Work Location:

Hours:

Pay Details:

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. 

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:

Job Description:

The Senior Information Security Analyst defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank. Participates on projects of moderate to high complexity and provide complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area.

Key Responsibilities

• Support the development, review, tuning, and maintenance of security detections across SIEM and security monitoring platforms.

• Analyze security events, alerts, and telemetry to identify suspicious activity, detection gaps, and opportunities for improvement.

• Apply detection engineering principles to improve alert fidelity, reduce unnecessary noise, and ensure detections are practical for security operations.

• Work with Microsoft Sentinel, Microsoft Defender products, Microsoft Entra ID, and related security tools to support threat detection and investigation use cases.

• Use Splunk to review security data, support investigations, and assist with detection tuning where required.

• Apply cybersecurity knowledge across identity, endpoint, cloud, network, email, and application security domains.

• Collaborate with SOC, incident response, security engineering, and technology teams to understand monitoring needs and improve security outcomes.

• Document detection logic, assumptions, data sources, tuning decisions, and investigation guidance in a clear and maintainable way.

• Support ongoing assessment of detection effectiveness, including relevance, actionability, coverage, and operational value.

Depth & Scope:

• Participates on projects of moderate to high complexity

• Acts as a key resource and subject matter expert in at least one technology niche/ field and/or line of business

• Advanced knowledge of one or more technology controls / security domains, disciplines and practices

• Proficient to advanced knowledge of organization, technology controls / security/ risk issues

Education & Experience:

• Bachelor's degree preferred

• Information security certification / accreditation an asset

• 5-7 years of relevant experience

Preferred Qualifications

• Experience with KQL, SPL, or other security query languages.

• Experience with Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud, or Defender for Cloud Apps.

• Experience with endpoint detection and response tools such as SentinelOne or similar EDR platforms.

• Familiarity with MITRE ATT&CK, threat intelligence, attack paths, or adversary behaviour analysis.

• Exposure to detection lifecycle management, detection-as-code, automation, SOAR, or version-controlled security content.

• Scripting or automation experience using Python, PowerShell, or similar technologies.

• Experience working in a regulated, financial services, or large enterprise environment.

Physical Requirements:

Never: 0%; Occasional: 1-33%; Frequent: 34-66%; Continuous: 67-100%

• Domestic Travel – Occasional

• International Travel – Never

• Performing sedentary work – Continuous

• Performing multiple tasks – Continuous

• Operating standard office equipment - Continuous

• Responding quickly to sounds – Occasional

• Sitting – Continuous

• Standing – Occasional

• Walking – Occasional

• Moving safely in confined spaces – Occasional

• Lifting/Carrying (under 25 lbs.) – Occasional

• Lifting/Carrying (over 25 lbs.) – Never

• Squatting – Occasional

• Bending – Occasional

• Kneeling – Never

• Crawling – Never

• Climbing – Never

• Reaching overhead – Never

• Reaching forward – Occasional

• Pushing – Never

• Pulling – Never

• Twisting – Never

• Concentrating for long periods of time – Continuous

• Applying common sense to deal with problems involving standardized situations – Continuous

• Reading, writing and comprehending instructions – Continuous

• Adding, subtracting, multiplying and dividing – Continuous

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required. The listed or specified responsibilities & duties are considered essential functions for ADA purposes.