Job Description

Overview The Financial Crimes Unit (FCU) brings together our Cybersecurity, Fraud, Physical Security and Resilience Planning capabilities to address the ever‑growing and increasingly complex global security environment. It is a highly collaborative effort that greatly enhances BMO’s ability to rapidly prevent, detect, respond to, and recover from all security and crisis threats. As an Application Security Threat Modeling Consultant, you will be part of the Application Security Risk Assessments team within Cybersecurity. The team performs assessments of applications and technology designs to identify threats and potential risks early in BMO Financial Group’s SDLC and risk‑management process. You will take a collaborative approach to mature application security threat‑modeling practices, identify relevant security threats to business technology, help colleagues continuously improve security practices, and secure and enable business objectives. Responsibilities Perform high‑quality application security assessments producing easy‑to‑understand threat‑modeling artifacts and communicate potential risks effectively to stakeholders. Track assessments and remediation activities to follow through on risk mitigation. Be integral in continuously maturing threat‑modeling practices and the application security risk assessment program. Maintain an understanding of available security requirements, design patterns, and identify gaps that require improvement opportunities. Keep abreast of new technology trends and associated risks in application development practices, frameworks, cloud services, and modern data‑store platforms, applying this knowledge during threat‑modeling exercises. Broader work or accountabilities may be assigned as needed. Skills and Experience Proficient working knowledge of threat‑modeling methodologies (e.g., Attack Trees, MSTM/STRIDE, PASTA) or architecture risk analysis. 3+ years of relevant experience in cybersecurity. Strong ability to decompose applications and system designs in hybrid cloud architectures to identify potential threats. Proficient experience in application security and security risk‑management practices. Experience working in Agile methodologies. Knowledge of DevOps practices and a passion for championing a security‑first, DevSecOps culture. Preferred prior experience in software development (e.g., Java, JavaScript, Python). Advanced analytical skills with proficient communication and negotiation skills. Empathetic, problem‑solving mindset with high integrity. Post‑secondary degree in Computer Science, Engineering, Information Systems, or related field, or equivalent education and experience. Industry certifications such as CISM, CISSP, GIAC, or CEH. Salary $88,800.00 – $165,600.00 (Salaried) Salary may vary based on location, skills, experience, education, and qualifications for the role. It may include performance incentives and discretionary bonuses. Benefits Health insurance, tuition reimbursement, accident and life insurance, retirement savings plans, and other perks. About Us At BMO we are driven by a shared purpose: Boldly Grow the Good in business and life. We collaborate, innovate, and push boundaries to transform lives and businesses and power economic growth worldwide. As a member of the BMO team, you are valued, respected, and heard. You will be supported with tools, resources, training, coaching, and network‑building opportunities to grow from day one. Equal Opportunity Statement BMO is a proud equal‑employment‑opportunity employer. We evaluate applicants without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, disability, or other legally protected characteristics. We also consider applicants with criminal histories in accordance with applicable laws. BMO provides reasonable accommodations to individuals with disabilities upon request. #J-18808-Ljbffr BMO U.S.

Job Tags

Similar Jobs