Senior Social Engineering Threat Analyst

TD•Toronto, ON

16d•CA$81,600 - CA$115,200•Onsite

About The Position

The Senior Social Engineering Threat Analyst defines, develops, and/or implements Technology Controls and Information Security‑related policies, programs, and tools. This role provides specialized expertise and guidance in assessing cyber risks, identifying control gaps, and recommending security solutions to mitigate social engineering, phishing, and malware‑based threats and protect the Bank. The role participates in projects of moderate to high complexity and delivers complex reporting, analysis, and assessments at the functional, business line, or enterprise level within their area of responsibility.

Requirements

Typically 5–7 years of relevant experience in information security, cybersecurity operations, or technology risk.
Cybersecurity risk assessment and analysis
Phishing and social engineering threat identification
Malware triage and incident support
Technology controls and risk mitigation
Analytical thinking and structured problem solving
Clear written and verbal communication

Nice To Haves

Bachelor’s degree preferred but not required.
Information security certification or accreditation is an asset.

Responsibilities

Assess, analyze, and respond to social engineering and phishing threats targeting the Bank, including investigation and scoping of confirmed malicious activity.
Support phishing defense operations by analyzing campaign behavior, identifying trends, and recommending control improvements.
Perform malware triage related to email‑delivered threats and escalate findings in accordance with established procedures.
Identify potential security gaps and provide risk‑based recommendations to strengthen preventative and detective controls.
Contribute to the development and maintenance of policies, procedures, standards, and playbooks related to information security and threat operations.
Produce complex reporting, analysis, and threat assessments for leadership, stakeholders, and partner teams.
Participate in cross‑functional initiatives and projects of moderate to high complexity related to technology controls and information security risk.