Senior Attack Resilience Manager - Simulation & Security Offense

RBC; Toronto; On-site; CAD 140,000 - 210,000; Full time

Benefits offered by this job

Total rewards program

Professional development

World-class training program

Challenging projects

Job summary

RBC in Toronto is seeking a Senior Manager, Attack Resilience Management to lead offensive and defensive security testing efforts and metrics generation. You will manage attack simulation scenarios, collaborate with Red Team, SOC, and Cyber Intelligence to improve threat coverage and resilience.

The role emphasizes innovative approaches, AI-driven threat simulations, and ensuring integrations with security tools are tested and maintained.

Qualifications

• 5+ years in a similar role with deep security operations knowledge.
• Knowledge of offensive security tools, techniques, and procedures.
• Experience with core security technologies (SIEM, WAF, EDR, proxies, scanners).
• Knowledge of Kill Chain phases and MITRE ATT&CK framework TTPs.
• Programming/scripting in Python.

Responsibilities

• Maintain the library of attack simulation scenarios.
• Collaborate with Red Team, Cyber Intelligence, and SOC to develop custom simulations.
• Leverage AI to assess and simulate emerging AI threats.
• Ensure integrations with security tools are tested and maintained.
• Automate maintenance and operations of team infrastructure.
• Execute and schedule attack simulations.

Skills

End-to-end security operations

Offensive security tools & techniques

MITRE ATT&CK framework

Python (programming & scripting)

Tools

SIEM

WAF

EDR

Vulnerability scanners

Threat intelligence platforms

Job description

RBC in Toronto is seeking a Senior Manager, Attack Resilience Management to lead offensive and defensive security testing efforts and metrics generation. You will manage attack simulation scenarios, collaborate with Red Team, SOC, and Cyber Intelligence to improve threat coverage and resilience.

The role emphasizes innovative approaches, AI-driven threat simulations, and ensuring integrations with security tools are tested and maintained.