Senior Information Security Analyst

Define, develop, and/or implement Technology Controls / Information Security policies, programs, and tools Provide specialized expertise and guidance on assessing risks, identifying gaps, and developing security solutions to mitigate risks and protect the Bank Participate in projects of moderate to high complexity Provide complex reporting, analysis, and assessments at the functional, business line, or enterprise level Deliver timely, actionable cyber and fraud intelligence across TD’s follow-the-sun model Maintain knowledge of emerging threats, cybercriminal ecosystems, ransomware, initial access brokers, and underground marketplaces Monitor internal and external sources for relevant cyber and fraud threats, risks, and events Assess threat actors’ capabilities, intent, targeting, tactics, techniques, and procedures Analyze vulnerabilities and AI-amplified exploitation to guide remediation priorities Partner with Security and Fraud Operations to provide actionable intelligence, triage complex SIEM events, and mitigate threats Advise stakeholders and deliver technical briefings on emerging threats, regulatory requirements, and banking and technology standards Maintain expertise in common fraud threats Identify process improvements, promote risk-reducing behaviors, and manage priorities to meet production schedules Requirements Bachelor's degree preferred Information security certification / accreditation an asset 5-7 years of relevant experience Experience assessing threat actors’ capabilities, intent, targeting, tactics, techniques, and procedures using OSINT, dark web monitoring, internal telemetry, and technical research Experience with intelligence frameworks and methods, including MITRE ATT&CK, Cyber Kill Chain, the Diamond Model, attribution analysis, and analysis of competing hypotheses Experience with vulnerability and AI-amplified exploitation analysis using CVE, CVSS, exposure, and enterprise patching data Experience with AI, scripting, and automation for threat analysis, attribution, and assessment Knowledge of emerging threats, cybercriminal ecosystems, ransomware, initial access brokers, and underground marketplaces Advanced knowledge of technology controls / security domains, disciplines, and practices Proficient to advanced knowledge of organization, technology controls, security, and risk issues Ability to triage complex SIEM events Knowledge of cyber and fraud threats, including ransomware, account takeover, compromised credentials, phishing, smishing, account fraud, and impersonation scams Occasional domestic travel Ability to perform sedentary work, multiple tasks, operate standard office equipment, concentrate for long periods, and read, write, and comprehend instructions continuously Ability to lift/carry under 25 lbs. occasionally Core Competencies Demonstrates expertise in Information Security policies, risk assessment, and threat analysis, with a strong focus on emerging cyber threats and fraud intelligence. Proficient in utilizing intelligence frameworks and automation tools to enhance security measures and mitigate risks. Highest-signal resume keywords Information Security Certification Threat Actor Analysis MITRE ATT&CK Framework Vulnerability Analysis SIEM Event Triage Hard Skills Risk Assessment Threat Analysis Vulnerability Analysis Cybersecurity Policies Automation for Threat Analysis Technical Research Fraud Intelligence Cyber Kill Chain CVE and CVSS Knowledge Process Improvement Soft Skills Stakeholder Communication Analytical Thinking Problem Solving Prioritization Collaboration Certifications & Qualifications Information Security Certification Industry Keywords Cyber Threats Fraud Threats Ransomware Cybercriminal Ecosystems Initial Access Brokers Underground Marketplaces Risk Management Security Controls Banking Standards Regulatory Requirements Tools & Technologies SIEM Tools OSINT Tools Dark Web Monitoring Technical Research Tools Automation Tools #J-18808-Ljbffr