Senior Digital Forensic Investigative Specialist

Work Location:

United States of America

Hours:

40

Pay Details:

$113,000 - $196,000 USD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. The included salary range for this role takes into account multiple factors that are considered in making compensation decisions. The base pay actually offered may vary based upon candidate's skills and experience, job-related knowledge, licensure and certifications, geographic location, and other specific business and organizational needs. As TD puts career development at the forefront of our colleague experience, it is not typical for an individual to be hired at or near the top of the range for their role.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:

Technology Solutions

Job Description:

Department Overview:

The Senior Digital Forensics Investigation Specialist, Forensic Investigations & Digital Evidence, will work closely with Cyber Security Operation teams and internal investigative partners to support incident response, internal, and external investigations.  Responsibilities include forensic collection and subject matter expertise in the advice, planning, and support for cyber investigations or internal or external fraud investigations. 

Job Summary:

The Senior Digital Forensic Investigative Specialist leads development and/or implementation of significant or Bank-wide Technology Controls / Information Security strategies, policies, programs, tools and provides expert advice and guidance on technical solutions. Oversees control and governance activities and identifies and assesses potential security risks, breaches/ exposures impacting highly complex / high risk businesses or transformational (change the bank) strategic initiatives primarily interfacing with executive and/or functional stakeholders across the Bank.

Depth & Scope:

• Works autonomously on high profile, complex and/or high risk technology projects with significant impact to the organization
• Provides technical leadership / consulting / direction to a larger team / portfolio on all aspects of technology controls / information security
• Foresees issues / gaps and identifies emerging industry trends (i.e. future focused)
• Provides recommendations on value-added improvements / enhancements
• Top technical expert individual contributor with expert knowledge of IT security and risk disciplines and practices
• Advanced and highly specialized knowledge of organization, technology controls / security/ risk issues
• Provides recommendations on value-added improvements / enhancements

Education & Experience:

• Bachelor's degree preferred
• Information security certification / accreditation an asset
• 10+ years of relevant experience

Preferred Qualifications

• Experience with programming/scripting languages an asset
• Background in operational information security disciplines (e.g., incident response, security infrastructure management or monitoring services)
• Familiarity with network architecture and security infrastructure placement
• Familiarity with security tools such as Anti-Virus, SEIM systems and Data Loss Prevention tools
• Ability to handle conflict effectively, by overcoming differences of opinion and finding common ground.
• Evaluates data and courses of action to reach logical, pragmatic decisions.
• Ability to follow through on leads until all possible avenues in investigating a case have been exhausted
• Applies innovation and creativity to problem-solving.
• 7+ years of experience with Insider Threat or Data Loss Prevention programs, incident management, or investigative programs and the ability to identify anomalous activities and associated risks.
• 3+ years of experience developing and communicating recommendations to non-technical business areas.
• Understanding of digital forensic principles, methodologies, and techniques; including experience using digital forensic tools (i.e., EnCase, Axiom, e-Discovery tools, Cellebrite, Intella, Crowdstrike, Splunk)
• Understanding of the principles of investigation, including reporting, evidence handling, chain of custody, and court or regulatory proceedings
• Ability to interpret digital evidence matters in a way understandable to business and non-technical people.
• Knowledge of Data Loss Prevention tools and conducting DLP related investigations
• Excellent written and verbal communica