Senior Threat Intelligence Analyst

Job Description:

This role is a Senior Threat Intelligence Analyst on the Protect Threat Intelligence (PTI) team. The successful candidate will support the Threat Intelligence mission to provide timely, actionable, and relevant intelligence to its stakeholders within TD's follow-the-sun operating model. The candidate will be required to maintain a holistic view of the threat landscape for both current and emerging cyber and geopolitical threats. The candidate should have broad intelligence collection and production expertise in the functional area of cyber threat intelligence. Threat Intelligence operates an on-call rotation across the team (inclusive of this position).

KEY ACCOUNTABILITIES

• Enable cyber and fraud threat identification by proactively and continuously monitoring the internal and external landscape for relevant events, risks, and threats.
• Use OSINT research and tooling to investigate top priority threats; applying deep knowledge of the MITRE ATT&CK framework and threat actor tradecraft.
• Partner with Threat Management teams to understand events and support technical threat analysis of malicious cyber security incidents.
• Conduct deep and dark web research.
• Effectively author and review intelligence products and communications for stakeholders, operational personnel, and leadership.
• Provide expertise and consultation to partners and/or stakeholders on a broad range of threats and emerging threats relevant to TD and the financial sector.
• Proactively review internal processes and activities to identify opportunities for improvement.
• Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.
• Develop / deliver briefings on key cyber, fraud, and geopolitical threats to the financial sector.

BREADTH & DEPTH

• Experience using common intelligence processes / tools, including a threat intelligence platform.
• Proven superior communication skills and ability to translate complicated threat actor behavior to an executive audience.
• Demonstrated tradecraft in open-source collection.
• Excellent time management skills, including the ability to perform to a production calendar.
• Demonstrated ability to stay abreast of emerging threat actor TTPs.
• Advanced ability to apply real world geopolitical indicators to forecast threat actor behavior.
• Demonstrated knowledge of the current threat landscape, banking and technology standards and regulatory requirements.

EXPERIENCE & EDUCATION

• University degree
• Information security certification / accreditation an asset
• 5-7 years of relevant experience