Web Security and Privacy Specialist

Estoras Group

. Review the project's application, identity, AWS, and integration controls .

Posted 9/22/2026contractRemote • Canada, United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Web/API Security Assessment, Threat Modelling, and Vulnerability Remediation while ensuring compliance with Canadian privacy requirements. Strong collaboration and documentation skills are essential for effective coordination with technical delivery teams and stakeholders.

Highest-signal resume keywords

Web/API Security AssessmentThreat ModellingVulnerability RemediationIdentity and Least-Privilege Access ControlsKnowledge of Canadian Privacy Requirements

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Web/API Security AssessmentThreat ModellingVulnerability RemediationIdentity and Least-Privilege Access ControlsEncryption and Secrets ManagementAudit LoggingSecurity Test ScopingRisk Reporting

Soft Skills

CollaborationClear Documentation

Industry Keywords

Canadian Privacy RequirementsConsentRetentionResidencyYouth-Data Considerations

Tech Stack

Tools & technologies

AWS

About the role

Key responsibilities & impact

Review the project's application, identity, AWS, and integration controls
Identify security and privacy risks
Coordinate agreed security testing
Verify remediation with the delivery team and the Client's responsible stakeholders
Collaborate with Archive's technical delivery team and the Client's internal team
Produce clear documentation and support technical delivery and handover

Requirements

What you’ll need

Web/API security assessment
Threat modelling
Vulnerability remediation
Identity and least-privilege access controls
Encryption and secrets management
Audit logging
Knowledge of Canadian privacy requirements, consent, retention, residency, and youth-data considerations
Security test scoping
Risk reporting
Coordination of independent testing where required
5 to 10 years of relevant experience
Must be located in Canada; contractor located in Canada or the USA preferred
Availability during standard EST business hours
Fluency in spoken and written English
Fluency in spoken and written French is a huge asset

Benefits

Comp & perks

Remote work
Opportunity to work on a bilingual digital platform for a nonprofit organization
Nonprofit or education experience is an asset
Opportunity for qualified people to cover more than one role