Senior Information Security Consultant, Offensive Security

CIBC•Toronto, ON

20h•Hybrid

About The Position

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients. At CIBC, we embrace your strengths and your ambitions, so you are empowered at work. Our team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute. What You’ll Be Doing Here’s an opportunity for you to come in at the ground level and build something incredible within Cyber Security. You will build an emerging AI-supported, agentic Red Teaming capability within the bank, publish the novel processes and findings for your select peers in information security, and help our partner lines of business achieve real security effectiveness. As a Red Team Specialist you will be working with threat intelligence, human behaviours, and security alerts to develop red team scenarios. In collaboration with your team, you will prove the validity of these scenarios, show them the value of being vigilant and help them understand what needs to be done to defend against credible threats to our bank. At CIBC we enable the work environment most optimal for you to thrive in your role. You’ll have the flexibility to manage your work activities within a hybrid work arrangement where you’ll spend 1-3 days per week on-site, while other days will be remote

Requirements

Experience in driving Red Teaming initiatives, penetration testing, network security and the novel use of AI for cyber security.
At least 7 years of overall Cyber Security experience.
2-4 years of Cyber Threat analysis research experience whether through a CSIRT/SOC; threat Intel, or other analysis function, and an understanding of how to leverage it for enterprise defense.
Ability to communicate detailed information in an impactful way.
Ability to take the lead, go above and beyond, and deliver results.
Ability to continuously evolve thinking and the way of working.
Attention to detail and critical thinking skills.
Ability to make decisions and take actions that will make a difference today and tomorrow.
Proactively seek new opportunities to define what's possible.
Bring your real self to work and live values - trust, teamwork, and accountability.

Nice To Haves

Familiarity with Advanced Persistent Threat (APT) activity.
Hold one of the following certifications: OSCP, OSCE and CEH.

Responsibilities

Develop attack scenario hypotheses with AI assistance and based on personal research, threat intelligence information, attacker techniques, tactics, and procedures (TTPs).
Refine scenarios to ensure effectiveness, accuracy and efficiency.
Interface and collaborate with internal and external teams to build the infrastructure to support inferencing and automation.
Drive continuous improvement by engaging security teams and tracking recommendations from executed red team scenarios.
Coordinate with the security response and intelligence teams to plan and conduct proposed red team scenarios from public, internal, and private sources.
Partner with other red teamers to manage the red teaming function from beginning to end.
Interact and experiment with a wide range of security and AI technologies – both currently in use and in investigation at CIBC – to understand and test their ability, and describe how they can best be used to detect and stop threats.
Focus activities on building out novel AI and agentic tooling and processes, maturing the red teaming discipline within the bank.

Benefits

Competitive salary
Incentive pay
Banking benefits
Benefits program
Defined benefit pension plan
Employee share purchase plan
Vacation offering
Wellbeing support
MomentMakers, our social, points-based recognition program
Purpose Day; a paid day off dedicated for you to use to invest in your growth and development