FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Information Security Design Specialist
Dentons. Conduct threat modelling and security design reviews for application features, APIs, integrations, SaaS platforms, cloud services, and enterprise technologies .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in security architecture, including Microsoft Azure, Microsoft 365, and identity security, while effectively translating business requirements into secure design decisions. Proficient in threat modeling, risk assessments, and developing security reference architectures and design patterns.
Highest-signal resume keywords
Security ArchitectureThreat ModellingMicrosoft Azure SecurityRisk AssessmentsIdentity Security
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Threat ModellingSecurity Design ReviewsArchitecture AssessmentsCloud SecurityApplication SecurityData ProtectionAPI SecurityEncryptionZero TrustSecure Design Principles
Soft Skills
Strong Written CommunicationInfluencing Without AuthorityCuriosityCollaborationMentoring
Tools & Technologies
Microsoft AzureMicrosoft 365Entra IDDefenderSentinelCloud NetworkingAutomation ToolsSecurity Frameworks
Certifications & Qualifications
CISSPCCSPCISMGIACSABSATOGAFMicrosoft Security
Industry Keywords
CybersecurityCloud SecurityInfrastructure SecurityTechnology RiskData GovernancePrivacyDLPOWASPNISTISO 27001
Tech Stack
Tools & technologiesAzureCloudCyber Security
About the role
Key responsibilities & impact- Conduct threat modelling and security design reviews for application features, APIs, integrations, SaaS platforms, cloud services, and enterprise technologies
- Translate business requirements into practical security requirements and secure design decisions
- Provide secure design guidance across authentication, authorization, identity, API security, data protection, network security, cloud architecture, and third-party integrations
- Develop, maintain, and promote security reference architectures, design patterns, technical standards, and reusable guidance
- Assess architectures and recommend risk treatments, compensating controls, and design improvements
- Provide architectural input into technology roadmaps, vendor selection, platform modernization, cloud adoption, and secure access initiatives
- Provide security architecture guidance for Microsoft Azure, Microsoft 365, Entra ID, Defender, cloud workloads, secure networking, and enterprise collaboration platforms
- Define identity security patterns, privileged access standards, authentication requirements, service principal controls, and non-human identity considerations
- Provide guidance on data protection, classification, DLP, encryption, information protection, and client data handling
- Lead or support security reviews for AI-enabled solutions, Copilot, Foundry, agentic AI, data-driven platforms, and emerging technologies
- Define secure AI architecture patterns covering data access, identity, logging, monitoring, prompt risk, third-party integrations, and governance
- Drive technical risk assessments for application, infrastructure, SaaS, cloud, AI, and integration changes
- Evaluate vendor security architectures and solution designs
- Translate incident learnings, threat intelligence, and control gaps into design patterns, detection opportunities, developer guidance, and prevention strategies
- Participate in the Security Architecture Review Board and support documented risk decisions
- Support client security assessments, vendor reviews, audit activities, and security control evidence
- Build or guide automation for security design reviews, vulnerability triage, evidence collection, exception management, and repeatable security workflows
- Evaluate and recommend vendor security solutions
- Monitor emerging threats including supply chain attacks, API abuse, identity compromise, ransomware, AI-enabled phishing, and cloud misconfiguration
- Mentor security team members and technology stakeholders
- Serve as a senior technical security authority for the Canada region
Requirements
What you’ll need- Post-secondary education in Information Technology, Computer Science, Cybersecurity, Engineering, or a related discipline, or equivalent practical experience
- Minimum 8+ years of experience in cybersecurity, security architecture, cloud security, infrastructure security, application security, or related technology risk roles
- At least 4+ years of experience designing or reviewing secure enterprise, cloud, identity, SaaS, or application architectures
- Experience conducting threat modelling, secure design reviews, architecture assessments, technology risk assessments, or security control reviews
- Experience with Microsoft Azure security architecture, Microsoft 365 security, Entra ID, Defender, Sentinel, cloud networking, and secure access technologies
- Experience with security frameworks and methods such as NIST, ISO 27001/27002, CIS Controls, MITRE ATT&CK, OWASP, or similar
- Familiarity with AI security, data governance, privacy, DLP, secure software development, API security, or third-party risk is an asset
- One or more relevant certifications such as CISSP, CCSP, CISM, GIAC, SABSA, TOGAF, Microsoft Security, or cloud security certifications are preferred
- Deep understanding of enterprise security architecture, cloud security, identity security, Zero Trust, and secure design principles
- Strong ability to conduct threat modelling and translate findings into practical design requirements and risk-based recommendations
- Advanced knowledge of Microsoft Azure, Microsoft 365, Entra ID, Defender, Sentinel, and modern cloud-native security capabilities
- Understanding of API security, SaaS security, data protection, encryption, authentication, authorization, privileged access, and third-party integration risks
- Ability to communicate with executives, architects, infrastructure teams, application teams, vendors, and business stakeholders
- Strong written communication skills for producing standards, reference architectures, technical guidance, and executive-level summaries
- Ability to influence without direct authority and operate as a trusted advisor across multiple teams and initiatives
- Curiosity and forward-looking mindset regarding AI, automation, emerging threats, cloud transformation, and evolving client expectations
Benefits
Comp & perks- Extended health and mental health benefits
- Paid time off
- Retirement savings plans
- Fitness subsidy
- Parental leave top-up
- Mentorship opportunities
- Employee networks
- Leadership development initiatives
- Inclusive and flexible benefits
- Accessible, barrier-free workplace
- Accommodation during the recruitment process