Senior Threat Modelling Advisor

Desjardins

. Model threats to facilitate understanding of cybersecurity issues that could impact Desjardins Group .

Posted 11/6/2026full-timeMontréal • CanadaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat modeling and vulnerability analysis, with a strong ability to communicate complex cybersecurity concepts in plain language. Proficient in leading workshops and training sessions to enhance organizational threat awareness and response strategies.

Highest-signal resume keywords

Threat Modeling MethodologiesCybersecurity ExperienceVulnerability AnalysisAdvanced French ProficiencyMITRE ATT&CK Framework Familiarity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingVulnerability AnalysisAppSecInfrastructure Offensive SecuritySource Code AnalysisSTRIDE MethodologyOWASP MethodologyData VisualizationRisk AssessmentDefence Mechanisms

Soft Skills

Action OrientedCustomer FocusInterpersonal SavvyNimble LearningStrategic Mindset

Industry Keywords

CybersecurityThreat ActorsExploitation VectorsBusiness ControlsCorporate Environment

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Model threats to facilitate understanding of cybersecurity issues that could impact Desjardins Group
Interact with Cyber Defence, Internal Threats, Projects and Development teams, and others
Identify threat actors, possible exploitation vectors, and potential impact during workshops
Contribute as an expert to enrich defence teams’ action plans
Analyze, map, and explain realistic threats to guide test activities
Communicate identified threats in language suitable for the target audience
Identify relevant test objectives based on business needs
Identify threats based on vulnerability reports
Provide plain-language explanations of attack chains to support Risk team assessments
Lead workshops to produce detailed analyses of hypothetical threats
Train security experts to identify threats in day-to-day operations
Conduct research and development to improve models and methodologies
Independently lead projects and assignments, including meetings, information gathering, time and schedule management, and priority management

Requirements

What you’ll need

Bachelor’s degree in IT or a related field
A minimum of six years of relevant cybersecurity experience
Please note that other combinations of qualifications and relevant experience may be considered
Experience in AppSec and/or infrastructure offensive security
Experience analyzing source codes and identifying vulnerabilities
Experience using threat modelling methodologies such as STRIDE and OWASP or comparable experience visually representing data and process flows in a corporate environment
Advanced proficiency in French, both spoken and written
Intermediate knowledge of English due to the nature of the duties or work tools or because the position involves interactions with English-speaking partners, members and/or clients
General knowledge of defence mechanisms and business controls
Familiarity with the MITRE ATT&CK framework
Action oriented, Customer Focus, Differences, Interpersonal Savvy, Nimble learning, Strategic mindset

Benefits

Comp & perks

Competitive salary and annual bonus
4 weeks of flexible vacation starting in the first year
Defined benefit pension plan that provides predictable, stable income throughout retirement
Group insurance including telemedicine
Reimbursement of health and wellness expenses and telework equipment