FREE ACCESS
5,000–10,000 jobs/day
See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Information Security Specialist – Attack Surface Reduction
TDInformation Security Specialist reducing attack surfaces at TD, a global financial institution. Hunting threats, analyzing security data, and improving detection across enterprise and cloud environments.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in threat hunting, risk assessment, and security control gap analysis, utilizing the MITRE ATT&CK framework and advanced cybersecurity tools. Proficient in developing detection methodologies, producing metrics, and collaborating with cross-functional teams to enhance the security posture of the organization.
Highest-signal resume keywords
Threat HuntingMalware Reverse EngineeringSIEM Platform MechanicsSplunk ESEndpoint Security
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Threat DetectionLog ManagementSecurity AnalyticsCodingScriptingAPIsComplex Analytics QueriesData AnalysisNetwork ProtocolsOperating Systems
Soft Skills
Excellent Communication SkillsOrganizational SkillsSelf-Directing Skills
Tools & Technologies
SIEMSOAREDRSplunkCrowdStrikeLogscaleDefender for EndpointMS SentinelWiz DefendNetskope
Industry Keywords
CybersecurityThreat IntelligenceIncident ResponseCloud SecurityForensics
Tech Stack
Tools & technologiesCloudCyber SecurityDNSLinuxSMTPSplunkTCP/IP
About the role
Key responsibilities & impact- Hunt for TTPs, threats, risks, and vulnerabilities aligned to the MITRE ATT&CK framework using internal and external intelligence data
- Identify threats, risks, and security control gaps and produce detection and mitigation recommendations to reduce the bank’s attack surface
- Participate in proactive attack surface reduction operations across enterprise and cloud environments
- Use threat intelligence, anomalous log analysis, and brainstorming-session results to detect and mitigate threats
- Develop methodologies to identify adversary tools, techniques, and procedures
- Produce metrics and dashboards identifying potential threats, suspicious or anomalous activity, and malware
- Tune detection infrastructure with technology teams to identify emerging threats
- Document best practices for hunting playbooks, procedures, and courses of action
- Serve as a subject matter expert in host-based and network-based hunting analysis
- Collaborate with intelligence, SOC, incident response, and security engineering teams
- Review internal processes and activities and identify improvement opportunities
- Influence behavior to reduce risk and strengthen the enterprise information security culture
- Monitor emerging issues, industry trends, and relevant changes to the security landscape
Requirements
What you’ll need- Bachelor’s degree in an IT/cyber-related field or equivalent experience
- At least 7+ years of cybersecurity experience
- 3+ years of experience in malware reverse engineering, threat hunting, DFIR, threat detection, or threat intelligence preferred
- Expert knowledge of log management, security analytics, and SIEM platform mechanics
- Experience with SIEM, SOAR, EDR, cloud-native tools, and other cybersecurity toolsets
- Advanced knowledge of Endpoint and Identity/IAM architectures, operations, and investigations
- Proficiency with Splunk ES, CrowdStrike, Logscale, Defender for Endpoint (MDE), MS Sentinel, and Wiz Defend
- Hands-on experience with Netskope, Akamai, AppOmni, Qualys, and Symantec DLP is optional/good to have
- Deep understanding of coding, scripting, and APIs for investigations, automation, and integrations
- Ability to identify and generate detection logic
- Experience writing and implementing complex analytics queries, threat visualization dashboards, and large-volume data analysis using tools such as Splunk, Logscale, KQL, and syslog
- Strong knowledge of network protocols, ports, and common services including TCP/IP, HTTP/S, DNS, FTP, SMTP, and Active Directory
- Extensive knowledge of Windows, Mac, and Linux endpoints, operating systems, services, file systems, and agents
- Excellent written and oral communication skills
- Organizational and self-directing skills
- Ability to initiate, coordinate, prioritize, and complete responsibilities with minimal supervision
- Ideal/preferred candidates have at least two certifications from the listed general cyber, endpoint/forensic, cloud, penetration-testing, or coding/scripting/SIEM certifications
Benefits
Comp & perks- Base salary of $96,900 - $136,800 CAD
- Health and well-being benefits
- Savings and retirement programs
- Paid time off
- Banking benefits and discounts
- Career development
- Reward and recognition programs
- Regular development conversations
- Training programs
- Online learning platform
- Mentoring programs
- Training and onboarding sessions
- Accessibility accommodations during the interview process