Skip to main content

Solutions Security Architect

Auto-translated from French · original: Architecte sécurité des solutions

5 day week30 days PTOOnsite · Montreal, QC, Canada

Company Description

Ubisoft is a global leader in video games, with teams spread across the four corners of the world creating original and memorable gaming experiences, from Assassin's Creed to Rainbow Six, including Just Dance and many more. We believe that diversity of perspectives drives progress for both players and teams. If you are passionate about innovation and want to push the boundaries of entertainment, join our adventure and help us create the unknown!

Job Description

As a Solutions Security Architect at Ubisoft Montréal, you will join the Security and Risk Management team. You will contribute to defining and implementing security controls, support risk reduction initiatives, and deploy security solutions across the Ubisoft group, notably for productions related to Anvil and Snowdrop.

What you will do

  • Contribute to security initiatives by taking part in development activities, identifying and fixing vulnerabilities, implementing security requirements, and deploying security solutions
  • Support the deployment and maintainability of security tools used by operational teams
  • Assess and reduce risks affecting services and development teams, taking real threats into account
  • Collaborate with security engineering leads and enterprise security specialists to align solutions with domain standards and needs
  • Take part in the design, development, and deployment of security solutions used in Ubisoft services and products
  • Support secure development practices in projects related to Anvil and Snowdrop
  • Document implemented security changes and improvements
  • Share your knowledge and support development and operations teams on security-related topics

Qualifications

  • Experience with CI/CD pipelines, DevOps practices, and integrating security tools such as SAST, SCA, or DSA
  • Experience in software development and application security, including OWASP practices
  • Good knowledge of C#, Go, Python, and/or JavaScript
  • Knowledge of OAuth standards, authentication mechanisms, Azure OIDC, and AWS
  • Knowledge of threat modeling processes
  • Familiarity with software supply chain security and secrets management solutions such as HashiCorp Vault
  • Experience in penetration testing or activities such as Capture the Flag (CTF) is an asset
  • Excellent communication, collaboration, and knowledge-sharing skills

Additional Information

What to send us

  • Your CV highlighting your skills
  • Relevant projects or achievements related to the role