Senior Security Detection Engineer; Global Security

Job Description

The role of the Senior Security Detection Engineer is to provide specialized subject‑matter expertise for the Detection Engineering & Automation (DEA) team within RBC’s Global Cyber Security. This key technical position supports mission‑critical enterprise network security operations and IT services protection by developing automation for new and existing security use cases to reduce mean time to detect and respond to incidents.

• Provide global accountability for technical and subject‑matter expertise supporting cyber use cases derived from security systems and infrastructure for security monitoring.
• Collaborate with RBC technology and application partners (Cybersecurity, Technology Infrastructure, SOC) to develop and strengthen continuous security monitoring use cases.
• Develop runbooks for use cases that align with security operations processes and streamline incident investigation and response tasks.
• Partner with Defensive Threat Operations Correlation Engineering to facilitate log ingestion and use case development in SIEM platforms.
• Periodically review the use case library, perform attestations, participate in tuning discussions, and provide improvement recommendations where needed.
• Maintain communication with various security groups, SOC leadership, and technology stakeholders.
• Develop processes to support a maturing program.
• Provide operational metrics and reports as required.

• 2 to 5 years of industry experience.
• Experience in cloud environments (AWS, Azure, GCP, OCP).
• Intermediate experience with Python.
• Experience building detections in SIEM.
• Experience with automation in SOAR.
• Educational background in IT, engineering, cybersecurity, or equivalent relevant experience.
• Demonstrated technical leadership ability.
• In‑depth understanding of Security Operations and security technologies, with prior SOC experience.
• Knowledge of common exploitation techniques and awareness of emerging threats.
• Strong analytical and complex problem‑solving skills.
• Expert understanding of SIEM technology and operations.
• Robust networking and enterprise IT infrastructure knowledge, including TCP/IP packet‑level knowledge.

• Certifications in information security (GCIH, GCSA, GPCS, GCTD, GCFR).
• Certifications in cloud platforms (AWS, Azure, GCP, or OCP).
• Experience with in a large, global financial services company.
• Understanding of modern, cloud‑centric architectures and Dev Ops principles.

• A comprehensive total rewards program including bonuses, flexible benefits, competitive compensation, commissions, and stock where applicable.
• Leadership that supports your development through coaching and opportunities.
• The ability to make a lasting impact.
• A dynamic, collaborative, progressive, and high‑performing team.
• A world‑class training program in financial services.
• Flexible work/life balance options.
• Opportunities to tackle challenging work.

At RBC, we are guided by shared values of Client First, Integrity, Collaboration, Respect, and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps bring our purpose to life and create value for our clients and communities.

RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging, and opportunity for all.