Information Security Specialist - Red Team Operator

Work Location:

Mount Laurel, New Jersey, United States of America

Hours:

40

Pay Details:

$98,160 - $159,270 USD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. 

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:

Technology Solutions

Job Description:

The Information Security Specialist defines, develops and/or implements Technology Controls / Information Security related policies, programs, tools and provides specialized expertise and guidance on assessing risks, identifying potential gaps and providing security solutions to mitigate risks and protect the Bank. Participates on projects of moderate to high complexity and provides complex reporting, analysis, and assessments at the functional, business line or enterprise level for own area.

Depth & Scope:

• Participates on complex, comprehensive or large projects and initiatives

• Acts as a lead expert resource in technology controls / information security for project teams, the business / organization and/or outside vendors

• Has advanced knowledge of organization, technology controls / security/ risk issues

Education & Experience:

• Bachelor's degree preferred

• Information security certification / accreditation an asset

• 7+ years of relevant experience

• Expert knowledge of IT security and risk disciplines and practices

Preferred Qualifications :

• Familiarity with EDR, SIEM, and cloud security controls from an attacker’s perspective

• Experience developing custom tooling in languages such as C#, Python, and PowerShell

• Knowledge of red team infrastructure, domain management, and OPSEC best practices

• Strong knowledge of Windows Active Directory environments, identity abuse, and enterprise authentication flows

• Proven experience with common red team tooling (e.g., C2 frameworks, phishing platforms, custom payloads)

• Solid understanding of network protocols, operating systems, and endpoint security controls

• Ability to safely execute adversarial activities in regulated environments with strict scope and approval processes

• Relevant certifications (e.g., CRTO, OSCP, GXPN, Red Team Ops–focused certs)

Physical Requirements:

Never: 0%; Occasional: 1-33%; Frequent: 34-66%; Continuous: 67-100%

• Domestic Travel – Occasional

• International Travel – Never

• Performing sedentary work – Continuous

• Performing multiple tasks – Continuous

• Operating standard office equipment - Continuous

• Responding quickly to sounds – Occasional

• Sitting – Continuous

• Standing – Occasional

• Walking – Occasional

• Moving safely in confined spaces – Occasional

• Lifting/Carrying (under 25 lbs.) – Occasional

• Lifting/Carrying (over 25 lbs.) – Never

• Squatting – Occasional

• Bending – Occasional

• Kneeling – Never

• Crawling – Never

• Climbing – Never

• Reaching overhead – Never

• Reaching forward – Occasional

• Pushing – Never

• Pulling – Never

• Twisting – Never

• Concentrating for long periods of time – Continuous

• Applying common sense to deal with problems involving standardized situations – Continuous

• Reading, writing and comprehending instructions – Continuous

• Adding, subtracting, multiplying and dividing – Continuous

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all responsibilities, duties and skills required. The listed or specified responsibilities & duties are considered essential functions for ADA purposes.

Who We Are:

<