Senior Information Security Analyst

• Proactively and continuously monitor internal and external landscapes for cyber and fraud events, risks, and threats
• Use OSINT research and tooling to investigate priority threats
• Apply the MITRE ATT&CK framework and threat actor tradecraft
• Identify indicators of compromise and provide actionable intelligence to Threat Management teams
• Partner with Threat Management teams to support technical analysis of malicious cybersecurity incidents
• Conduct deep and dark web research
• Author and review intelligence products and communications for stakeholders, operational personnel, and leadership
• Provide expertise and consultation on current and emerging threats relevant to TD and the financial sector
• Review internal processes and activities to identify improvement opportunities
• Influence behavior to reduce risk and foster technology risk management culture
• Develop and deliver briefings on cyber, fraud, and supply-chain threats to the financial sector
• Participate in the team's follow-the-sun operating model and on-call rotation

Requirements

• University degree
• 5-7 years of relevant experience
• Experience using common intelligence processes and tools, including a threat intelligence platform
• Superior communication skills and ability to translate complicated threat actor behavior to an executive audience
• Demonstrated tradecraft in open-source collection
• Excellent time management skills, including ability to perform to a production calendar
• Ability to stay abreast of emerging threat actor TTPs
• Advanced ability to apply real-world geopolitical indicators to forecast threat actor cyber and fraud behavior
• Knowledge of the current threat landscape, banking and technology standards, and regulatory requirements
• Ability to work independently, take initiative, and collaborate effectively across regions, functions, and teams
• Information security certification/accreditation is an asset
• Must meet hybrid work requirements, including working from the office a minimum of two days per week
• On-call availability from 19:00 to 07:00 ET on assigned coverage days, including weekends and designated weekdays

Core Competencies

Demonstrates expertise in threat intelligence analysis, utilizing the MITRE ATT&CK framework and OSINT research to identify and mitigate cyber and fraud risks in the financial sector. Capable of delivering actionable intelligence and briefings to stakeholders while fostering a culture of technology risk management.

Highest-signal resume keywords

• Threat Intelligence Analysis
• MITRE ATT&CK Framework
• Open-Source Intelligence (OSINT)
• Cybersecurity Incident Response
• Communication Skills

Hard Skills

• Threat Intelligence Platform
• Indicators of Compromise
• Geopolitical Indicators
• Threat Actor TTPs
• Cyber Risk Management

Soft Skills

• Time Management
• Collaboration
• Initiative

Certifications & Qualifications

• Information Security Certification

Industry Keywords

• Cybersecurity
• Fraud Prevention
• Financial Sector
• Regulatory Requirements

Tools & Technologies

• OSINT Tools
• Intelligence Processes