Threat Engineering Analyst

Scotiabank; Toronto; On-site; CAD 70,000 - 110,000; Full time

Benefits offered by this job

Diversity, Equity, Inclusion & Allyhip

Accessibility & Workplace Accommod at

Upskilling through online courses

Competitive rewards program

Community engagement programs

Job summary

Scotiabank is seeking a cybersecurity-focused professional to support the red team program by establishing a consistent issue management process, coordinating remediation, and improving reporting through standardized data and metrics.

The role emphasizes understanding cyber kill chains, regulatory frameworks, and MITRE ATT&CK, with certification as a plus. Ideal candidates will communicate clearly across technical and non-technical teams while aligning with Scotiabank’s risk culture.

Qualifications

• Understanding of cyber kill chain and how to map techniques to results.
• Familiarity with regulatory frameworks relevant to financial institutions.
• Knowledge of OSFI’s I-CRT framework and MITRE ATT&CK.
• Industry certifications such as CISM, CISSP, GISF, GSLC, Security+, Network+ preferred.
• Ability to clearly articulate test objectives, results and action items.

Responsibilities

• Coordinate remediation follow-up with owners, due dates and status updates.
• Standardize issue data for reporting, dashboards and trend analysis.
• Enhance program metrics (KPIs, KRIs) for visibility into health and outcomes.
• Improve SOPs for issue intake, triage, tracking and closure.
• Communicate status, risks, and actions across technical and non-technical audiences.
• Familiarity with project management and ticketing software.

Skills

Cyber kill chain

MITRE ATT&CK

Regulatory frameworks

I-CRT Framework

Professional certifications

Clear communication

Job description

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

This role supports the red team program by helping to build and maintain a consistent issue management process, coordinate remediation follow-up, and improve reporting and visibility through standardized data and program metrics

Is this role right for you? In this role, you will:

• Coordinate remediation follow-up for identified issues, including tracking owners, due dates, and status updates.
• Standardize issue data to support consistent reporting, dashboards, and trend analysis.
• Support improvements to program metrics, including KPIs and KRIs, to increase visibility into program health and outcomes.
• Support the improvement and standardization of standard operating procedures related to issue intake, triage, tracking, and closure.
• Coordinate stakeholders and communicate status, risks, and follow-up actions across technical and non-technical audiences.
• Familiarity with project management and ticketing software.
• Understand how the Bank's risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Actively pursues effective and efficient operations of their respective areas in accordance with Scotiabank’s Values, its Code of Conduct and the Global Sales Principles, while ensuring the adequacy, adherence to and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
• Champion a high-performance environment and contributes to an inclusive work environment.
• Support operational Budget Management, Project Budget Management

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

• Possess an understanding of the cyber kill chain (such as Mitre ATT&CK) and ability to connect techniques to results.
• Ability to understand and apply relevant frameworks and regulations
• OSFI’s Intelligence-led Cyber Resilience Testing (I-CRT) Framework
• MITRE ATT&CK
• Possesses one or more industry specific certification such as CISM, CISSP, GISF, GSLC, Security+, Network+
• Possess strong communication skills to articulate test objectives, results and decision items as required.

What's in it for you?

• Diversity, Equity, Inclusion & Allyship-We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
• Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know.