Sr CyberSec Spec Threat Intel

Canadian Tire; Toronto; Hybrid; CAD 64,000 - 106,000; Full time

Benefits offered by this job

Broadband salary range and incentives

Comprehensive benefits and retirement

Mental health benefits ($5,000/yr)

Job summary

Canadian Tire Corporation in Toronto is seeking a Senior Cybersecurity Specialist, Threat Intelligence to develop and operationalize CTI capabilities. You will produce high-quality intelligence products, analyze threats, and support incident response with adversary context.

You will collaborate with SOC, IR, and Detection Engineering to embed AI-driven intelligence into detection and automation workflows, while advancing frontier AI/ML use cases and intelligence-sharing with internal and

Qualifications

• Degree in Cybersecurity, Computer Science, Digital Forensics, or related field (or equivalent).
• Minimum 4+ years in cybersecurity with threat intelligence, threat hunting, incident response, or security operations.
• Strong grounding in CTI frameworks including MITRE ATT&CK, Cyber Kill Chain, and Diamond Model.

Responsibilities

• Develop and operationalize CTI capabilities, including reporting and dissemination of actionable intelligence.
• Collect, process, and analyze tactical, operational, and strategic threat intelligence.
• Produce high-quality intelligence products (advisories, alerts, reports, briefings) for technical and executive audiences.
• Conduct threat trend analysis and correlation to identify emerging threats and opportunities for resilience.
• Support incident response and threat hunting with timely intelligence and adversary context.
• Develop and maintain threat intelligence processes, including IOC lifecycle governance within TIP.
• Establish intelligence-sharing with internal teams and external partners (ISACs, industry groups).
• Leverage AI/ML to enhance threat intelligence collection, enrichment, and analysis.
• Collaborate with SOC/IR/Detection Engineering to embed AI-driven intelligence into workflows.

Skills

Threat intelligence

CTI frameworks

Adversary tradecraft

AI/ML in cybersecurity

Clear communication

OSINT

Education

Degree in Cybersecurity/Computer Science/Digital Forensics

Tools

TIP platforms

SIEM

SOAR

EDR

IDS/IPS

Azure security

Job description

Canadian Tire Corporation is one of Canada's most recognised retail and financial services companies — and behind that scale is a cybersecurity team working hard to protect it. Based in Toronto, Ontario, this Senior Cybersecurity Specialist, Threat Intelligence role sits at the intersection of intelligence analysis, emerging technology, and enterprise security operations. If you live and breathe CTI frameworks, adversary TTPs, and AI-driven threat analytics, this position is built for you.

The role goes well beyond writing reports. You'll be developing and operationalizing cyber threat intelligence (CTI) capabilities end-to-end — from collection and analysis through to executive briefings and detection pipeline integration. You'll work alongside SOC, Incident Response, and Detection Engineering teams to turn intelligence into action, while also driving the adoption of frontier AI and machine learning to sharpen early warning and adversary profiling capabilities.

About the Role: Sr CyberSec Spec Threat Intel

As a senior member of the CTI function, you'll produce high-quality intelligence products — advisories, alerts, reports, and briefings — tailored to both technical practitioners and executive stakeholders. You'll conduct threat trend analysis across diverse sources, support active incident response investigations with timely adversary context, and manage IOC lifecycle governance within the Threat Intelligence Platform. Your research plans will assess business impact, identify capability gaps, and recommend concrete mitigation strategies.

Collaboration and continuous improvement are central to the mandate. You'll establish intelligence-sharing partnerships with internal teams and external stakeholders such as ISACs and industry groups, act as a trusted CTI advisor across Security Operations and Vulnerability Management, and identify opportunities to enhance tooling, workflows, and intelligence quality. You'll also contribute to AI-enabled use cases including automated IOC generation, threat summarization, and adversary profiling — all while ensuring outputs are validated, accurate, and free from model bias.

