Job DescriptionWhat is the Opportunity?RBC's Digital Crime Operations is seeking a
Senior Threat Hunter to join our global efforts in identifying and mitigating sophisticated threats targeting our clients and digital assets.
In this role you will protect RBC's brand integrity, investigate malicious threats, and coordinate incident response across applications and digital infrastructure. This role combines threat research, SOC/SIEM and security automation to combat evolving cyber threats and social engineering attacks.
As part of our Global Cyber Security group, you'll partner with a team of security experts, researchers, and innovators to disrupt digital crime using next-generation detection capabilities and solutions.
What will you do?- Conduct in-depth threat investigations using SIEM tools, SQL queries, and data analytics
- Perform forensic analysis on suspicious activities, malware indicators, and unauthorized access attempts
- Develop Threat Hunting Capabilities: Design and implement advanced detection capabilities and hunt scenarios to identify threats targeting RBC's clients and our digital properties.
- Utilization of cutting-edge frontier models to investigate and mitigate the latest threats (e.g., phishing, smishing, malware) and operationalize hunting scenarios for real-time detection and prevention.
- Web Application Security Hunting: Leverage web application security expertise to analyze live traffic for vulnerabilities and attack vectors.
- Methodology Enhancement: Collaborate with global teams to refine Digital Crime threat hunting methodologies and strategies, ensuring alignment with evolving threat landscapes.
- Data-Driven Insights: Assess security data across multiple platforms, conduct gap analyses, and optimize tool configurations to capture indicators of attacks.
- Identify creative ways to detect novel and existing threats by analyzing Tactics, Techniques, and Procedures (TTPs) of threat actors.
- Manage phishing inbox and coordinate takedowns of malicious websites
- Document threat actor communication patterns and architectural impacts
What do you need to succeed?Must-have:- 5+ years experience in SOC, SIEM, or threat investigation, or transferable security field
- Experience monitoring and investigate phishing attempts, malicious impersonation, and web application threats
- Experience conducting ad hoc threat investigations using SIEM tools, firewall logs, and data analytics
- Deep expertise in adversary TTPs and demonstrated success in mitigating threats.
- Technical proficiency: Hands-on experience with Python/SQL for data analysis, automation, and tool development.
- Proven ability to dissect complex problems, drive innovative solutions, and communicate insights to technical and executive stakeholders.
- Collaborative mindset: Exceptional teamwork skills for cross-functional projects in a fast-paced, global environment.
Nice-to-Have:- Experience with big data platforms (ELK, Splunk, Hadoop) for security analytics.
- Knowledge of low-level systems (OS internals, CPU architectures) and exploit development.
- Industry certifications (e.g., CISSP, CEH, OSCP)
What's in it for you?We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
- A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation
- Ability to make a difference and lasting impact
- Work in a dynamic, collaborative, progressive, and high-performing team
- Opportunities to do challenging work
- Opportunities to take on progressively greater accountabilities
#LI-POST
Job SkillsAnalytical Thinking, Anomaly Detection, Consulting, Cybersecurity, Cyber Threat Hunting, Data Analysis, Incident Response, Information Security, Security Research, Threat and Vulnerability Management, Threat Detection, Threat Mitigation, Threat Modeling, Web Applications
Additional Job DetailsAddress:16 YORK ST:TORONTO
City:Toronto
Country:Canada
Work hours/week:37.5
Employment Type:Full time
Platform:TECHNOLOGY AND OPERATIONS
Job Type:Regular
Pay Type:Salaried
Posted Date:2026-09-16
Application Deadline:2026-09-30
Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above
