Senior Information Security Analyst (CSIRT)

TD International Services Limited; Singapore; On-site; SGD 90,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Career development

Mentoring programs

Job summary

TD Bank Group’s fusion center in Singapore hosts the Cyber Security Incident Response Team (CSIRT), protecting the bank’s assets and customers worldwide. The role requires hands-on malware analysis, incident investigation, and rapid containment across complex security events, supported by enterprise SIEM and EDR tools.

You will collaborate with global teams and executives to drive risk-informed decisions. Preferred candidates hold cybersecurity certifications and have experience in financial

Qualifications

• Demonstrated experience investigating security incidents and complex alerts in an enterprise environment.

Responsibilities

• Independently investigate and contribute to the triage, containment, remediation, and post-incident review of complex cyber security events, escalating material risks and decisions through the appropriate channels.

Skills

Incident response

Malware analysis

Threat hunting

AI-driven automation

SIEM analysis

EDR monitoring

Documentation

Verbal/written communication

Education

Cyber security certification (e.g., CISSP, SANS, ISC2)

Tools

Splunk SIEM

CrowdStrike EDR

Palo Alto XSOAR

Job description

Work Location: Singapore, Singapore Hours: 40 Line of Business: Technology Solutions Pay Details: We’re committed to providing fair and equitable compensation to all our colleagues. As a candidate, we encourage you to have an open dialogue with a member of our HR Team and ask compensation related questions, including pay details for this role.

Job Description: Department Overview Building a World-Class Technology Team at TD We can't afford to be boring. Neither can you. The scale and scope of what TD does may surprise you. The rapid pace of change makes it a business imperative for us to be smart and open-minded in the way we think about technology. TD's technology and business teams become more intertwined as new opportunities present themselves. This new era in banking does not equal boring. Not at TD, anyway. TD Information Security covers the development and management of security strategies, policies and programs to assess, prioritize, and mitigate business risk with technology controls. Priorities include mitigating and managing cyber security threats, ensuring systems availability, aligning with global regulatory risk and compliance requirements, managing systems and network complexity, and partnering with businesses for better technology delivery by providing advice on technology controls. There's room to grow in all of it.

About the team: Working out of TD Bank's fusion center in Singapore, we are part of TD's global group of technology, security and risk professionals, working also from U.S, and Toronto. Our aim is to assess, prioritize, and mitigate business risk with technology controls.

The Cyber Security Incident Response Team (CSIRT) is responsible for protecting the Bank, its assets and reputation, by supporting incidents and events resulting from internal and external threats. It's a global team running 24x7 in a follow-the-sun model. Note that the working hours for the role is 7am to 4pm and will require rotational weekend on-call coverage.

Key accountabilities

• Independently investigate and contribute to the triage, containment, remediation, and post-incident review of complex cyber security events, escalating material risks and decisions through the appropriate channels.
• Perform deep-dive analysis to identify the initial access vector, attacker activity, affected assets, persistence, lateral movement, potential data exfiltration, root cause, and control or process gaps.
• Analyze security alerts, endpoint telemetry, network traffic, logs, malware behavior, and other available evidence to form and test investigation hypotheses.
• Conduct static and dynamic malware analysis, where appropriate, and support active threat-hunting activities during investigations.
• Develop and refine SIEM correlation logic, alerting, and detection use cases based on observed attacker tactics, techniques, and procedures (TTPs).
• Use enterprise endpoint detection and response capabilities to investigate suspicious activity and support timely containment and remediation.
• Provide clear, timely investigation updates, risk assessments, and recommended actions to fusion-center partners, technology teams, business stakeholders, and executives.
• Partner with relevant teams to implement immediate containment measures and longer-term remediation that reduces the likelihood or impact of recurrence.
• Document investigation findings, evidence, decisions, and lessons learned in a manner that supports operational follow-through and stakeholder understanding.
• Participate in rotational weekend on-call coverage and support the team’s global follow-the-sun operating model.