Benefits and Salary

Canadian Tire offers a broadband salary range of $64,000–$106,000, with a typical hiring range between $64,000 and $85,000. Final compensation depends on your experience, internal equity, market benchmarks, and role-specific factors. Beyond salary, the company provides comprehensive benefits and retirement programs, performance incentives, continuing education programs, career growth opportunities, product discounts, and additional perks to support overall well-being. As part of the enhanced flex benefits program, mental health benefits of $5,000 per year are available for benefits-eligible employees and their families. The position follows a hybrid schedule with four days in-office per week.

Job Details

Job Type: Full-Time

Company: Canadian Tire

Location: Toronto, ON (Hybrid – 4 days in-office)

Requisition ID: JR163362

Pay: $64,000–$106,000 (Broadband); Typical Hiring Range: $64,000–$85,000

Responsibilities

This role touches every layer of the threat intelligence lifecycle. On any given day you might be writing an executive advisory, triaging new IOCs in the TIP, advising an IR team mid-investigation, or stress-testing an AI-generated threat summary for accuracy. The breadth of the mandate reflects the seniority of the position and the trust placed in the person filling it.

• Develop and operationalize CTI capabilities, including reporting, analysis, and dissemination of actionable intelligence
• Collect, process, and analyze tactical, operational, and strategic threat intelligence from internal and external sources
• Produce high-quality intelligence products (response recommendations, advisories, alerts, reports, briefings) tailored to both technical and executive audiences
• Conduct threat trend analysis and correlation across diverse intelligence sources to identify emerging threats, shifts in adversary TTPs, and opportunities for resilience improvement
• Support incident response and threat hunting activities by providing timely intelligence, context, and adversary insights to active investigations
• Develop and maintain threat intelligence processes, including ASM, IOC lifecycle management, and governance within the Threat Intelligence Platform (TIP)
• Build and execute structured research plans on emerging threats, assessing business impact, identifying capability gaps, and recommending mitigation strategies
• Establish and maintain intelligence-sharing processes and partnerships across internal teams and external stakeholders (e.g., ISACs, industry partners)
• Leverage frontier AI and machine learning to enhance threat intelligence collection, enrichment, correlation, and analysis
• Collaborate with SOC, IR, Detection Engineering, and Architecture teams to embed AI-driven intelligence into detection, response, and automation workflows (e.g., SIEM, SOAR, EDR)
• Contribute to AI-enabled use cases such as automated IOC generation, threat summarization, adversary profiling, and intelligence-to-detection pipelines

Requirements / Skills

Canadian Tire is looking for a candidate who combines deep technical knowledge of the threat intelligence discipline with the communication skills to engage both engineers and executives. You should be comfortable operating independently in a fast-paced environment while also contributing meaningfully to cross-functional security teams. A strong grounding in CTI frameworks and adversary tradecraft is essential, and familiarity with AI/ML in a cybersecurity context is a significant asset.

• Degree in Cybersecurity, Computer Science, Digital Forensics, or a related field — or equivalent hands-on experience
• Minimum 4+ years in cybersecurity with hands-on experience in threat intelligence, threat hunting, incident response, or security operations
• Strong understanding of CTI frameworks including MITRE ATT&CK®, Cyber Kill Chain®, and the Diamond Model
• Familiarity with TIP platforms, IOC lifecycle management, and intelligence workflows
• Understanding of security technologies including SIEM, SOAR, EDR, IDS/IPS, firewalls, and cloud security controls
• Strong understanding of the Microsoft Azure security ecosystem
• Knowledge of OSINT techniques and intelligence collection methods, including familiarity with sharing ecosystems such as FS-ISAC, RH-ISAC, CCCS, and CCTX
• Strong written and verbal communication skills, including the ability to produce clear, concise intelligence for diverse audiences
• Relevant certifications such as CISSP, CISM, GCIH, GCTI, GCFE, or CEH are considered assets
• Exposure to AI/ML applications in cybersecurity or data analytics is an asset

Degree in Cybersecurity, Computer Science, Digital Forensics, or a related field (or equivalent experience); minimum of 4+ years in cybersecurity with hands-on experience in threat intelligence, threat hunting, incident response, or security operations; relevant certifications such as CISSP, CISM, GCIH, GCTI, GCFE, or CEH are assets.