Threat Engineer

Socket.dev; Toronto; On-site; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Diversity, Equity, Inclusion & Allyshp

Accessibility accommodations

Upskilling opportunities

Competitive rewards program

Community engagement programs

Job summary

Scotiabank is seeking a cybersecurity professional to lead adversary emulation operations across planning, execution, and reporting phases. You will liaise with red team operators and stakeholders, ensuring alignment with objectives and risk tolerance while maintaining rigorous regulatory compliance.

You will stay current with threats and industry best practices, coordinate engagement debriefs, and help drive continuous improvements in a high‑performance, inclusive environment.

Qualifications

• Understanding of the cyber kill chain (MITRE ATT&CK) and ability to connect techniques to results.
• Familiarity with OSFI's Intelligence-led Cyber Resilience Testing (I-CRT) Framework and MITRE ATT&CK.
• One or more industry certifications such as CISM, CISSP, GISF, GSLC, Network+, or Security+.
• Strong communication skills to articulate test objectives, results and decision items as required.

Responsibilities

• Champion a customer focused culture to deepen client relationships and leverage broader Bank relationships, systems and knowledge.
• Be accountable for the review of all tooling and licenses required to execute adversary emulation activities, including vendor and contract management.
• Oversee end-to-end coordination of adversary emulation operations including planning, scoping, execution support and reporting phases.
• Act as the primary liaison between red team operators, internal and external stakeholders to ensure engagement alignment with objectives and risk tolerance.
• Ensure compliance with internal standards and regulatory requirements for adversary emulation activities.
• Maintain currency on emerging threats, vulnerabilities and industry relevant best practices.
• Facilitate requirement gathering, rules of engagement development and authorization processes for adversary emulation operations.
• Ensure consistent documentation, reporting standards and quality assurance across the red team operations and deliverables.
• Track and report on key performance metrics to measure operational effectiveness and team performance.
• Coordinate post-engagement debriefs and lessons learned to drive continuous improvements.
• Understand how the Bank's risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Actively pursue effective and efficient operations of their respective areas in accordance with Scotiabank's Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
• Champion a high-performance environment and contribute to an inclusive work environment.
• Oversee Operational Budget Management, Project Budget Management

Skills

Cyber kill chain

MITRE ATT&CK

Regulatory frameworks

CISM

CISSP

GISF

GSLC

Network+

Security+

Communication skills

Job description

Requisition ID: 267944

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

Contributes to the overall success of the Threat Emulation & Design / Cyber Security Operations in Canada ensuring specific individual goals, plans, initiatives are executed / delivered in support of the team's business strategies and objectives. Ensures all activities conducted are following governing regulations, internal policies and procedures.

Is this role right for you? In this role you will:

• Champion a customer focused culture to deepen client relationships and leverage broader Bank relationships, systems and knowledge.
• Be accountable for the review of all tooling and licenses required to execute adversary emulation activities, including vendor and contract management.
• Oversee end-to-end coordination of adversary emulation operations including planning, scoping, execution support and reporting phases.
• Act as the primary liaison between red team operators, internal and external stakeholders to ensure engagement alignment with objectives and risk tolerance.
• Ensure compliance with internal standards and regulatory requirements for adversary emulation activities.
• Maintain currency on emerging threats, vulnerabilities and industry relevant best practices.
• Facilitate requirement gathering, rules of engagement development and authorization processes for adversary emulation operations.
• Ensure consistent documentation, reporting standards and quality assurance across the red team operations and deliverables.
• Track and report on key performance metrics to measure operational effectiveness and team performance.
• Coordinate post-engagement debriefs and lessons learned to drive continuous improvements.
• Understand how the Bank's risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Actively pursue effective and efficient operations of their respective areas in accordance with Scotiabank's Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
• Champion a high-performance environment and contribute to an inclusive work environment.
• Oversee Operational Budget Management, Project Budget Management

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

• An understanding of the cyber kill chain (such as Mitre ATT&CK) and ability to connect techniques to results.
• Ability to understand and apply relevant frameworks and regulations
  • OSFI's Intelligence-led Cyber Resilience Testing (I-CRT) Framework
  • MITRE ATT&CK
• Possess one or more industry specific certification such as CISM, CISSP, GISF, GSLC, Network+, Security+
• Possess strong communication skills to articulate test objectives, results and decision items as required

What's in it for you?

• Diversity, Equity, Inclusion & Allyship-We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
• Accessibility and Workplace Accommodations- We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
• Upskillingthrough online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know.