Senior Social Engineering Threat Analyst

TD•Toronto, ON

16d•CA$81,600 - CA$115,200•Onsite

About The Position

The Senior Social Engineering Threat Analyst defines, develops, and implements Technology Controls and Information Security-related policies, programs, and capabilities focused on protecting TD customers, brand reputation, and digital channels from social engineering threats. This role provides specialized expertise and guidance in assessing cyber risks, identifying control gaps, and recommending security solutions to mitigate phishing, smishing, vishing, spoofing, impersonation, social media abuse, and other forms of customer-targeted fraud and social engineering activity. The role participates in projects of moderate to high complexity and delivers complex reporting, analysis, and assessments at the functional, business line, or enterprise level within their area of responsibility. The individual serves as a subject matter expert in customer protection operations and partners closely with Fraud, Cyber Security, Brand Protection, Telecommunications, Digital Channels, Legal, and external industry partners to reduce customer exposure and strengthen organizational resilience.

Requirements

Experience investigating phishing, smishing, vishing, social media abuse, impersonation campaigns, or digital brand protection incidents required.
Bachelor's degree preferred but not required.
Information Security, Cybersecurity, Fraud, Intelligence, or related certification/accreditation is considered an asset.
Typically 5–7 years of relevant experience in cybersecurity operations, information security, digital risk protection, fraud investigations, threat intelligence, or technology risk.
Experience working across multiple stakeholder groups including Cyber Security, Fraud, Operations, Legal, Telecommunications, and customer-facing business units is considered an asset.

Responsibilities

Assess, investigate, and respond to customer-targeted social engineering threats, including phishing, smishing, vishing, impersonation, spoofing, and other digital fraud campaigns.
Lead digital risk protection activities by identifying, analyzing, and disrupting malicious domains, phishing infrastructure, fraudulent websites, social media abuse, and brand impersonation targeting TD customers and assets.
Monitor emerging threat activity, analyze threat actor tactics and trends, and provide actionable intelligence and risk-based recommendations to strengthen customer protection capabilities and security controls.
Produce complex reporting, threat assessments, and strategic insights for leadership, stakeholders, and partner teams to support informed risk management and decision-making.
Develop, maintain, and continuously improve operational processes, playbooks, controls, and automation solutions that enhance the effectiveness and scalability of customer protection operations.
Collaborate with Cyber Security, Fraud, Digital, Telecommunications, Legal, Brand Protection, and external industry partners to coordinate investigations, mitigation efforts, and threat disruption activities.
Participate in projects of moderate to high complexity involving technology controls, information security risk, customer protection strategy, and operational transformation initiatives.