Threat Detection Engineer: MITRE‑Driven InfoSec (Hybrid)

Canadian Imperial Bank of Commerce; Toronto; Hybrid; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive salary

Incentive pay

Banking benefits

Benefits program

Pension plan

Employee share plan

Vacation offering

Wellbeing support

MomentMakers program

Job summary

Canadian Imperial Bank of Commerce is seeking a Detection Engineer for its Cyber Operations team. You will design, build, and support threat-detection content to alert the Security Operations team to cyber threats across the CIBC environment.

You will leverage MITRE ATT&CK and kill-chain knowledge to create detections with rich context and collaborate across Threat Hunting, Cyber Risk, DLP, SOC, and Incident Response in an Agile environment with 2-week sprints.

Qualifications

• Degree or diploma in Computer Science, Engineering, or related field.
• At least five years of experience as an Information Security Consultant or similar role.
• Certified professional; CISSP, CRISC or CISM designation is an asset.

Responsibilities

• Design, build, and support threat detection content to alert the Security Operations team to cyber threats in the CIBC environment.
• Leverage the MITRE ATT&CK framework and kill-chain knowledge to craft detections with broader context.
• Collaborate with Threat Hunting, Cyber Risk Management, DLP, SOC, Vulnerability Management, Red Team, and Incident Response.
• Work in Agile, with two-week sprints and scrum development practices.
• Follow a hybrid work arrangement with 1–3 days on-site in Toronto.

Skills

Analytical Thinking

Decision Making

Information Security

Security Testing

Troubleshooting

Education

Degree in Computer Science or Engineering

Tools

SIEM

Job description

Canadian Imperial Bank of Commerce is seeking a Detection Engineer for its Cyber Operations team. You will design, build, and support threat-detection content to alert the Security Operations team to cyber threats across the CIBC environment.

You will leverage MITRE ATT&CK and kill-chain knowledge to create detections with rich context and collaborate across Threat Hunting, Cyber Risk, DLP, SOC, and Incident Response in an Agile environment with 2-week sprints.