Information Security Engineer

Inclusion without Exception

Tata Consultancy Services (TCS) is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to create a workforce that reflects the societies we operate in. Our continued commitment to Culture and Diversity is reflected in our people’s stories across our workforce and implemented through equitable workplace policies and processes.

About TCS

TCS is an IT services, consulting, and business solutions organization that has been partnering with many of the world’s largest businesses in their transformation journeys for over 55 years. Its consulting-led, cognitive-powered portfolio of business, technology, and engineering services and solutions is delivered through its unique Location Independent Agile™ delivery model, recognized as a benchmark of excellence in software development. A part of the Tata group, India's largest multinational business group, TCS employs over 612,000 of the world’s best-trained consultants in 55 countries. The company generated consolidated revenues of US $29 billion in the fiscal year ended March 31, 2024, [BS1] and is listed on the BSE and the NSE in India. TCS' proactive stance on climate change and award-winning work with communities across the world have earned it a place in leading sustainability indices such as the MSCI Global Sustainability Index and the FTSE4Good Emerging Index.

Job Description:

Skills and Responsibilities:

•Information Security II Must-Have Conducts security risk assessments of applications with respect to design and implementation of system and application code

•Develop and manage security governance processes and procedures for the threat modeling program and application security design & devsecops programs.

•Assist in the development of threat modeling governance documentation.

•Works with information security leadership to develop strategies and plans to enforce threat modeling and address identified control gaps.

•Develops reports for management concerning residual risk and non-compliance.

•Monitor and track compliance with application owners to ensure implementation of security controls as planned.

•Review issued security controls with application owners to ensure identified requirements are implemented.

•Validate implementation of security controls against outputs of scanning tools to enable auditability and verifiability.

•Assist application owners in filing appropriate security standard exceptions as identified through threat modeling.

•Develop, Maintain, update and enhance secure design patterns and secure coding standards.

•Develop, Maintain, update and enhance threat libraries.

•Socialize secure design patterns and secure coding standards with engineering teams.

•Assist application teams with threat modeling consultancy questions.

•Consistently enable strong developer and customer experience when liaising with application teams.

•Uphold Blue Box values when liaising with application teams.

•Develop innovative attack techniques to foil protective design and in-place mitigations.

•Participate in the development of strategies for information security processes and programs.

•Support the investment decision process by developing business cases and cost benefit analysis.

•Create reports and other materials to assist in prioritizing activities related to various threats to applications Preferred Qualifications

•Experience with threat mode.

Tata Consultancy Services Canada Inc. is committed to meeting the accessibility needs of all individuals in accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and the Ontario Human Rights Code (OHRC). Should you require accommodation during the recruitment and selection process, please inform Human Resources.

Thank you for your interest in TCS. Candidates that meet the qualifications for this position will be contacted within a 2-week period. We invite you to continue to apply for other opportunities that match your profile.