Senior Information Security Analyst

• Define, develop, and/or implement Technology Controls / Information Security policies, programs, and tools
• Provide specialized expertise and guidance on assessing risks, identifying gaps, and developing security solutions to mitigate risks and protect the Bank
• Participate in projects of moderate to high complexity
• Provide complex reporting, analysis, and assessments at the functional, business line, or enterprise level
• Deliver timely, actionable cyber and fraud intelligence across TD’s follow-the-sun model
• Maintain knowledge of emerging threats, cybercriminal ecosystems, ransomware, initial access brokers, and underground marketplaces
• Monitor internal and external sources for relevant cyber and fraud threats, risks, and events
• Assess threat actors’ capabilities, intent, targeting, tactics, techniques, and procedures
• Analyze vulnerabilities and AI-amplified exploitation to guide remediation priorities
• Partner with Security and Fraud Operations to provide actionable intelligence, triage complex SIEM events, and mitigate threats
• Advise stakeholders and deliver technical briefings on emerging threats, regulatory requirements, and banking and technology standards
• Maintain expertise in common fraud threats
• Identify process improvements, promote risk-reducing behaviors, and manage priorities to meet production schedules

• Bachelor's degree preferred
• Information security certification / accreditation an asset
• 5-7 years of relevant experience
• Experience assessing threat actors’ capabilities, intent, targeting, tactics, techniques, and procedures using OSINT, dark web monitoring, internal telemetry, and technical research
• Experience with intelligence frameworks and methods, including MITRE ATT&CK, Cyber Kill Chain, the Diamond Model, attribution analysis, and analysis of competing hypotheses
• Experience with vulnerability and AI-amplified exploitation analysis using CVE, CVSS, exposure, and enterprise patching data
• Experience with AI, scripting, and automation for threat analysis, attribution, and assessment
• Knowledge of emerging threats, cybercriminal ecosystems, ransomware, initial access brokers, and underground marketplaces
• Advanced knowledge of technology controls / security domains, disciplines, and practices
• Proficient to advanced knowledge of organization, technology controls, security, and risk issues
• Ability to triage complex SIEM events
• Knowledge of cyber and fraud threats, including ransomware, account takeover, compromised credentials, phishing, smishing, account fraud, and impersonation scams
• Occasional domestic travel
• Ability to perform sedentary work, multiple tasks, operate standard office equipment, concentrate for long periods, and read, write, and comprehend instructions continuously
• Ability to lift/carry under 25 lbs. occasionally

Demonstrates expertise in Information Security policies, risk assessment, and threat analysis, with a strong focus on emerging cyber threats and fraud intelligence. Proficient in utilizing intelligence frameworks and automation tools to enhance security measures and mitigate risks.

• Information Security Certification
• Threat Actor Analysis
• MITRE ATT&CK Framework
• Vulnerability Analysis
• SIEM Event Triage

• Risk Assessment
• Threat Analysis
• Vulnerability Analysis
• Cybersecurity Policies
• Automation for Threat Analysis
• Technical Research
• Fraud Intelligence
• Cyber Kill Chain
• CVE and CVSS Knowledge
• Process Improvement

• Stakeholder Communication
• Analytical Thinking
• Problem Solving
• Prioritization
• Collaboration

• Information Security Certification

• Cyber Threats
• Fraud Threats
• Ransomware
• Cybercriminal Ecosystems
• Initial Access Brokers
• Underground Marketplaces
• Risk Management
• Security Controls
• Banking Standards
• Regulatory Requirements

• SIEM Tools
• OSINT Tools
• Dark Web Monitoring
• Technical Research Tools
• Automation Tools