Director, Security Architecture & Threat Modeling

Varicent • Toronto, ON

23h • CA$138,200 - CA$181,400 • Hybrid

About The Position

We're looking for a hands-on and strategic Director, Application Security Architecture & Threat Modeling to help shape secure-by-design principles across our SaaS platforms, cloud environments, and AI-enabled products. In this role, you'll partner closely with Engineering, Product, Cloud Operations, Architecture, AI, and Security teams to embed security early in the development lifecycle. You'll lead application security architecture, threat modeling, secure design reviews, and AI security initiatives while helping teams build scalable, resilient, and secure solutions. This is a highly visible leadership role reporting directly to the VP & Chief Information Security Officer.

Requirements

• 10+ years of Information Security experience.
• 3+ years of Application Security Architecture and Threat Modeling experience.
• 3–5 years of Software Development or Software Engineering experience.
• Strong understanding of secure application design, cloud security, and modern software architectures.
• Experience with DevSecOps, secure SDLC practices, and AI-enabled development environments.
• Expertise in threat modeling methodologies such as STRIDE, CAPEC, and MITRE ATT&CK.
• Experience securing web, API, mobile, cloud-native, and AI-enabled applications.
• Knowledge of AWS, Azure, or IBM Cloud security architectures.
• Strong communication skills with the ability to influence stakeholders at all levels.

Nice To Haves

• Certifications such as CISSP, CSSLP, ISSAP, CISM, CRISC, OSCP, or cloud security certifications are considered an asset.

Responsibilities

• Lead Security Architecture & Secure-by-Design: Define and execute the Security Architecture and Security-by-Design strategy and roadmap. Establish secure reference architectures, design standards, and security patterns for cloud-native and AI-enabled solutions. Partner with Engineering and Product teams to embed security into development workflows and system design decisions. Drive adoption of secure-by-design best practices by embedding security requirements in epics, user stories and the AI SLDC.
• Drive Threat Modeling & Risk Analysis: Produce actionable threat modeling artifacts including data flow diagrams, trust boundary analysis, abuse cases, attack paths, security requirements, technical specifications, design risks, remediation actions, and residual risk documentation. Analyze recurring vulnerabilities, penetration test results, incident learnings, and security assessment findings to identify systemic design flaws and improve secure architecture standards. Lead threat modeling activities across critical applications, platforms, and AI-enabled systems. Identify architectural risks, attack paths, abuse cases, and trust boundary concerns. Translate threats into actionable security requirements and remediation guidance. Build reusable threat models, security patterns, and design libraries that scale across engineering teams.
• Partner with Engineering Teams: Guide teams on secure design principles, risk-based decision making, and security tradeoffs. Review distributed systems, microservices, cloud-native architectures, APIs, mobile applications, and identity solutions. Support remediation efforts and validate architectural fixes for security findings.
• Secure Cloud & AI Platforms: Conduct architecture reviews across AWS, Azure, and IBM Cloud environments. Assess containerized, Kubernetes, serverless, and AI-enabled architectures. Define cloud security guardrails, governance models, and secure deployment patterns. Partner with AI teams to evaluate security risks within LLM-enabled products and agentic workflows.
• Influence Across the Organization: Collaborate with Security, Engineering, Architecture, Legal, Compliance, and Product stakeholders. Develop security standards, training, and architecture guidance. Communicate architectural risk and security recommendations to technical and executive audiences.

Benefits

• Comprehensive medical, dental, and vision coverage tailored to your local needs
• PTO and public holidays to rest, recharge, and do what matters most
• Dedicated time to give back and support the communities that matter to you
• Dedicated learning days to support continuous growth, skill development, and professional learning
• Compensation that reflects your market and your value
• Retirement plans designed to help you build long-term financial security
• Invest in your growth with support for continuing education and professional development
• Work where you thrive, with remote and hybrid options available across most regions

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed