Web Security and Privacy Specialist

This is a fully remote position, open to applicants in Canada, +1 more country.

📋 Description

• Assess the application's functionalities, identity management, AWS, and integration safeguards.

• Detect potential security and privacy vulnerabilities.

• Organize agreed-upon security testing efforts.

• Confirm remediation actions with the delivery team and the Client's designated stakeholders.

• Work in conjunction with Archive's technical delivery team and the Client's internal personnel.

• Create comprehensive documentation to facilitate technical delivery and transition.

⛳️ Requirements

• Experience in web/API security evaluations.

• Proficiency in threat modeling techniques.

• Skills in vulnerability remediation processes.

• Understanding of identity management and least-privilege access protocols.

• Knowledge of encryption and secrets management practices.

• Familiarity with audit logging requirements.

• Awareness of Canadian privacy regulations, including consent, retention, residency, and considerations for youth data.

• Ability to define security test scopes.

• Experience in risk reporting methodologies.

• Capability to coordinate independent testing when necessary.

• 5 to 10 years of applicable experience.

• Must reside in Canada; contractors located in Canada or the USA are preferred.

• Availability during standard EST business hours.

• Proficiency in both spoken and written English.

• Fluency in spoken and written French is a significant advantage.

🏝️ Benefits

• Option for remote work.

• Chance to contribute to a bilingual digital platform for a nonprofit organization.

• Previous experience in nonprofit or educational settings is considered an asset.

• Eligible individuals may have the opportunity to handle multiple roles.