Senior Analyst, Incident Response

At Raymond James, we develop, we collaborate, we decide, we deliver, and we improve together.

Raymond James Ltd. is Canada’s leading independent investment dealers offering high quality investment products and services to Canadians seeking customized solutions to their wealth management needs.

The financial services industry is constantly under attack by sophisticated cyber adversaries that range from nation states to criminals. In response, the Raymond James Cyber Threat Center (CTC) is charged with ensuring all equities are secure against all tiers of adversaries. We are the central hub for Computer Network Operations and are on the front lines of security incident response, threat hunting, and intelligence.

You'll be working with emerging technologies to solve challenging security problems in a fast-paced and continuously evolving environment, while helping steer the direction and evolution of the team. This highly visible team within the organization evaluates threats to the environment and dynamically adjusts to the ever-changing threat landscape by applying practical security knowledge to developing new detective measures to protect the firm.

• Serves as a primary member of the Cyber Threat Center (CTC) who handles security events and incidents daily in a fast-paced environment.
• Acts as an Incident Handler who can handle minor and major security incidents within the defined Computer Security Incident Response process.
• Ensures continuity of mission between Incident Response shifts.
• Role embodies Cyber Network Defense, and a successful Cyber Threat Analyst will be able to quickly analyze threats, understand risk, deploy effective countermeasures, make business critical incident response decisions, and work as part of a team of individuals dedicated to protecting the firm.
• Maintains situational awareness for cyber threats across the global firm and act where necessary.
• Daily responsibilities include, but are not limited to:
  • Countermeasure deployment across various technologies.
  • Malware and exploit analysis.
  • Intrusion monitoring and response.
  • Assessing alerts and notifications of event activity from intrusion detection systems and responding accordingly to the threat.
  • Continuing content development of threat detection and prevention systems.
  • Data analysis and threat research.
  • Creation of IR playbooks, and leading IR automation initiatives.
  • Coaching and mentorship of IR team peers.
• Maintains knowledge of security principles and best practices. Must remain current with emerging threats and trends.
• Assists teams in various security and privacy risk mitigation efforts, including incident response.
• Leads information security related projects or in managing strategy.
• Conduct forensic investigations for HR, Legal, or incident response related activities.
• Develop new forensic detective and investigative capabilities using current technical solutions.
• Work with various business units and technical disciplines in a security consultant, incident response subject matter expert role for cyber threats.
• Shares in a weekly on-call rotation and acts as an escalation point for managed security services and associates of Raymond James.

Our most important investment is in people. Upon eligibility, Raymond James Ltd offers flexible work styles, a competitive compensation and benefits package. Our benefits range from Health Benefits, RRSP Matching Program, Employee Stock Purchase Plan, Paid Time Off, Volunteer Days, Discretionary Bonuses, Tuition Reimbursement and many more! We also support internal promotion and community involvement.

• B.S. in Computer Science, Computer Engineering, MIS, or related degree;
• A minimum of 5 years in Information Technology, including with at least 3 years of related experience in Information Security, 2 years in conducting Cyber Network Defense, and 3 years of experience with incident response methodologies, malware analysis, penetration testing, scripting and/or forensics; or
• An equivalent combination of education, training, and experience.
• I…