Montréal,

Description: You will be joining Accenture's global application security advisory services practice, working as part of the rapidly expanding Canadian team to help clients build & operate their application security programs. Your first project will center around threat modelling applications and systems for clients, providing remediation support, and driving a program/project agenda to help our clients reduce risk.

In the longer run, you will be the face of Accenture and provide clients with a variety of services, including security remediation & scanning support, application security testing and/or threat assessments (e.g DAST, SAST, SCA, pen tests, threat models), perform gap and maturity assessments, participate in security champions programs, assist in driving programs/project agendas to keep clients and team mates on track, etc. You will be given opportunities to help clients develop their software security programs & strategy, advise them on the latest trends and tooling, build operational efficiency, scale their businesses, contribute to the local Canadian practice, etc.

As part of the global Accenture Technology group, you'll get international exposure to a variety of clients, industries, technologies, projects, frameworks, cloud providers, subject matter experts, learning resources, etc. At an amazing scale and scope that will ensure you're always learning, growing, and doing meaningful work that help you, your team-mates, and our clients succeed.

Requirements:

+ Fluent in French and English (spoken/written)

+ Prior experience with threat modelling or at least a basic understanding of methodologies such as STRIDE and resources such as the MITRE ATT&CK framework

+ Can read/write code in at least one programming/scripting language and open to learning more

+ 4+ years of experience delivering application security projects/services or equivalent industry experience in related fields such as software engineering/programming, cloud, quality assurance, etc.

+ Basic understanding of agile/DevOps methods

+ Understand basic software development concepts and tooling (typical SDLC, IDEs, pipelines, code repositories, able to read design documents, etc)

+ Familiar with basic risk management concepts (e.g. risk and vulnerability ratings, activities in a typical threat-risk assessment, impact/likelihood, etc)

+ Understand basic networking concepts (e.g. DNS, LANs/WANs/VLANs, common protocols like HTTP(s), etc)

+ Understanding of basic application security vulnerabilities (e.g. OWASP Top 10)

+ Strong presentation, speaking, collaboration, and writing skills

+ Curious, self-motivated, life-long learner, empathetic, collaborative, comfortable with uncertainty.

+ Willing and able to obtain Canadian federal Reliability security clearance

Good to have:

+ Bachelors’ degree in Computer science, CIS/MIS, engineering, information security, or related

+ Industry recognized certification such as CISSP, CSSLP, CISM, etc

+ Prior experience in consulting

+ Prior experience performing DAST/SAST/SCA scans or pen tests, standing up and configuring appsec tools, and/or integrating tools into a development pipeline

+ Basic cloud proficiency with GCP, AWS, or Azure

+ Understand basic networking concepts (e.g. DNS, LANs/WANs/VLANs, common protocols like HTTP(s), etc)

Montréal,

Accenture is a global management consulting, technology services and outsourcing company. Combining unparalleled experience, comprehensive capabilities across all industries and business functions, and extensive research on the world’s most successful companies, Accenture collaborates with its clients to help them become high-performance businesses and governments.

Working with Accenture in the United States,  you can join ranks with more than 211,000 people in 120 countries and work with clients in nearly every major industry worldwide, including 96 of the Fortune Global 100, more than three-quarters of the Fortune Global 500 and government agencies around the world. Accenture’s people build careers in different areas of business, specifically Consulting, Technology and Outsourcing, as well as within our internal corporate functions.

With the breadth of talent our people have, they not only build strong careers, they offer their talents and skills to help clients and communities around the world.