  • Flexible hybrid work environment
  • Employee wellness and assistance programs
  • Learning and development opportunities, including certifications
  • Employee recognition and performance bonus programs
Full Job Description
a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }

Threat Modeling Specialist

Location: Toronto, ON (Hybrid)
Role Overview

We are seeking a Threat Modeling Specialist to strengthen our enterprise security posture by proactively identifying, assessing, and mitigating risks across applications and platforms.

In this role, you will partner closely with engineering teams, application owners, and security leadership to embed secure design principles, threat modeling practices, and DevSecOps capabilities into the software development lifecycle-all while enabling a positive and seamless developer experience.
Key Responsibilities
Threat Modeling & Risk Assessment
  • Conduct threat modeling exercises to identify vulnerabilities, attack vectors, and control gaps
  • Perform security risk assessments across application designs and implementations
  • Develop creative attack scenarios to challenge existing architectures and controls
  • Provide consultative guidance to application teams on secure design practices
Governance & Program Enablement
  • Design, implement, and mature governance processes for threat modeling and application security
  • Develop and maintain documentation, standards, and threat modeling methodologies
  • Partner with security leadership to drive adoption of secure design practices across the enterprise
  • Track remediation plans and ensure security controls are implemented effectively
  • Support audit readiness through validation of controls and security scanning outputs
Engineering Enablement & Best Practices
  • Develop and promote secure design patterns, coding standards, and threat libraries
  • Collaborate with engineering teams to embed security into DevSecOps pipelines
  • Provide training and awareness on emerging threats, vulnerabilities, and best practices
  • Support exception management processes for security standards
Reporting & Continuous Improvement
  • Create dashboards and reports on risk posture, compliance gaps, and remediation progress
  • Define and track security metrics to measure program effectiveness
  • Contribute to enterprise information security strategies and roadmap execution
  • Recommend tools, skills, and capabilities to enhance the security program
Agile Delivery Support
  • Facilitate Agile ceremonies and support Program Increment (PI) planning and execution
  • Partner with Release Train Engineers (RTEs) and delivery teams to ensure security is integrated into development workflows
  • Enable teams to meet both delivery and security objectives
Required Qualifications
  • Bachelor's degree in Computer Science, Information Systems, or related field
  • 6-9 years of experience in information security or application security
  • Hands-on experience with security risk management and process improvement
  • Experience working with application teams to gather requirements and implement security controls
  • Strong analytical, communication, and stakeholder management skills
Preferred Qualifications
  • Experience with threat modeling frameworks (e.g., STRIDE, CAPEC, MITRE ATT&CK)
  • Strong understanding of application security controls across Web, API, Mobile, and AI platforms
  • Knowledge of security frameworks such as NIST CSF, NIST 800-53, OWASP ASVS
  • Experience integrating security into DevSecOps pipelines
  • Understanding of modern architectures, including:
    • Single Page Applications (SPAs)
    • REST/SOAP APIs
    • Mobile applications
  • Familiarity with:
    • Programming languages: Java, JavaScript
    • Databases: Oracle, SQL Server, DB2, NoSQL
    • Cloud security architecture and operations
    • Identity and Access Management (OAuth 2.0, OIDC, JWT)
    • Cryptographic controls for data protection
Certifications (Preferred)
  • CISSP, CISM, CSSLP, CISA, CRISC, OSCP
Benefits - Canada

Cognizant offers a comprehensive and competitive benefits package, including:
  • Health, dental, and vision insurance
  • Retirement savings plans (RRSP) with employer contributions
  • Generous paid time off and statutory holidays
  • Flexible hybrid work environment
  • Employee wellness and assistance programs
  • Learning and development opportunities, including certifications and upskilling
  • Employee recognition and performance bonus programs

About Cognizant

TriZetto is Powering Integrated Healthcare Management. With technology solutions touching more than half the U.S. population today, TriZetto is uniquely positioned to drive the convergence of core benefit administration, care management and constituent engagement. TriZetto provides premier information technology solutions that enable payers and other constituents in the healthcare supply chain to improve the coordination of benefits and care for healthcare consumers.

Cognizant Careers

Join the vibrant team at Cognizant, a leading provider of information technology, consulting, and business process services. Cognizant is not just a company; it's a community where innovation, leadership, and diversity are valued and where every team member is encouraged to thrive.

Work You’ll Do

At Cognizant, we are dedicated to helping the world's leading companies build stronger businesses — not just for today but for the future. This commitment to growth and sustainability is what makes Cognizant a unique place to advance your career.

Explore Job Opportunities

Whether you're looking for an entry-level position or a more senior role, Cognizant offers a plethora of job opportunities that could be perfect for you. Our hiring process is designed to be transparent and engaging, ensuring that every candidate is able to showcase their skills and potential fully.

Innovative Work

Join a team where innovation is at the core of everything we do. Cognizant’s professionals are not just part of a company; they're part of a groundbreaking environment that combines technology, insights, and leadership to foster innovation across global industries.

Internship Programs

Kickstart your career with Cognizant’s internship programs. These opportunities allow you to gain hands-on experience, develop your professional skills, and network with experts in your field. An internship at Cognizant is a stepping stone to full-time employment and a chance to see how your studies apply in the real world.

Professional Growth and Development

Cognizant is committed to the professional growth of its employees. With access to cutting-edge training, leadership programs, and diversity initiatives, you can build a career that’s equipped for the demands of tomorrow’s business landscape.

Benefits and Culture

Our employees enjoy a range of benefits designed to support their physical, financial, and emotional well-being. Cognizant’s culture is built on a foundation of respect and inclusivity, where everyone’s contribution is valued. Join us and be part of a team that celebrates diversity and is driven to make a positive impact on the world.

Stay Connected

Join Our Team Search open positions that match your skills and interests. We look for passionate, curious, creative, and solution-driven team players. Ready to take the next step in your career journey? Explore the exciting employment and career opportunities waiting for you at Cognizant.

Keep Up to Date

Stay ahead with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the people who work here.

Job Alert Emails

Personalize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Discover the rewarding opportunities that await at Cognizant.

Networking and Interviews

Enhance your career prospects at Cognizant through our robust networking events. Prepare your resume, sharpen your interview skills, and connect with leaders across the industry to unlock new career paths. At Cognizant, we don’t just offer jobs; we offer career journeys. Be part of a team that’s committed to your long-term career growth and professional development. Join Cognizant today and be a part of our success story.
Learn more about Cognizant
Size
340,400 employees
Market Cap
$28.7 billion
Industry
Information Technology
Net Income
$1.3 billion
Founded
1994
5 Year Trend
+6.5%
Revenue
$16.6 billion
NASDAQ
CTSH
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Cognizant

More Information Technology Jobs

Find similar Threat Modeling Specialist jobs:

NationwideToronto, ON