Sr Information Security Analyst (US) - CSIRT

TD•Mount Laurel, NJ

2d•$79,160 - $127,670•Onsite

About The Position

The Senior Information Security Analyst defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank. Participates on projects of moderate to high complexity and provide complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area.

Requirements

Bachelor's degree preferred
5-7 years of relevant experience
Advanced knowledge of one or more technology controls / security domains, disciplines and practices.
Proficient to advanced knowledge of organization, technology controls / security/ risk issues.

Nice To Haves

Information security certification / accreditation an asset
In depth understanding of security controls/mechanisms and threat/risk assessment techniques pertaining to complex data, application and networking environments.
Expert knowledge of security incident and event management using an enterprise incident management framework, log analysis, network traffic analysis, malware investigation and remediation, SIEM correlation logic and alert generation.
Ability to perform analysis and reporting on information from multiple data sources using data mining technique for the purpose of documenting analysis results, produce report and present to a technical and executive stakeholders.
Understanding of Security principles, techniques and technologies such as NIST Cybersecurity Framework, SANS Top 20 Critical Security Controls and OWASP Top 10, MITRE Attack.
Basic programming skills in various disciplines including scripting languages, PowerShell.
Expert knowledge of SIEM and UEBA solutions such as Splunk, Azure Sentinel or similar, along with experience of CrowdStrike, MS Defender for Endpoint, XSOAR.
Demonstrate expert knowledge in Enterprise IT operations, incident management, change management, Access/Identity Management, security operations, vulnerability and compliance management, ticketing system, incident ticket life cycle and SLA terms.
Certifications: GIAC (GCIA, GPEN, GWAPT, GCIH, GSEC, GCFA), CCNP, CCNA, CISSP, Cloud security

Responsibilities

Defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools.
Provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank.
Participates on projects of moderate to high complexity.
Provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area.
Acts as a key resource and subject matter expert in at least one technology niche/ field and/or line of business.
Understands and supports the Bank's Customer Service Strategy.
Considers the impact of decisions on the well-being of TD, its Customers and stakeholders.
Provides the highest level of Customer service when dealing with internal partners, vendors or our Customers - WOW at every opportunity.
Models quality service delivery at every interaction.
Leads and contributes to the ongoing improvement of the partner / Customer experience.
Be engaged in advancing and sustaining a unique, inclusive culture that reflects TD's diversity agenda, and create an extraordinary employee experience.
Participates fully as a member of the team and contribute to a positive work environment.
May provide leadership, training, and guidance to other team members.
Ensures ongoing communication with the team on the status / progress of projects and issues / points of interest.
Actively shares information and knowledge, and proactively learn from the expertise of others.