Required qualifications and experience

• Demonstrated experience investigating security incidents and complex alerts in an enterprise environment.
• Hands-on ability to perform static and dynamic malware analysis.
• Advanced knowledge of security alert analysis, incident and event management, log analysis, network traffic analysis, malware investigation and remediation, identify and respond to emerging AI-driven threats and threat-actor TTPs.
• Apply AI-led automation and SOAR to streamline threat investigation, containment, escalation, and reporting, improving the speed and consistency of incident response.
• Expert knowledge of, and hands-on experience with, SIEM-based detection use cases, correlation logic, and alert generation.
• Expert hands-on experience with enterprise-grade endpoint detection and response solutions.
• Strong analytical and problem-solving skills, including the ability to turn incomplete or complex technical evidence into prioritized, actionable insights.
• Excellent written and verbal communication skills, with the ability to explain technical risk, options, and recommended actions in business terms to technology teams, business stakeholders, and executives.
• Strong organization and case-management discipline, including the ability to manage multiple investigative priorities and maintain clear documentation.
• Ability and willingness to participate in rotational weekend on-call coverage.

Preferred qualifications and experience

• Hands-on experience with cloud security monitoring.
• Working knowledge of enterprise-grade digital forensics and malware analysis tools.
• Relevant cyber security certification from a recognized provider such as SANS Institute or ISC2.
• Prior experience in financial services or another highly regulated environment.

Who We Are

TD Securities is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every interaction, product, and experience remarkably human and refreshingly simple for over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to foster deeper relationships, ensure disciplined execution, and build a simpler, faster banking experience. TD is deeply committed to being a leader in client experience, that is why we believe that all colleagues, no matter where they work, are client facing. Together, we are reimagining what banking can be for our clients, colleagues and communities.

Our Total Rewards Package

Our Total Rewards package reflects the investment we make in our colleagues to help them, and their families achieve their well-being goals. Total Rewards at TD includes a base salary and several other key plans such as health and well-being benefits, including medical coverage, paid time off, career development, and reward and recognition programs.

Additional Information:

We’re delighted that you’re considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we’re committed to providing the support our colleagues need to thrive both at work and at home.

Colleague Development

If you’re interested in a specific career path or are looking to build certain skills, we want to help you succeed. You’ll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities. If you’re passionate about helping clients and building deep, lasting relationships, TD offers diverse career paths where you can grow your expertise and make a meaningful impact. We're committed to your success and foster a respectful workplace where diverse perspectives are valued, everyone has fair opportunities to grow, and you can unlock your full potential to achieve your career goals. Here at TD, we hire and develop the best.

Training & Onboarding

We will provide training and onboarding sessions to ensure that you’ve got everything you need to succeed in your new role.

Interview Process

We’ll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.

Accommodation

If you require an accommodation for the recruitment / interview process (including alternate formats of materials, or accessible meeting rooms or other accommodation), please let us know and we will work with you to meet your needs.

US Labor & Employment Posters | California Privacy | Accessibility | FAQ

Our Values

At TD we’re guided by our purpose to enrich the lives of our customers, communities and colleagues, and share a set of values that shape our culture and guide our behavior. In exchange for how our colleagues show up to help TD succeed, we are committed to delivering a colleague experience grounded in Impact, Growth and a Culture of Care. No matter where you work across TD, we empower you to make an impact at work and in your community, explore and grow your career and be part of our caring and inclusive culture.

Our Commitment to Diversity, Equity, and Inclusion

At TD, we’re committed to fostering an environment where all colleagues are encouraged to bring their authentic selves to work, experience equitable opportunities, and feel respected and supported. We’re dedicated to building an inclusive workforce that reflects the diversity of the customers and the communities in which we live and serve.

Helping to Make an Impact in Communities – TD Ready Commitment

TD has a long-standing commitment to help drive progress towards a more inclusive and sustainable future. That’s why we launched the TD Ready Commitment in 2018, now a multi-year North American initiative. Under the TD Ready Commitment, we are targeting a total of C$1 billion by 2030 in community giving across four key, interconnected drivers of change: Financial Security, Vibrant Planet, Connected Communities, and Better Health. It’s our goal to help support change, nurture progress, and contribute to making the world a better, more inclusive place for our customers, colleagues, and communities. Learn more: Canada | US | Europe & Asia Pacific